Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: UH2MZQFBC2wcwDht8yfvIg4KtiavWSgxymsibpxXVB8=
Subject key identifier: F3:9A:0B:E5:0C:07:04:01:5C:FE:43:2B:89:33:EF:31:58:6E:E5:79
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 01A0B1D06C181AFDC6E128DC259275BED575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0D64
Signing time: Fri 18 Sep 2026 00:00:21 +0000
Manifest this update: Fri 18 Sep 2026 00:00:21 +0000
Manifest next update: Sat 19 Sep 2026 00:00:21 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: qs9RscfN7kq9B3rdHV7tpcJWFUjDLMNRUaoB8VbPCG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:d0:6c:18:1a:fd:c6:e1:28:dc:25:92:75:be:d5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Sep 18 00:00:21 2026 GMT
Not After : Sep 19 00:00:21 2026 GMT
Subject: CN=f39a0be50c0704015cfe432b8933ef31586ee579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:79:e7:1b:49:7a:04:19:88:46:28:65:27:
33:a0:c7:8f:3a:57:0f:10:1e:0a:6e:9c:75:9e:10:
b7:98:1e:c0:55:2e:bc:40:60:94:69:be:9e:8b:f2:
63:03:47:1e:9a:c9:a3:d3:ad:b8:65:f5:d7:96:a4:
15:71:33:9b:b6:66:f3:aa:8c:65:02:17:a0:f6:ae:
07:70:9b:5b:c4:57:b6:ec:ca:4d:51:ef:9b:6a:d8:
95:25:7e:07:27:b0:b7:0f:19:7f:c5:ce:a6:6c:f0:
cf:7b:4d:38:77:49:f7:49:c7:b2:f8:50:e4:61:e3:
4b:8c:0f:48:0a:b1:a7:15:0a:df:4b:0e:83:2c:ad:
f9:b7:12:02:e6:be:43:a1:87:2b:8f:c5:13:f3:4c:
89:54:a0:e0:78:58:60:0c:63:61:b6:78:52:f1:40:
79:fd:c1:d5:84:af:47:03:87:b9:59:a4:3c:aa:24:
30:aa:a1:96:ab:85:83:09:99:6c:eb:91:e0:35:ba:
e7:7d:10:72:18:f9:6b:13:7c:c6:e2:bd:c2:74:0a:
3d:d0:7e:3c:e4:06:52:ba:35:54:ac:55:e3:e7:8c:
41:72:6c:5b:58:a6:ed:6f:2f:d4:90:52:9a:ae:7d:
1a:d1:8a:1e:c6:6f:12:01:0c:52:67:eb:da:89:ca:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:0B:E5:0C:07:04:01:5C:FE:43:2B:89:33:EF:31:58:6E:E5:79
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1b:d6:d9:fc:07:c6:ea:ab:b5:4d:2d:d6:ff:e7:0a:8f:3d:
10:f1:5a:66:05:dc:dc:35:0d:71:f6:f1:9e:f0:c5:ae:eb:ca:
19:ca:7c:20:06:56:82:85:78:58:47:86:ed:67:34:8e:16:5a:
3d:95:38:59:18:22:c5:6d:9c:78:0a:39:0f:3c:33:09:c5:80:
1d:fe:1d:6c:09:64:78:9d:a8:dd:b4:41:43:e2:b5:87:52:4c:
04:02:14:15:1e:2c:fd:24:ee:15:3b:48:0e:e5:1b:b6:51:69:
c1:ee:2a:bf:d5:89:be:dc:2b:36:89:f0:29:b9:9b:0f:38:a8:
4e:cf:8c:20:67:36:ad:8a:60:45:7c:52:2c:b7:ea:66:d4:72:
49:cb:31:82:76:23:d4:be:4a:65:c3:3e:83:30:d7:94:ec:d9:
6f:6f:61:4c:13:f7:fd:23:ea:71:95:70:2c:92:eb:c0:82:91:
a5:b7:fc:8e:4d:4a:54:3c:7c:73:c1:51:7a:cd:73:d6:ca:70:
69:ac:7f:2d:61:cf:ad:d0:b6:01:90:69:22:76:2d:92:37:ba:
7e:32:a9:9a:67:40:6a:65:ef:04:3b:ad:6d:e1:ce:68:0b:db:
32:dd:bd:5c:4d:50:11:ac:55:4f:9f:67:15:c2:21:38:d7:b6:
6a:b1:d7:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCx0GwYGv3G4SjcJZJ1vtV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3
MmY5NzkwHhcNMjYwOTE4MDAwMDIxWhcNMjYwOTE5MDAwMDIxWjAzMTEwLwYDVQQD
EyhmMzlhMGJlNTBjMDcwNDAxNWNmZTQzMmI4OTMzZWYzMTU4NmVlNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX155xtJegQZiEYoZSczoMePOlcP
EB4Kbpx1nhC3mB7AVS68QGCUab6ei/JjA0cemsmj0624ZfXXlqQVcTObtmbzqoxl
Aheg9q4HcJtbxFe27MpNUe+batiVJX4HJ7C3Dxl/xc6mbPDPe004d0n3Scey+FDk
YeNLjA9ICrGnFQrfSw6DLK35txIC5r5DoYcrj8UT80yJVKDgeFhgDGNhtnhS8UB5
/cHVhK9HA4e5WaQ8qiQwqqGWq4WDCZls65HgNbrnfRByGPlrE3zG4r3CdAo90H48
5AZSujVUrFXj54xBcmxbWKbtby/UkFKarn0a0Yoexm8SAQxSZ+vaicqpQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOaC+UMBwQBXP5DK4kz7zFYbuV5MB8GA1UdIwQY
MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt
NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi
LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBvW2fwH
xuqrtU0t1v/nCo89EPFaZgXc3DUNcfbxnvDFruvKGcp8IAZWgoV4WEeG7Wc0jhZa
PZU4WRgixW2ceAo5DzwzCcWAHf4dbAlkeJ2o3bRBQ+K1h1JMBAIUFR4s/STuFTtI
DuUbtlFpwe4qv9WJvtwrNonwKbmbDzioTs+MIGc2rYpgRXxSLLfqZtRyScsxgnYj
1L5KZcM+gzDXlOzZb29hTBP3/SPqcZVwLJLrwIKRpbf8jk1KVDx8c8FRes1z1spw
aax/LWHPrdC2AZBpInYtkje6fjKpmmdAamXvBDutbeHOaAvbMt29XE1QEaxVT59n
FcIhONe2arHXLQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 02:30:41 2026 by rpki-client