Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: 127Ra6lGiuMNcBNEAR+IZTlOZVFYpYny6ZmaPnylY5I=
Subject key identifier: 46:E7:9E:FD:3F:AF:EB:0F:98:39:EA:B7:63:B5:A9:F2:24:F5:38:15
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 01A08FB27424AA2B44D65125DCEB44AC88D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 0437
Signing time: Fri 11 Sep 2026 09:00:31 +0000
Manifest this update: Fri 11 Sep 2026 09:00:31 +0000
Manifest next update: Sat 12 Sep 2026 09:00:31 +0000
Files and hashes: 1: 7l7KxRCau47UYfLQ6nFCQh8OO4k.roa (hash: QvZhEZbpdkG/y8Ol7BucQrlHqkPAhPZcbBhUGf6BsQQ=)
2: QmdhaMtHTN_hz0nBfvQHAkwJ7Rc.roa (hash: sO6rcS+cSDwbjSCT0RMv1rZcc5PoQJvTaSR3U1N9VEo=)
3: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: J9Y4DpOuZhxA4OVGziCafWPbgMbOVooPSCpRYvAyhwU=)
4: hRF9ml8v_UduMvXzWno8qvtUHJY.roa (hash: aeqiSYNEe9b/RioY7u2z8TFho5XR5ZNUJdfUaIjcd7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b2:74:24:aa:2b:44:d6:51:25:dc:eb:44:ac:88:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Sep 11 09:00:31 2026 GMT
Not After : Sep 12 09:00:31 2026 GMT
Subject: CN=46e79efd3fafeb0f9839eab763b5a9f224f53815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:2d:c6:a1:d7:88:a9:11:83:9f:f2:12:72:
f2:20:fe:f4:2b:f1:35:c2:ba:db:6b:88:95:cb:03:
cb:f0:30:6e:c4:d0:93:72:d5:32:88:dc:75:c1:0f:
c3:52:03:be:ba:93:da:64:4e:57:04:4b:50:a8:e7:
7a:8b:35:23:cf:68:90:e3:90:13:35:cb:a4:9e:cd:
00:38:ee:5d:e3:de:54:16:19:22:93:4e:f9:bc:6f:
d2:64:ab:e7:02:26:cf:e9:29:94:4e:62:e9:58:01:
4c:01:17:e3:90:14:d2:b6:2d:08:20:20:dd:7b:42:
ce:30:f6:d4:cd:f3:c6:a5:ef:b4:76:65:e2:19:97:
4a:13:d5:36:0c:18:da:86:7a:36:fc:3b:21:31:cc:
42:44:77:b6:c5:22:2a:8c:bb:20:a9:d8:66:e8:bb:
a7:d2:1e:92:20:bc:33:8d:0c:db:cd:fd:65:2e:5c:
31:e4:72:70:a3:60:84:f3:65:02:c8:8a:fd:44:a6:
71:b4:8b:db:35:f2:c1:05:67:ef:ef:0a:ae:d8:df:
72:f9:19:43:97:44:93:f9:12:35:0d:94:9b:a8:b3:
2b:e4:e6:d8:6b:6e:a3:29:89:e9:72:fe:b7:7c:bb:
de:79:90:a7:3d:61:91:0b:8a:43:40:07:c9:5c:2b:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:9E:FD:3F:AF:EB:0F:98:39:EA:B7:63:B5:A9:F2:24:F5:38:15
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:98:67:f7:ae:c2:49:51:c6:6e:79:a9:e9:d1:20:02:09:
aa:e9:f1:5e:b0:f7:23:71:09:3e:f1:78:85:47:db:86:b6:e1:
d3:56:03:da:77:70:82:13:91:b5:9d:a9:cd:39:55:5e:7a:b0:
88:b9:5d:17:23:1b:f6:d2:24:79:47:49:d4:d5:64:43:ce:96:
8d:75:4a:41:87:c2:0b:17:45:7e:8b:e7:9e:90:1e:78:dd:88:
5b:5b:4d:c0:70:38:7c:a7:ca:71:95:f4:34:d5:1c:1b:57:a7:
d4:97:76:be:07:96:94:a2:55:cc:f4:e7:35:9f:44:0c:6a:84:
69:e5:55:5b:9a:be:93:c0:0f:16:62:bb:87:c4:a0:8d:08:1b:
5e:17:77:8c:39:f6:e1:9f:9e:bd:b3:62:b2:9e:78:63:19:32:
62:a7:2b:cf:7c:c1:3a:8c:e4:6c:58:ab:5f:62:f2:da:13:56:
92:53:69:7c:9e:6c:ed:a6:12:2a:42:5c:69:14:a1:21:61:d5:
75:94:bf:e9:94:62:86:52:ac:ee:12:ef:9c:b7:a3:af:a3:40:
33:53:b3:bb:50:11:31:5c:0d:4a:26:c2:4c:c1:d0:39:e9:20:
37:9f:9c:85:b7:98:b9:b0:03:0f:f8:91:57:85:7f:e1:f1:88:
fc:ab:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:01:28 2026 by rpki-client