Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: 5hkjBm3e7/ay2bWPvNBHYJ/jOxRWvfKmaIaVbKQMQTs=
Subject key identifier: 54:03:4F:A7:E0:C4:CB:77:AE:E9:D2:28:EB:DD:8D:B9:55:5B:30:C8
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 01A08B67CC815B2CE4FC154EF9A65F6DF0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 12DE
Signing time: Thu 10 Sep 2026 13:00:30 +0000
Manifest this update: Thu 10 Sep 2026 13:00:30 +0000
Manifest next update: Fri 11 Sep 2026 13:00:30 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: /fAeExjkB7sccQiT3LVWFYHCGWtn8vpOyyIBFesFd3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:cc:81:5b:2c:e4:fc:15:4e:f9:a6:5f:6d:f0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Sep 10 13:00:30 2026 GMT
Not After : Sep 11 13:00:30 2026 GMT
Subject: CN=54034fa7e0c4cb77aee9d228ebdd8db9555b30c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:66:dc:27:0f:15:9a:ed:af:0e:1d:37:e9:
68:3e:30:fd:7f:37:cd:22:41:95:cd:06:0d:ad:05:
34:04:b6:f3:67:de:35:4b:a7:01:ed:bd:fc:7e:da:
01:05:ea:4a:68:42:6e:32:78:ee:2f:63:e3:1f:c2:
bb:8b:3f:10:fb:df:83:30:d6:90:f1:99:34:9a:90:
2e:9c:9f:9e:74:1f:bb:2a:3e:20:32:ed:28:fc:4e:
57:d6:90:04:8e:88:7a:ae:93:7b:d4:85:10:b4:14:
a3:81:30:4b:fa:9f:ef:82:83:f1:ef:fb:08:93:5d:
43:bc:e7:6c:8d:4b:a6:c9:8a:56:ad:3f:c6:5e:9d:
99:e8:e8:63:49:3b:f6:14:37:2a:c6:a0:05:94:53:
e1:00:2c:0a:04:b1:10:f4:58:97:a7:80:9b:a7:a5:
03:2a:30:96:a0:74:33:c6:62:40:e8:01:56:c6:c1:
79:da:fa:69:3d:a5:83:2f:d0:96:10:42:2a:33:dd:
80:27:dc:04:b3:28:12:f1:11:1a:19:43:b8:2c:49:
3f:b7:6f:08:f8:3f:56:1a:cb:c3:b3:1c:42:9c:d1:
a9:eb:28:49:95:f4:9d:c5:4c:a9:8f:2e:42:0f:21:
90:e7:fe:06:0a:d7:92:c7:f8:f7:c4:c6:73:8d:c6:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:4F:A7:E0:C4:CB:77:AE:E9:D2:28:EB:DD:8D:B9:55:5B:30:C8
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3b:7c:15:3a:a2:95:2b:6f:8a:94:a3:db:83:3e:01:56:9b:
e0:63:d2:cf:b5:18:8c:7c:32:a5:64:24:85:b2:45:12:fe:9f:
0e:a3:56:11:87:c9:06:8d:b8:74:a1:74:f5:a0:a6:07:ca:71:
4a:53:99:c2:08:a5:7c:4a:92:08:41:d0:cb:e1:7d:f5:dc:38:
d9:32:aa:7a:32:32:bf:02:1e:c5:ed:9f:3b:8f:d4:a4:75:18:
e7:f8:72:62:23:7e:c0:82:da:58:68:80:2c:82:68:8f:2c:1e:
7d:b4:26:71:e8:62:4a:e3:0b:40:86:17:26:a2:ce:0f:fd:a4:
38:a2:fc:aa:0f:15:e0:c4:e5:c1:90:3b:c1:51:dc:a4:53:7d:
bc:52:7d:83:72:b3:25:b8:b2:4b:0b:06:09:9d:9d:d5:af:aa:
fc:a1:8f:30:93:2f:9c:0c:50:77:14:6a:7b:3c:e3:a1:09:90:
0c:e4:52:af:cb:33:fd:a9:26:e3:d1:b7:3d:af:73:0b:b7:54:
94:5d:18:02:7d:b6:56:85:73:96:87:ab:df:75:88:66:c4:37:
35:fd:f1:0c:49:72:36:dc:0c:f9:1b:fa:4f:49:27:9d:17:ae:
cd:47:5c:f7:96:da:7a:81:be:77:ae:74:62:e4:a0:b2:80:48:
1a:b6:2d:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLZ8yBWyzk/BVO+aZfbfDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjYwOTEwMTMwMDMwWhcNMjYwOTExMTMwMDMwWjAzMTEwLwYDVQQD
Eyg1NDAzNGZhN2UwYzRjYjc3YWVlOWQyMjhlYmRkOGRiOTU1NWIzMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk25m3CcPFZrtrw4dN+loPjD9fzfN
IkGVzQYNrQU0BLbzZ941S6cB7b38ftoBBepKaEJuMnjuL2PjH8K7iz8Q+9+DMNaQ
8Zk0mpAunJ+edB+7Kj4gMu0o/E5X1pAEjoh6rpN71IUQtBSjgTBL+p/vgoPx7/sI
k11DvOdsjUumyYpWrT/GXp2Z6OhjSTv2FDcqxqAFlFPhACwKBLEQ9FiXp4Cbp6UD
KjCWoHQzxmJA6AFWxsF52vppPaWDL9CWEEIqM92AJ9wEsygS8REaGUO4LEk/t28I
+D9WGsvDsxxCnNGp6yhJlfSdxUypjy5CDyGQ5/4GCteSx/j3xMZzjcZZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQDT6fgxMt3runSKOvdjblVWzDIMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDt8FTqi
lStvipSj24M+AVab4GPSz7UYjHwypWQkhbJFEv6fDqNWEYfJBo24dKF09aCmB8px
SlOZwgilfEqSCEHQy+F99dw42TKqejIyvwIexe2fO4/UpHUY5/hyYiN+wILaWGiA
LIJojywefbQmcehiSuMLQIYXJqLOD/2kOKL8qg8V4MTlwZA7wVHcpFN9vFJ9g3Kz
JbiySwsGCZ2d1a+q/KGPMJMvnAxQdxRqezzjoQmQDORSr8sz/akm49G3Pa9zC7dU
lF0YAn22VoVzloer33WIZsQ3Nf3xDElyNtwM+Rv6T0knnReuzUdc95baeoG+d650
YuSgsoBIGrYtMA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:03 2026 by rpki-client