Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
File: RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft (raw, json)
Hash identifier: 2NoxRk66S1JAC/1/xtDBtd8KkeerQAoocFd63opsbPE=
Subject key identifier: 31:96:6E:88:40:99:02:2F:54:6C:2F:5D:F0:71:23:88:CB:33:51:B2
Authority key identifier: 45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
Certificate issuer: /CN=452641da06225567531512ac0c0a95a919d43cad
Certificate serial: 019FF9B5A10D22420EA0CE8DA891F1D8E9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:00:57 +0000
Manifest this update: Thu 13 Aug 2026 06:00:57 +0000
Manifest next update: Fri 14 Aug 2026 06:00:57 +0000
Files and hashes: 1: RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl (hash: YX6vJaijMRbFJl5Yu6uLAgR2MkdHaomRZAn2WabB/Ps=)
2: eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa (hash: TUmMKY/LqdBmgi+dt4eIZs1daoacVJWVFics7KjldoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b5:a1:0d:22:42:0e:a0:ce:8d:a8:91:f1:d8:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452641da06225567531512ac0c0a95a919d43cad
Validity
Not Before: Aug 13 06:00:57 2026 GMT
Not After : Aug 14 06:00:57 2026 GMT
Subject: CN=31966e884099022f546c2f5df0712388cb3351b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:c9:e0:bb:af:3b:8d:6f:79:d5:48:58:e3:
f5:a0:c1:dd:29:2f:c4:1d:59:2e:78:a5:6f:d8:33:
42:6c:c2:03:69:0d:46:54:73:db:d9:a9:92:a6:ea:
81:8f:8c:15:1b:4e:ac:76:cc:a3:e8:d0:9f:e2:b4:
e8:57:75:ab:9a:fa:dc:db:4c:26:f6:97:cb:8a:10:
88:a9:42:ab:22:f3:7b:5f:3c:c7:79:25:6d:c3:43:
7c:e8:be:8f:06:b0:8b:92:ea:2c:6b:d5:5a:e3:bc:
8b:a7:6e:00:d1:25:1a:e8:61:f2:67:02:10:42:b9:
e3:f4:78:0b:9f:99:c1:d8:73:70:96:be:e7:bd:0f:
ee:ef:be:5d:5f:81:dc:d2:e7:b8:bf:99:aa:4f:d1:
1f:62:be:fc:e8:94:cf:54:5c:e8:c7:22:34:2b:f6:
c9:a1:1d:3d:f2:14:b8:32:6b:d8:14:ec:01:c1:62:
29:cb:0e:b4:1d:7b:cc:3d:79:1b:95:93:94:1f:70:
f0:3f:11:46:ba:86:08:0e:19:fa:7d:77:3e:55:cc:
a9:04:a1:66:40:ab:ee:93:18:d5:f2:5d:78:e7:25:
cd:42:6c:aa:10:5f:38:44:54:81:11:29:f8:ae:07:
4f:bb:1d:ed:7c:1a:19:42:48:36:67:ad:d4:30:9b:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:6E:88:40:99:02:2F:54:6C:2F:5D:F0:71:23:88:CB:33:51:B2
X509v3 Authority Key Identifier:
keyid:45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c5:a6:d9:29:f8:64:2f:ce:c2:42:21:36:98:b1:98:16:fa:
c7:40:30:9f:dc:ce:6a:68:e3:56:34:d9:14:47:f3:34:8f:8e:
79:93:0d:f7:96:dc:de:02:85:1a:8d:63:27:14:d7:12:71:02:
e4:fe:df:4c:8f:09:f9:49:3f:34:b3:f9:55:e6:ea:ae:37:98:
0f:85:50:ba:3f:02:d4:b0:94:58:9a:8d:3b:3a:ab:e2:e1:4c:
5a:51:b6:81:22:10:4f:e0:51:7a:c0:f8:a0:9f:6b:3d:ce:09:
ae:ba:c4:ac:8d:6e:c8:c0:f0:43:35:04:ff:8f:64:66:da:95:
3f:af:00:6a:40:72:f0:11:28:1c:c5:d0:30:8d:fb:c3:5e:8f:
30:5f:2e:5a:59:75:b5:e4:ee:ac:fd:57:42:bf:74:ff:1e:de:
1c:52:0b:1d:dd:3d:3f:06:e9:66:98:fe:ed:d0:aa:d0:c5:d4:
71:4f:f5:dc:93:a1:6b:47:84:82:d3:2a:03:36:10:bc:a6:a9:
c1:42:14:67:45:9f:c5:20:cd:9b:63:73:50:75:de:ee:5d:35:
f2:3c:e8:0a:0c:81:89:1b:18:4c:81:f9:76:c1:10:f1:b4:cb:
6b:a9:f9:08:78:03:e0:d4:b1:6c:21:02:51:1c:60:38:77:d1:
8f:05:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:37:45 2026 by rpki-client