Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: uYonxBV5W0BGBTUrkucO8lbT/4Ebi8h9XeWVib04lto=
Subject key identifier: 21:B8:17:E7:68:65:80:C9:9F:53:54:21:AE:DB:09:F4:B7:11:CA:75
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 01A182D0A22962397A893FFF13DDC1A3FDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 04FE
Signing time: Wed 28 Oct 2026 14:01:13 +0000
Manifest this update: Wed 28 Oct 2026 14:01:13 +0000
Manifest next update: Thu 29 Oct 2026 14:01:13 +0000
Files and hashes: 1: hJZnvXC0-UgTlF_AH76uiPfGV7c.asa (hash: p2cFMytFL5OC6zEHyn7h+6EUDN+jaMNyN9xu55GAgrQ=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: JMwDM07Y0IN7CEaH84ZAFBJKQnNksv23NEvtNI4fYPM=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:a2:29:62:39:7a:89:3f:ff:13:dd:c1:a3:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Oct 28 14:01:13 2026 GMT
Not After : Oct 29 14:01:13 2026 GMT
Subject: CN=21b817e7686580c99f535421aedb09f4b711ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:9c:b7:83:a3:90:a7:2a:b2:ec:a2:a0:9b:
da:94:05:56:88:38:67:02:9c:6a:08:ae:03:9c:df:
40:49:71:37:63:2d:b0:a2:7e:49:a4:14:21:73:20:
87:17:0c:5b:76:8f:81:75:b6:b3:ec:bc:be:df:71:
cf:a8:14:62:93:4d:71:59:e5:3d:37:a7:e6:d4:e9:
18:b9:e8:c7:3b:6a:44:bb:66:da:7f:f4:5f:6c:29:
11:71:43:31:3f:72:db:e8:dc:86:84:ba:51:f0:4d:
54:b0:1a:9e:e8:6b:bb:9f:60:1d:48:1d:54:71:5e:
46:1c:64:70:3f:76:40:e4:f6:27:78:b6:c2:d4:65:
f6:62:a2:90:1a:0e:16:59:c2:4e:6d:65:00:c8:a6:
99:f4:9f:a1:57:fc:10:aa:a4:6f:aa:d6:c9:20:53:
dd:1d:23:5b:c6:da:37:eb:d6:cb:74:ea:eb:85:0c:
f9:fc:38:32:be:15:bd:da:b7:a1:14:03:de:d5:15:
67:e8:97:99:8d:29:21:08:a9:ff:6a:40:97:04:20:
03:a7:94:74:3c:f0:f5:fe:56:bf:20:25:6a:f1:79:
08:0a:ab:0f:35:d2:f0:31:1e:1e:10:c1:6d:e1:aa:
92:92:98:cf:de:6e:b8:6d:55:67:d3:cd:80:f0:c0:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:17:E7:68:65:80:C9:9F:53:54:21:AE:DB:09:F4:B7:11:CA:75
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:45:15:50:82:88:34:47:e4:ad:75:c2:31:2e:25:48:01:cf:
e4:2c:42:6a:1b:b6:ce:3e:7e:1f:02:46:aa:ec:6e:29:05:0c:
0b:6a:12:fc:8c:4b:5f:22:64:62:0b:40:a5:32:7c:a0:bf:62:
59:05:97:09:95:6f:a7:e0:76:62:c2:a7:a0:50:72:2e:34:cc:
52:27:5a:c2:59:b7:4f:97:e3:1c:41:bb:ad:19:75:b8:8c:5d:
b9:6d:9b:fb:c8:b9:1b:dd:b4:9f:84:39:9e:d0:a6:be:cd:0c:
f8:f3:c2:5b:00:1d:06:a2:28:ed:62:18:a2:31:53:ab:f2:fb:
29:3e:a1:eb:3e:57:53:59:24:52:85:cb:c4:c6:b9:15:51:01:
88:ee:7c:65:7b:5e:b8:69:b0:06:1e:2d:15:b6:7b:a9:43:d0:
40:f3:25:42:60:eb:77:3a:8e:3b:0f:53:bb:a0:b0:ac:c7:ca:
5f:08:03:82:a1:b8:cd:54:38:55:29:c8:57:b5:d4:40:db:c2:
81:4a:12:eb:69:a8:b9:6e:09:d4:6d:36:f7:62:2f:95:d0:b7:
c7:56:c8:fa:d6:95:ad:d0:32:5c:d8:ea:d3:06:e3:d2:2f:a0:
ed:4d:3a:78:86:87:fa:b5:e0:4f:4f:7f:86:1e:9c:1d:df:f2:
94:8d:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:34 2026 by rpki-client