Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: 7nyERQAQelmw7tmnzZ9ZXM0Fr9ujBJ9KInXsckZ6w6U=
Subject key identifier: BB:A6:2D:84:09:24:CD:77:F4:8D:8B:68:F9:62:4C:F5:FC:A9:D2:84
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 01A06E02C27359C99FB184C867FA0C671F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 12BF
Signing time: Fri 04 Sep 2026 20:01:09 +0000
Manifest this update: Fri 04 Sep 2026 20:01:09 +0000
Manifest next update: Sat 05 Sep 2026 20:01:09 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: RvzzyzG5IXO9WRD77yG3KfEodBQaCyCvzx3zj7l66tc=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:c2:73:59:c9:9f:b1:84:c8:67:fa:0c:67:1f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Sep 4 20:01:09 2026 GMT
Not After : Sep 5 20:01:09 2026 GMT
Subject: CN=bba62d840924cd77f48d8b68f9624cf5fca9d284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:85:17:f9:7b:fa:98:19:43:d5:cf:bb:ab:
2a:1c:9f:0a:7e:7f:6c:83:c7:be:98:19:46:9f:90:
4b:b7:e4:0a:17:2c:aa:41:37:48:d6:ba:97:ac:90:
69:04:a4:31:15:5e:75:74:13:a7:1e:a6:da:00:76:
70:f2:5b:cb:c1:86:78:d9:30:af:5b:91:01:fc:d3:
fd:05:d5:50:ea:ac:85:0d:4f:0b:21:c0:0e:b7:c8:
43:ae:3e:9e:d2:a1:6e:af:b7:da:f7:53:c1:c7:c9:
34:f1:99:9d:2b:ac:1c:bb:5d:80:41:77:a6:45:31:
1d:11:23:0f:1e:bd:26:d0:08:e2:b1:91:26:4a:ae:
43:32:d1:50:bd:79:d0:62:d4:6b:ee:d3:6e:cf:33:
36:f7:34:87:2a:51:02:e1:59:9d:10:79:86:4e:bc:
79:51:cc:27:c0:3f:c5:f9:b3:99:58:29:48:f7:48:
c5:5f:e9:0d:f3:7b:3f:bd:9c:87:53:a1:f2:d7:29:
82:ab:b6:22:9a:ed:ca:16:60:74:38:f8:05:3b:41:
ce:4e:9d:66:f5:31:c4:bc:c5:5a:94:d6:a8:dc:07:
d3:82:42:15:1d:8c:b5:a9:9b:b5:5f:25:c8:c5:4f:
40:df:93:ef:eb:42:30:42:e3:15:c9:93:af:9a:51:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:2D:84:09:24:CD:77:F4:8D:8B:68:F9:62:4C:F5:FC:A9:D2:84
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b5:ad:b4:ed:3b:42:ae:66:50:58:59:f0:13:51:41:78:3e:
08:ce:4c:33:9e:9f:5b:61:24:d1:7a:db:6b:8c:d9:c5:09:93:
a4:9e:93:2e:0b:e6:ae:60:1b:d2:c6:ea:3e:6b:cc:55:38:f1:
48:9c:89:d4:9a:c6:4e:ea:a0:e8:ae:28:51:28:43:fa:f5:48:
14:9f:6a:ba:44:49:d1:1b:ff:40:1e:c5:13:78:d6:bf:90:b4:
86:c5:4c:6f:ab:1a:8a:a4:14:0e:8c:3f:be:b1:84:60:b9:45:
90:ab:3a:5c:2b:c6:60:27:3c:8b:d1:f2:b1:73:6a:67:54:3a:
46:7d:7c:ef:10:c4:5d:22:7c:0e:19:a5:7e:89:34:c5:35:e7:
25:a8:5a:e6:59:61:70:9c:d2:a4:ad:e9:47:64:54:9b:8f:26:
26:6b:7d:39:bf:ec:ac:74:43:db:9d:7a:db:1b:f4:70:10:01:
0e:b0:41:18:6b:b3:17:ec:06:94:7a:b9:a9:6a:52:dd:50:8b:
7f:81:08:df:1a:3d:13:24:cb:76:0a:b6:7e:e7:ad:87:5b:64:
fe:a3:50:12:ee:74:17:f4:c6:4c:f6:22:47:51:45:53:68:29:
93:8e:6b:99:14:41:48:21:63:79:9c:1f:c4:c3:95:61:3c:ef:
7a:b7:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:37 2026 by rpki-client