Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: dKsQHQCaBK00DahApHCxltBVESWcQJyP0jIA/z7LAOo=
Subject key identifier: 9A:E4:7C:29:BE:A6:BD:AB:52:45:C5:92:50:C9:50:97:28:6A:DF:A1
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 01A1803DEA8A4705F3EC9BD88F6CE0FE41B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0AF0
Signing time: Wed 28 Oct 2026 02:01:43 +0000
Manifest this update: Wed 28 Oct 2026 02:01:43 +0000
Manifest next update: Thu 29 Oct 2026 02:01:43 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: 0PhDfSSTlWulC87ihWG9jBrqouE6fmETNEKDWhdqJ2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:ea:8a:47:05:f3:ec:9b:d8:8f:6c:e0:fe:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Oct 28 02:01:43 2026 GMT
Not After : Oct 29 02:01:43 2026 GMT
Subject: CN=9ae47c29bea6bdab5245c59250c95097286adfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:f5:83:78:3c:8a:33:0e:2f:c8:fd:a2:f9:
27:66:a5:9c:e5:dc:68:49:dd:4a:7b:65:81:02:40:
31:29:e9:ac:96:63:f2:16:c0:ca:a4:4a:ab:84:e0:
94:2c:37:a2:2a:9b:94:19:79:8d:80:ec:01:8b:f2:
14:5d:6b:61:a8:b1:f2:0f:6c:b8:8c:ab:3e:a9:ab:
20:d3:a5:cd:a8:02:d7:9b:83:63:ff:d6:7f:16:01:
f2:d4:6d:36:8d:a8:00:ae:e7:c5:5d:eb:9c:e5:0f:
9e:37:08:e5:e8:df:49:cb:dd:26:13:68:19:db:54:
8c:0d:51:c0:fe:75:47:b3:52:74:df:65:c0:03:bb:
eb:63:c4:53:8f:dc:f1:2e:84:aa:d0:5d:b0:5f:11:
e3:72:dd:22:be:9c:04:de:47:47:bb:8d:15:80:7e:
a0:bf:f3:99:29:ec:a5:c4:8a:b4:48:00:1a:d7:1e:
08:c9:fd:35:67:c1:61:3c:27:85:69:22:f4:bd:d7:
f9:96:38:7d:77:9e:8d:ff:d7:14:8b:f5:7a:47:f2:
9f:6e:a3:a2:4e:44:2c:ad:2f:29:1a:57:10:37:ed:
5d:fb:78:86:94:4b:ee:22:6d:a6:9d:0e:77:e9:e7:
96:6a:9b:e0:15:24:74:a3:57:f8:58:96:b4:b9:dc:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:7C:29:BE:A6:BD:AB:52:45:C5:92:50:C9:50:97:28:6A:DF:A1
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cb:61:64:67:f7:ce:d6:bd:5a:b8:1c:c1:bb:43:85:0b:aa:
d2:51:31:97:cc:55:b1:2c:ac:58:68:04:db:b9:73:19:eb:68:
54:f1:58:d7:33:d3:65:ed:02:22:71:2f:47:dd:86:0f:bc:24:
9d:cb:6d:be:d1:7f:ab:b2:9b:69:9f:20:a6:bb:0c:d4:8e:b3:
b6:a6:82:1d:a7:ed:ab:ff:62:2e:f7:59:44:f0:56:e6:a8:a7:
69:72:e8:9c:3b:c3:b7:8a:44:4c:be:ce:38:27:8e:4d:23:1a:
22:c6:e8:07:e3:aa:61:f3:a5:fa:7f:97:46:ae:d6:2e:7e:99:
2d:b3:7b:1e:1e:87:b8:a5:16:15:f4:26:d9:de:30:84:fa:69:
7a:3f:90:2b:b1:58:4e:30:c0:cc:d3:67:1c:c5:fe:fa:87:48:
74:24:ee:f5:9d:ef:32:19:30:0f:53:f7:68:4e:69:16:30:06:
c8:9b:50:4b:6b:40:4e:b6:a7:bd:12:66:d2:cd:bb:ef:3a:1e:
d8:74:b2:69:44:f6:6b:02:b7:6d:d6:85:5a:d7:57:67:bb:28:
d6:8f:39:75:33:45:c9:61:b6:b7:7a:90:48:c8:aa:22:6a:ce:
88:80:ab:67:8a:b8:aa:b1:ce:47:a0:3d:35:f1:d7:fd:ad:e2:
c7:89:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:53 2026 by rpki-client