Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
File: 421ZT1_jgr7Czo46Majyjm2XwB4.mft (raw, json)
Hash identifier: wRn9NLpMWMpZ8d+ck+yE0NBxTKIq/p0vp8DncW/3gKg=
Subject key identifier: 58:A3:02:79:A3:46:A6:75:91:C1:2E:CB:A8:41:8A:D7:AC:D5:28:C1
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 01A03A1501BF7950FDFB1F9602E03A766D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
Manifest number: BF
Signing time: Tue 25 Aug 2026 18:00:50 +0000
Manifest this update: Tue 25 Aug 2026 18:00:50 +0000
Manifest next update: Wed 26 Aug 2026 18:00:50 +0000
Files and hashes: 1: 421ZT1_jgr7Czo46Majyjm2XwB4.crl (hash: ZOK2BdwnxP20v7Q9UjKjbwzU4aatz22QAIs5YG/wd4w=)
2: 4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (hash: eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=)
3: rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa (hash: gCYbQwWeJazWuKam4wgBrsfYsq8VV5PKDsC6OZTN4xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:15:01:bf:79:50:fd:fb:1f:96:02:e0:3a:76:6d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Aug 25 18:00:50 2026 GMT
Not After : Aug 26 18:00:50 2026 GMT
Subject: CN=58a30279a346a67591c12ecba8418ad7acd528c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:d4:38:f5:ae:41:f1:eb:fb:3c:63:95:83:
1d:f6:bc:84:7f:e4:bf:12:48:2e:84:32:4e:6a:93:
be:42:45:b9:78:4c:a2:9c:fe:08:ed:cc:b9:8b:0b:
22:8b:29:ea:9a:3e:12:0e:88:e6:82:3a:17:37:0f:
97:ff:62:3c:73:a1:41:2d:61:d0:77:23:d5:5e:ac:
e6:e7:4d:c6:7f:81:f1:6c:3f:10:36:eb:f9:33:d2:
c4:3d:1c:69:7b:e2:a7:1a:57:d4:2b:43:84:9a:81:
28:7f:5c:59:03:27:66:b4:5e:27:85:52:cb:d6:26:
eb:3d:59:40:ed:ba:ff:b3:4c:5d:a4:fe:ef:9e:13:
8b:ee:54:b8:40:d6:64:3e:3a:dc:d2:c5:41:ac:86:
d9:16:2f:46:cb:55:9f:9b:09:08:e2:28:a4:cd:4f:
5b:fc:4c:eb:8a:22:e2:fa:bc:d5:0b:08:aa:5b:65:
1b:c3:61:a9:75:ee:f7:17:ca:0a:34:39:b5:12:bb:
12:55:bf:a2:ee:63:30:34:fc:5b:4d:cc:be:bb:da:
45:f6:33:4d:52:15:78:69:ab:a8:3b:67:d6:35:b9:
be:83:13:ff:3e:bd:1e:93:f3:20:74:24:e7:94:c6:
19:95:cb:08:ba:e8:b9:a4:0d:3b:f3:3a:68:95:a7:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:02:79:A3:46:A6:75:91:C1:2E:CB:A8:41:8A:D7:AC:D5:28:C1
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:31:bd:7a:6d:1a:22:b6:83:d1:86:d0:63:95:4a:28:79:7c:
f9:cd:dc:8c:9b:60:26:37:e4:61:ef:06:5b:0b:52:a3:77:be:
f7:8b:16:87:13:ce:35:c4:45:dd:bf:98:9f:88:f5:5f:86:c8:
38:fa:ad:95:b7:9e:28:e7:ae:d6:96:03:5e:00:68:7c:79:df:
39:35:58:17:9e:e9:5a:c2:ee:93:28:59:c5:0c:56:64:f9:03:
f3:25:67:cc:04:05:11:c3:c2:0e:f3:32:f9:3a:ab:0a:2e:98:
02:87:5c:04:73:cf:54:35:23:49:98:4b:d4:81:f2:44:8a:cd:
0d:1a:a3:13:1e:dd:e4:db:00:47:7e:96:4d:c7:71:7a:ec:1d:
e4:c1:2f:0d:07:79:26:71:35:1c:56:ae:a3:c4:5b:66:c1:93:
f3:61:fe:32:64:d2:16:cc:47:87:01:20:51:d4:99:ad:d9:fb:
72:6f:29:6c:14:ab:3e:7c:52:6d:80:3f:01:a8:b8:86:c5:61:
3a:c8:b0:4a:08:eb:d2:b8:5e:95:17:74:d0:da:1a:98:2b:e2:
a5:12:8d:ba:41:72:66:77:2d:52:c3:0f:c4:da:9e:21:08:45:
07:ff:bb:a0:a8:90:6f:e7:b5:f2:75:1c:4c:76:fa:32:1a:b8:
f6:a0:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:14:02 2026 by rpki-client