Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: VHwEFZOZbY+MJq3vmRsL0GA9PxqeO2pz1wx65y3cExM=
Subject key identifier: 47:77:42:AF:5E:AC:C9:6B:14:1D:01:25:CB:EB:5E:B9:08:6F:85:21
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 01A17C97C2A93BFF10FBA30F29000F6EFFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 118B
Signing time: Tue 27 Oct 2026 09:01:22 +0000
Manifest this update: Tue 27 Oct 2026 09:01:22 +0000
Manifest next update: Wed 28 Oct 2026 09:01:22 +0000
Files and hashes: 1: 8LnVsjH2EwUmwFrvwngeTt29sfc.roa (hash: zoMdGFAt0JgG0lcHzQngcTPabdRrKnSlHq63qMuC6dU=)
2: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: 9lFQrrkbyZ+YsRiZd1hSns8ssL7/wnfJ9iKAlS0CmM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:c2:a9:3b:ff:10:fb:a3:0f:29:00:0f:6e:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Oct 27 09:01:22 2026 GMT
Not After : Oct 28 09:01:22 2026 GMT
Subject: CN=477742af5eacc96b141d0125cbeb5eb9086f8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:89:52:08:e7:74:21:c8:59:85:9c:55:bb:
9d:d8:4e:3b:69:4e:d2:e5:04:e0:59:1e:9c:d9:bd:
d6:52:42:96:4e:35:a3:1c:fb:98:f8:ad:8c:50:74:
bc:6e:53:fb:27:65:c5:85:72:65:05:e6:6f:5d:3d:
45:27:f1:e3:12:fe:1a:d9:c5:ca:55:6f:a0:d3:67:
d4:9f:32:23:8a:e0:e6:ad:33:33:59:27:66:f4:5b:
8d:b7:64:34:a2:f1:4e:de:83:59:29:70:d7:60:7b:
2b:6d:fb:ca:25:9a:72:dc:65:ab:a0:a4:df:49:de:
00:49:7e:0c:5a:c0:2d:cd:67:ee:76:94:cd:fa:e1:
62:a7:6a:0c:e0:17:a0:6e:83:a0:bb:72:5e:32:64:
c0:ca:d4:6d:be:29:dd:1c:9f:82:12:4c:a0:f3:db:
df:00:27:cf:2b:28:d8:3f:cf:03:10:03:0e:6d:1d:
10:36:08:94:a5:e0:28:a5:d8:51:fb:84:00:b4:65:
3a:32:72:0d:e0:15:22:87:45:59:77:39:cb:09:81:
ab:b3:64:fd:2c:7a:8e:c6:ae:54:95:30:53:81:d8:
7c:2a:69:6a:e2:ab:16:90:5b:52:e1:a6:dd:1d:c3:
23:87:66:bc:6a:b0:40:88:12:46:04:e5:d9:a7:09:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:42:AF:5E:AC:C9:6B:14:1D:01:25:CB:EB:5E:B9:08:6F:85:21
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5e:ea:6f:f6:89:41:9c:6e:f3:ba:3f:30:96:1a:67:0f:7e:
5d:2d:d7:bd:38:e8:79:5a:a5:8d:bb:b2:71:6c:44:94:46:d9:
be:ef:20:a6:39:62:dd:4b:4c:f5:23:56:a8:5b:d5:e4:58:d0:
1a:93:71:77:32:f8:0b:f8:d5:fa:00:24:8a:50:89:0d:5d:c9:
91:b7:b8:a4:37:f7:9f:c3:53:28:27:ea:38:17:36:33:16:1e:
db:36:dd:cb:3c:6b:2d:1f:51:32:60:eb:21:6c:ec:89:20:da:
ca:8a:a2:dd:cc:ac:23:dd:b9:1d:da:79:6d:5f:a9:71:90:2c:
93:21:be:a0:90:cd:a7:0a:12:96:74:7a:57:64:60:9a:52:9b:
2e:e9:f7:0f:af:55:27:c9:d7:f4:78:86:47:71:b8:70:86:73:
ef:48:37:ec:5d:23:fd:5d:c5:37:76:bf:d9:c7:71:b6:bb:44:
32:22:09:de:81:c6:84:43:46:d0:bc:d4:35:6f:4c:7c:b5:9e:
3b:65:8d:88:40:1e:fd:98:58:19:41:c2:06:94:60:51:12:42:
1a:b9:64:ed:5e:67:be:9a:d7:a1:78:76:fd:a6:e5:38:5b:32:
a8:6d:16:5c:73:ed:5e:86:27:39:2b:90:0c:4e:40:6a:ac:97:
10:51:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:08 2026 by rpki-client