Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: lNE1uO9ilBp+7nI1gdZJZNN4Hd94r9DXJqadAnPiJgI=
Subject key identifier: 74:7D:EA:F9:A6:C3:10:BE:44:E1:A6:F9:04:29:E2:DA:82:6B:35:E2
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01A1822BB78FFDE46BB37F92BE316D5CE57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 11:01:05 +0000
Manifest this update: Wed 28 Oct 2026 11:01:05 +0000
Manifest next update: Thu 29 Oct 2026 11:01:05 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: qUBa0UnUJ90oOxePBBrQQkSZPy6Dwqx9IXZwK5xZgN0=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:b7:8f:fd:e4:6b:b3:7f:92:be:31:6d:5c:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Oct 28 11:01:05 2026 GMT
Not After : Oct 29 11:01:05 2026 GMT
Subject: CN=747deaf9a6c310be44e1a6f90429e2da826b35e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:20:57:e6:74:e3:41:a2:25:37:a1:5c:5f:
ee:44:e0:f6:71:c3:72:ee:1c:60:ac:b2:82:82:53:
58:93:c4:68:a1:64:90:1b:f0:5a:73:b0:d5:92:12:
a6:db:41:6e:ef:c4:ab:b8:18:93:b9:5a:8e:9a:ce:
71:32:ae:cf:a7:48:fa:f7:23:20:15:26:da:f4:1e:
30:06:92:17:80:b0:f9:92:f9:20:01:c3:0b:ae:6a:
43:f8:1b:f7:06:5a:7f:0a:e9:39:b0:4a:4c:19:e5:
73:a2:aa:84:cd:eb:0e:03:77:ba:90:d0:c7:13:4b:
98:73:09:d5:51:61:47:07:81:a7:bb:31:15:84:3e:
95:ff:b2:7d:f2:2b:7e:4c:7c:35:4f:56:f3:de:68:
3d:a9:42:74:ac:27:47:6b:51:19:4a:e7:48:76:0c:
17:34:98:42:3f:d0:16:9d:92:9a:3e:69:66:a4:b3:
9f:d0:2d:ac:7a:56:71:93:58:13:5a:60:d1:11:3f:
6e:2b:c4:eb:4f:ad:6b:6f:eb:f7:4f:c2:d4:94:c9:
e7:fb:90:64:19:1c:83:9d:60:f4:ce:9d:70:42:1c:
f5:cc:50:34:f2:1f:19:8d:13:6a:7e:b7:4f:ae:25:
5b:5f:4b:fb:72:5e:8b:ea:05:11:96:f4:84:92:5d:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:EA:F9:A6:C3:10:BE:44:E1:A6:F9:04:29:E2:DA:82:6B:35:E2
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6e:58:b1:1d:b8:a1:fe:af:aa:8d:32:e6:4b:4f:59:0f:22:
89:94:2f:6e:1f:76:3f:38:a6:f1:e3:a3:1b:09:12:d1:b4:d5:
0f:9a:4c:0f:53:02:91:b2:e9:51:5d:d6:fa:34:6e:30:a6:a6:
2b:0f:97:b3:8b:81:ce:31:a1:f0:16:46:66:44:81:6e:24:af:
9f:97:8d:3c:7d:37:c6:ba:04:c8:59:e5:50:f1:09:aa:db:2f:
23:aa:3f:97:bc:b3:39:69:76:14:96:f4:aa:3f:33:58:f1:82:
5a:42:f2:8d:f0:fb:b2:5c:0a:46:34:af:e4:6f:fa:41:dd:32:
93:f5:7e:d4:5f:e5:4d:d6:ca:68:2c:9e:77:66:c0:18:c9:20:
14:8b:e6:03:b7:c3:f9:ae:03:97:e4:af:61:6d:28:40:87:2e:
f0:5b:83:e3:8a:00:fe:f6:dd:26:e9:7a:49:e8:81:69:9e:dc:
db:00:3b:a7:1c:ab:38:4d:89:d9:06:ca:78:c0:85:9b:86:16:
b8:6c:c4:2e:ee:fe:64:46:fe:fd:ce:4c:51:64:76:f2:ac:22:
65:7a:37:2b:ce:8e:b4:29:2e:56:cd:6e:70:6d:7b:ab:b3:90:
f4:9e:f8:e4:60:97:14:be:58:38:4d:b2:28:f2:fd:33:d8:f6:
7c:bf:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:28 2026 by rpki-client