Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
File: RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft (raw, json)
Hash identifier: QARjfoGl6C6WI8y3xAzqKAT9tAu5O5pLXhXMlKeoUSw=
Subject key identifier: 0E:EB:F6:B3:8E:38:01:2E:AA:7C:49:B1:9A:F0:05:FD:41:EE:25:82
Authority key identifier: 45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
Certificate issuer: /CN=452641da06225567531512ac0c0a95a919d43cad
Certificate serial: 01A10436F59E5DF9C4EF37485C053CE91FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:01:12 +0000
Manifest this update: Sun 04 Oct 2026 00:01:12 +0000
Manifest next update: Mon 05 Oct 2026 00:01:12 +0000
Files and hashes: 1: RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl (hash: g222uO8UpBgkggzudUC3puL9N5cgkSLj8zo5UJwZ0cs=)
2: eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa (hash: TUmMKY/LqdBmgi+dt4eIZs1daoacVJWVFics7KjldoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:36:f5:9e:5d:f9:c4:ef:37:48:5c:05:3c:e9:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452641da06225567531512ac0c0a95a919d43cad
Validity
Not Before: Oct 4 00:01:12 2026 GMT
Not After : Oct 5 00:01:12 2026 GMT
Subject: CN=0eebf6b38e38012eaa7c49b19af005fd41ee2582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:81:80:82:db:5a:75:c2:66:8d:5b:06:3e:
be:5b:20:2f:2b:9b:77:fb:86:c7:b8:4e:d0:48:e5:
8c:a6:cd:c2:f1:27:0c:a9:1e:96:40:b2:f4:df:75:
5c:4f:88:ee:53:85:85:38:61:c8:ed:e3:f2:70:86:
28:df:e8:6b:57:f3:52:5c:dc:05:0c:ba:f6:a3:7e:
09:f0:64:1c:f1:68:ca:c1:ee:f7:f5:a9:d4:d2:ce:
e4:b7:74:ec:64:93:ea:1f:b7:d7:a4:49:e8:e6:a9:
e4:9c:f8:05:20:8d:be:71:e7:ef:41:47:1e:85:49:
aa:e0:04:95:56:9a:2c:e4:eb:b5:ca:22:81:8f:b5:
9b:04:9e:95:de:29:14:f6:85:c8:1e:91:ee:f2:79:
f6:7a:32:5b:11:95:ab:a7:3c:0d:53:21:dc:bb:47:
d7:ce:f7:dc:cf:db:6e:b5:6a:4e:d7:f8:bd:37:12:
92:df:0b:b2:d7:06:92:7d:9e:27:00:9b:67:d9:75:
71:54:37:94:cd:21:1a:2c:cf:f1:02:19:a5:9f:68:
9f:5c:56:3b:26:43:56:5b:f7:fc:12:ac:48:18:02:
88:90:08:e6:34:7a:c8:e4:7d:fc:26:b6:ac:7e:0c:
6f:53:75:b0:e2:d2:88:c1:79:bf:bb:2b:3f:b4:2d:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:F6:B3:8E:38:01:2E:AA:7C:49:B1:9A:F0:05:FD:41:EE:25:82
X509v3 Authority Key Identifier:
keyid:45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:72:6a:6b:4d:27:ab:81:ba:e8:70:28:3d:7e:8f:8f:5f:b3:
1a:3d:c1:03:d4:b6:48:39:0f:ac:54:b3:71:8e:ee:a0:d9:84:
c3:2f:40:bb:50:46:8d:a9:d4:dc:c1:21:c9:e7:80:51:91:45:
96:75:35:34:ea:7a:9f:af:a5:be:04:ce:e7:52:c9:20:81:c6:
56:8f:5c:ce:33:7d:b6:28:6e:bb:ee:6a:97:2d:8a:c8:ee:d1:
c4:bf:27:9a:25:d7:96:ea:04:20:5a:f9:32:5f:8e:76:36:bb:
f3:8f:63:62:05:be:c5:7a:7c:ef:8e:0d:5f:8a:60:62:c1:53:
b5:57:24:83:a8:da:9f:c1:85:bc:d6:25:f3:60:30:28:df:a0:
d2:55:06:7a:11:0f:f1:c4:55:30:7f:0b:d7:5d:44:2e:f2:63:
df:23:c6:e2:b6:54:2d:86:1c:6e:1a:b6:86:8e:1f:df:68:23:
63:82:b4:a0:e2:c3:2f:aa:0a:70:c6:4b:61:0c:e8:81:63:c9:
a0:21:ab:79:37:6c:e2:8d:a3:d8:de:18:4f:20:5b:db:00:ca:
dc:f5:77:26:6b:18:c5:56:59:7a:c2:20:a2:13:e7:8c:16:cd:
e7:41:3d:b1:2a:f1:5c:d2:c5:75:d6:1b:81:aa:64:86:a7:03:
72:f8:57:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEENvWeXfnE7zdIXAU86R/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjY0MWRhMDYyMjU1Njc1MzE1MTJhYzBjMGE5NWE5MTlk
NDNjYWQwHhcNMjYxMDA0MDAwMTEyWhcNMjYxMDA1MDAwMTEyWjAzMTEwLwYDVQQD
EygwZWViZjZiMzhlMzgwMTJlYWE3YzQ5YjE5YWYwMDVmZDQxZWUyNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmriBgILbWnXCZo1bBj6+WyAvK5t3
+4bHuE7QSOWMps3C8ScMqR6WQLL033VcT4juU4WFOGHI7ePycIYo3+hrV/NSXNwF
DLr2o34J8GQc8WjKwe739anU0s7kt3TsZJPqH7fXpEno5qnknPgFII2+cefvQUce
hUmq4ASVVpos5Ou1yiKBj7WbBJ6V3ikU9oXIHpHu8nn2ejJbEZWrpzwNUyHcu0fX
zvfcz9tutWpO1/i9NxKS3wuy1waSfZ4nAJtn2XVxVDeUzSEaLM/xAhmln2ifXFY7
JkNWW/f8EqxIGAKIkAjmNHrI5H38JrasfgxvU3Ww4tKIwXm/uys/tC2kMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7r9rOOOAEuqnxJsZrwBf1B7iWCMB8GA1UdIwQY
MBaAFEUmQdoGIlVnUxUSrAwKlakZ1DytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNaQjJnWWlWV2RURlJLc0RBcVZxUm5VUEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt
ZDYxOTBjY2Y3ODU3LzEvUlNaQjJnWWlWV2RURlJLc0RBcVZxUm5VUEswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3
LzEvUlNaQjJnWWlWV2RURlJLc0RBcVZxUm5VUEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHJqa00n
q4G66HAoPX6Pj1+zGj3BA9S2SDkPrFSzcY7uoNmEwy9Au1BGjanU3MEhyeeAUZFF
lnU1NOp6n6+lvgTO51LJIIHGVo9czjN9tihuu+5qly2KyO7RxL8nmiXXluoEIFr5
Ml+Odja7849jYgW+xXp8744NX4pgYsFTtVckg6jan8GFvNYl82AwKN+g0lUGehEP
8cRVMH8L111ELvJj3yPG4rZULYYcbhq2ho4f32gjY4K0oOLDL6oKcMZLYQzogWPJ
oCGreTds4o2j2N4YTyBb2wDK3PV3JmsYxVZZesIgohPnjBbN50E9sSrxXNLFddYb
gapkhqcDcvhXfQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:41:46 2026 by rpki-client