Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: Y8noYVKNKypMI/Cd/ZMMHI3ZyA8nidGX/D5dJRW/nNc=
Subject key identifier: 05:D1:79:CB:5F:CD:85:37:F7:E8:D9:8B:87:A9:98:BF:D7:05:F0:1C
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 01A08AFA5FD021980835F5355848B34219C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0A71
Signing time: Thu 10 Sep 2026 11:00:59 +0000
Manifest this update: Thu 10 Sep 2026 11:00:59 +0000
Manifest next update: Fri 11 Sep 2026 11:00:59 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: g5B2i4N5LcqofGCSmCuSqm9+wP7uZ9ygiUy0xOx2Bk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:5f:d0:21:98:08:35:f5:35:58:48:b3:42:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Sep 10 11:00:59 2026 GMT
Not After : Sep 11 11:00:59 2026 GMT
Subject: CN=05d179cb5fcd8537f7e8d98b87a998bfd705f01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:71:06:f4:28:35:e3:c3:da:c5:09:7e:b2:36:
77:99:69:0d:e6:0d:30:2b:df:62:2b:0b:62:66:2c:
c6:9d:20:cb:50:18:ce:cc:fb:1e:42:8c:73:35:c2:
6b:4f:26:45:19:f0:98:ad:e3:9d:cd:f3:e8:d1:68:
16:00:c0:be:4c:c0:4f:cf:b3:d0:f3:b0:67:9a:eb:
97:d7:59:02:1a:62:34:25:2c:cc:81:aa:8c:ee:0e:
f2:e7:d9:59:c6:49:fb:b4:89:cb:ff:99:d7:e2:a1:
90:e7:f6:7c:ca:f5:28:ce:cc:ac:b4:36:bb:98:6c:
da:3a:c7:d3:09:f8:b6:50:46:a3:1f:e1:6b:05:75:
79:c2:c5:f2:c4:ad:14:c8:1e:4e:dc:a2:e1:58:17:
8d:be:85:ee:bb:41:60:ee:38:8b:84:70:15:b7:2b:
38:9a:f9:1b:7b:6a:f5:9f:97:59:c6:06:5b:7d:65:
3c:8e:0e:46:5e:0f:04:a8:c5:62:a5:c7:b6:23:5a:
8b:ac:2e:ea:d5:62:45:52:bb:ef:fd:e7:01:57:64:
42:ca:4b:b9:de:35:28:5b:a8:5f:e0:97:5f:e8:f6:
24:e3:4c:7f:a9:9e:08:1e:11:6f:f1:82:fb:2a:0c:
99:a3:ae:f9:07:2d:27:1a:d6:cc:e8:6f:e0:17:21:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:79:CB:5F:CD:85:37:F7:E8:D9:8B:87:A9:98:BF:D7:05:F0:1C
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4a:0d:c4:ef:38:d4:94:ec:f8:49:c4:42:85:d2:9b:d4:00:
da:88:00:8c:d2:98:81:9b:13:c4:48:9d:67:91:bb:64:00:42:
42:36:04:a5:04:d3:5b:3c:31:14:f5:d4:d0:b9:9b:c2:7a:3e:
41:f6:6d:2d:e6:36:cb:40:19:e2:63:3f:3c:84:3e:e4:9e:ce:
b0:69:5f:9f:52:d6:2f:55:2f:a5:75:55:60:af:0e:e5:1b:18:
2e:be:71:c4:06:f4:1f:f1:ec:4c:9f:f6:9d:41:2e:0a:e1:17:
12:d1:b3:e4:c1:0f:3c:47:85:1e:ba:2d:6b:3a:09:9a:e6:e7:
6d:21:1c:27:84:fe:c5:c6:63:f4:a8:61:f5:06:8f:9e:0a:3f:
7d:07:78:ea:6d:f2:70:d1:cc:80:20:e8:61:9c:c4:80:d8:5e:
b2:ad:72:06:e6:d1:7e:c9:e3:32:9a:2d:a6:d9:87:11:65:31:
5c:57:35:44:db:2b:8e:90:8d:ad:0c:9d:d3:8f:10:a9:63:b3:
c2:ab:fb:80:13:48:85:79:61:b1:bb:94:b5:cb:69:5e:86:61:
19:3e:e4:31:56:b1:80:a4:6e:d5:02:7e:5c:72:6d:dd:74:8e:
fd:5a:b4:5f:cf:74:d0:8a:2e:84:f4:e3:58:10:0b:c5:be:33:
50:9b:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:49 2026 by rpki-client