Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: f6lGsS6ur+ocKmvYLW5cOi18MtpmgmmiUSwjGzdLtu0=
Subject key identifier: 98:21:3B:0F:9A:0A:6C:19:18:5D:1D:23:2C:2C:B6:91:33:AF:F2:6A
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019F9D70936108D5A704EB59C7460DFD5878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 08:00:28 +0000
Manifest this update: Sun 26 Jul 2026 08:00:28 +0000
Manifest next update: Mon 27 Jul 2026 08:00:28 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: 3pna9M2821d9dHBo/rzdaLPaxwLKzVGQqATrZqLCWj8=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:70:93:61:08:d5:a7:04:eb:59:c7:46:0d:fd:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jul 26 08:00:28 2026 GMT
Not After : Jul 27 08:00:28 2026 GMT
Subject: CN=98213b0f9a0a6c19185d1d232c2cb69133aff26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:09:26:e3:53:2b:66:da:25:85:3c:90:32:
35:3b:2c:0c:73:81:8a:b9:a3:2c:5e:55:90:13:5a:
69:8f:4d:e6:9d:fd:fb:0f:d8:04:52:0c:c7:db:ca:
ee:19:1e:61:28:5b:ec:fb:f4:d1:d6:0b:aa:32:8c:
cb:ed:7a:1c:e9:ff:f6:dd:6b:e2:30:71:14:ef:94:
2f:e3:9e:dc:61:36:90:4e:40:0e:7a:62:68:1c:1c:
c4:0e:3d:51:b6:63:84:4c:db:57:13:45:ac:a7:c7:
01:c8:94:b7:79:50:63:a8:1a:98:40:87:e3:ed:fd:
59:4b:b5:a2:f7:49:9c:6c:dd:87:9a:da:72:a2:31:
9b:dd:5b:ad:b1:f6:33:a8:a1:36:18:31:aa:dd:8d:
a8:17:9d:0d:fc:68:d1:77:cf:be:c0:47:15:90:12:
4a:b6:c0:3d:5f:d9:17:54:7a:17:93:49:d8:5d:d9:
e7:6c:04:2c:59:6c:d9:cf:3a:c8:98:ca:a4:38:04:
7b:98:89:27:d1:f9:8a:2a:69:b7:cf:64:32:a9:1c:
1e:5c:d4:88:24:3a:64:5e:6b:23:99:08:b7:13:78:
5f:be:34:45:c2:bb:96:37:0d:3b:ad:c7:b2:4d:3c:
8e:10:fb:aa:49:d0:9c:fa:bc:09:b0:e7:ca:97:26:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:3B:0F:9A:0A:6C:19:18:5D:1D:23:2C:2C:B6:91:33:AF:F2:6A
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:28:a4:65:21:98:4d:f5:d5:54:54:31:b8:28:37:3d:7b:84:
e2:49:e9:1f:0b:4a:42:02:52:af:f6:41:cf:51:74:41:de:af:
9d:28:a0:f8:44:7f:f3:7a:5c:63:f0:31:6a:25:0e:f5:ca:7b:
53:b1:46:a2:f8:d6:ee:65:1c:06:df:d7:cf:a5:bb:00:ea:63:
58:ac:6d:f9:e8:e3:91:09:80:08:65:bf:9a:73:76:83:74:38:
bb:44:cf:01:c6:ed:c2:8b:3c:98:3c:d7:41:f6:20:58:f7:1d:
85:b3:57:8e:7d:b8:c6:63:a7:16:aa:e1:ec:28:3b:f7:b9:6e:
3e:ae:28:39:74:19:be:c7:17:bc:cc:a5:76:78:50:bd:27:85:
8b:1c:e4:c0:d7:71:6b:a0:c6:c4:6a:23:09:5f:32:e6:38:3c:
16:15:e9:af:35:81:3d:5e:c1:c4:51:12:5c:30:cc:2d:29:7e:
6f:ee:d5:0d:db:0c:72:eb:a3:a6:0d:ad:76:51:23:5f:4b:69:
8c:c4:be:d4:42:be:c0:c9:27:67:c7:c1:cb:bf:db:1b:1b:d7:
ec:48:23:08:b9:33:27:4e:f0:52:57:0e:20:8b:77:fe:84:1a:
12:80:e4:f3:8c:3e:92:c3:46:72:3b:6d:35:f5:15:12:19:30:
91:17:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:50:59 2026 by rpki-client