Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: E9LVD6ojR3EmuLeWDSBE0uaW6HmYzlnmKey52WHdXFY=
Subject key identifier: 1C:BA:CB:5E:9B:C5:81:C2:E5:10:01:39:83:E5:EF:64:8D:FE:19:51
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 01A06EA777B9CA9404C1A02EB2CBF35329BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 046F
Signing time: Fri 04 Sep 2026 23:01:03 +0000
Manifest this update: Fri 04 Sep 2026 23:01:03 +0000
Manifest next update: Sat 05 Sep 2026 23:01:03 +0000
Files and hashes: 1: hJZnvXC0-UgTlF_AH76uiPfGV7c.asa (hash: p2cFMytFL5OC6zEHyn7h+6EUDN+jaMNyN9xu55GAgrQ=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: SgAGAoGAujHd0SNNzfgAWlHROU3ToHs3MTV01VO4WSg=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:77:b9:ca:94:04:c1:a0:2e:b2:cb:f3:53:29:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Sep 4 23:01:03 2026 GMT
Not After : Sep 5 23:01:03 2026 GMT
Subject: CN=1cbacb5e9bc581c2e510013983e5ef648dfe1951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f2:c3:89:3b:f6:91:57:c8:43:b4:8d:1e:f2:
5a:1f:37:b0:a8:47:5f:ba:e3:80:e9:8b:31:70:d8:
ef:f5:e4:5b:ee:19:cb:4a:6f:e0:91:1a:84:f2:e4:
c3:1f:c7:a8:89:83:65:13:1c:a1:4b:d1:5e:b7:17:
14:8d:35:1f:83:a1:5a:d0:38:1e:1b:7a:d7:98:e8:
b8:cc:3e:77:6c:14:c5:54:ec:bd:f1:1a:a8:e3:e0:
22:6a:2f:a6:22:be:0f:75:a4:d9:d0:97:48:09:28:
af:30:5b:51:f0:b1:d5:a0:44:44:3e:0a:95:17:d9:
47:87:53:d1:b6:9d:ff:87:23:0d:e9:4e:fd:d0:8a:
65:1d:4a:11:95:10:b6:68:80:48:15:74:19:90:85:
13:5e:f5:7f:7a:b7:9f:a9:61:95:22:b3:4b:73:d3:
b3:19:4f:22:1b:31:0a:5f:c1:39:b9:d5:17:27:b4:
e5:6f:d3:b4:33:d0:b3:ed:9f:dc:a8:df:a6:80:ac:
5c:b7:12:bd:6d:3b:04:f5:33:2e:5c:c3:0a:95:4d:
66:47:c1:fc:6d:6a:08:5a:59:8e:05:f4:45:6d:d5:
ae:c1:82:55:13:d4:90:78:e7:59:54:b4:23:b5:64:
ac:9c:ff:b9:f5:11:1f:15:99:fe:14:67:ab:10:d0:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:CB:5E:9B:C5:81:C2:E5:10:01:39:83:E5:EF:64:8D:FE:19:51
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:75:25:8a:4d:ed:04:3a:36:ca:46:c9:47:bd:1c:7e:8a:
f7:a0:c2:64:04:59:30:40:b8:8a:cf:40:6a:da:ac:70:a0:e4:
d4:2c:39:fe:36:73:ef:4d:bb:6b:70:1b:aa:f8:18:ea:19:5a:
1b:be:b6:c5:a1:97:bf:aa:b5:f1:a6:0a:dc:ca:07:cd:21:14:
e2:b7:cb:77:ee:63:f8:91:6f:49:76:14:11:ae:76:14:b8:10:
81:4e:2b:f4:da:be:d4:f7:32:94:6d:22:cd:a9:05:39:c8:40:
8a:b6:a6:5d:a6:a7:7e:00:e4:f0:d5:cc:da:5f:00:f4:5d:11:
33:60:46:d9:5c:7b:d9:e6:c6:34:66:95:ec:85:48:10:68:fb:
da:06:5d:af:9e:72:2c:e4:2f:41:f7:14:00:ac:74:69:4a:be:
60:72:ee:8e:80:75:d6:0f:c6:9a:e8:f3:9a:bb:f3:a2:21:1c:
f3:d8:41:31:2e:04:a3:5d:ed:86:f5:21:36:fb:07:02:d4:00:
11:37:e0:d1:77:d8:64:8b:8c:f2:16:d9:72:74:47:3a:3f:20:
ff:64:15:83:74:92:55:df:2e:3f:02:01:cd:be:76:c5:c5:69:
65:b2:20:20:bf:22:8e:1c:9b:78:fa:e8:3d:51:51:4c:c2:49:
f0:f3:a4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup3e5ypQEwaAussvzUym8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk
MTQ3NTYwHhcNMjYwOTA0MjMwMTAzWhcNMjYwOTA1MjMwMTAzWjAzMTEwLwYDVQQD
EygxY2JhY2I1ZTliYzU4MWMyZTUxMDAxMzk4M2U1ZWY2NDhkZmUxOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PLDiTv2kVfIQ7SNHvJaHzewqEdf
uuOA6YsxcNjv9eRb7hnLSm/gkRqE8uTDH8eoiYNlExyhS9FetxcUjTUfg6Fa0Dge
G3rXmOi4zD53bBTFVOy98Rqo4+Aiai+mIr4PdaTZ0JdICSivMFtR8LHVoEREPgqV
F9lHh1PRtp3/hyMN6U790IplHUoRlRC2aIBIFXQZkIUTXvV/erefqWGVIrNLc9Oz
GU8iGzEKX8E5udUXJ7Tlb9O0M9Cz7Z/cqN+mgKxctxK9bTsE9TMuXMMKlU1mR8H8
bWoIWlmOBfRFbdWuwYJVE9SQeOdZVLQjtWSsnP+59REfFZn+FGerENCL+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy6y16bxYHC5RABOYPl72SN/hlRMB8GA1UdIwQY
MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt
MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1
LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsF1JYpN
7QQ6NspGyUe9HH6K96DCZARZMEC4is9AatqscKDk1Cw5/jZz7027a3AbqvgY6hla
G762xaGXv6q18aYK3MoHzSEU4rfLd+5j+JFvSXYUEa52FLgQgU4r9Nq+1PcylG0i
zakFOchAiramXaanfgDk8NXM2l8A9F0RM2BG2Vx72ebGNGaV7IVIEGj72gZdr55y
LOQvQfcUAKx0aUq+YHLujoB11g/GmujzmrvzoiEc89hBMS4Eo13thvUhNvsHAtQA
ETfg0XfYZIuM8hbZcnRHOj8g/2QVg3SSVd8uPwIBzb52xcVpZbIgIL8ijhybePro
PVFRTMJJ8POkpw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:08:58 2026 by rpki-client