Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: 4qd1wHvfyZX5go1iXEa5ObZZETjXoqFU35kmLxCovbk=
Subject key identifier: F5:77:2F:23:DF:8D:DF:C4:9B:D9:05:AB:81:CB:78:40:AC:0A:6A:65
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 01A1A9023E76B69C43FEB77B0A7F5A6D043B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0DE4
Signing time: Thu 05 Nov 2026 00:00:58 +0000
Manifest this update: Thu 05 Nov 2026 00:00:58 +0000
Manifest next update: Fri 06 Nov 2026 00:00:58 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: BHNuWFemKoC6bpnkr1PdeRQRE7yGh6Kw37P0+R6QCwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:02:3e:76:b6:9c:43:fe:b7:7b:0a:7f:5a:6d:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Nov 5 00:00:58 2026 GMT
Not After : Nov 6 00:00:58 2026 GMT
Subject: CN=f5772f23df8ddfc49bd905ab81cb7840ac0a6a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:1d:42:21:d7:dc:c0:b6:7e:f9:a4:77:b0:
12:50:77:85:57:b2:cf:2d:17:d8:04:e0:9a:98:89:
54:15:88:49:63:cd:20:d7:63:c1:ab:84:2b:95:fc:
6c:d5:45:48:e3:eb:13:da:c4:36:55:c0:57:fa:98:
e2:f1:30:51:12:e7:17:a9:7e:34:13:fa:5c:1a:aa:
c2:3e:8e:67:2e:30:83:f0:95:d8:7f:cd:e6:2c:4d:
42:c9:07:d0:21:48:76:bb:1f:29:6a:f0:40:3f:55:
d6:8d:87:7d:74:62:12:34:67:b8:ee:37:36:d8:af:
ae:85:92:53:08:a0:78:fe:50:3f:52:9b:bd:df:b8:
b8:20:5c:b7:0d:ce:6d:69:ae:c0:fd:2b:91:6a:f8:
23:ac:1c:7d:f4:40:b9:b8:86:13:80:33:17:b0:dd:
62:6b:eb:f3:d9:45:c9:92:46:f6:54:e0:76:6f:ac:
b5:c4:0a:55:4c:3c:55:b5:85:7b:db:b9:68:38:77:
7d:ca:07:d8:42:e3:35:55:28:cf:2a:ec:62:88:c7:
76:89:c1:9a:69:6b:19:05:4e:70:a9:9f:52:60:f0:
57:1b:98:e1:4d:d5:ab:a6:21:c1:5f:c8:b4:0c:7a:
c6:0a:a0:aa:71:76:83:af:7a:13:7a:d3:bb:ac:45:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:2F:23:DF:8D:DF:C4:9B:D9:05:AB:81:CB:78:40:AC:0A:6A:65
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:ba:f6:71:85:48:f6:01:00:ff:f2:05:a7:6e:1a:1c:9d:
9f:bb:21:ed:b4:c8:9c:02:ed:c2:ff:be:05:41:1e:0c:fe:f1:
ca:c1:87:10:37:07:d9:52:4c:82:23:3d:63:3e:91:ab:6a:90:
c8:81:fc:0b:21:f2:8b:7b:4b:5e:dd:47:31:c2:8b:1b:bb:a2:
d8:66:98:27:28:02:e0:d5:fc:23:0e:f8:64:6f:d0:d7:69:16:
fb:e9:0f:b0:ca:f6:f1:86:ca:36:c5:0a:eb:a6:6d:46:af:81:
f2:f3:05:3f:95:17:8d:ff:2a:01:2c:44:ad:74:58:07:db:14:
b3:ed:c4:92:59:a5:dc:b9:ce:84:e8:f7:b1:f2:32:f8:16:0f:
da:92:71:5d:12:42:88:8d:d9:29:63:7b:43:3a:91:81:97:da:
19:4f:4e:fb:12:d8:1d:68:45:ae:d5:cf:39:a6:4c:96:d7:56:
cb:1c:59:5d:3d:2a:3d:58:c4:2d:e1:4d:c8:2b:2c:70:06:70:
dd:af:86:f0:a1:43:db:bf:a0:76:7b:c7:91:d8:12:6c:74:a3:
76:fd:af:03:c9:b3:a5:73:b9:df:cf:e6:48:ab:72:9f:7c:d2:
d3:4c:52:07:d2:e5:38:36:3c:e7:1c:fa:53:d6:e8:fa:e2:d2:
0f:21:18:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpAj52tpxD/rd7Cn9abQQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3
MmY5NzkwHhcNMjYxMTA1MDAwMDU4WhcNMjYxMTA2MDAwMDU4WjAzMTEwLwYDVQQD
EyhmNTc3MmYyM2RmOGRkZmM0OWJkOTA1YWI4MWNiNzg0MGFjMGE2YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug8dQiHX3MC2fvmkd7ASUHeFV7LP
LRfYBOCamIlUFYhJY80g12PBq4Qrlfxs1UVI4+sT2sQ2VcBX+pji8TBREucXqX40
E/pcGqrCPo5nLjCD8JXYf83mLE1CyQfQIUh2ux8pavBAP1XWjYd9dGISNGe47jc2
2K+uhZJTCKB4/lA/Upu937i4IFy3Dc5taa7A/SuRavgjrBx99EC5uIYTgDMXsN1i
a+vz2UXJkkb2VOB2b6y1xApVTDxVtYV727loOHd9ygfYQuM1VSjPKuxiiMd2icGa
aWsZBU5wqZ9SYPBXG5jhTdWrpiHBX8i0DHrGCqCqcXaDr3oTetO7rEXptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV3LyPfjd/Em9kFq4HLeECsCmplMB8GA1UdIwQY
MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt
NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi
LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxG69nGF
SPYBAP/yBaduGhydn7sh7bTInALtwv++BUEeDP7xysGHEDcH2VJMgiM9Yz6Rq2qQ
yIH8CyHyi3tLXt1HMcKLG7ui2GaYJygC4NX8Iw74ZG/Q12kW++kPsMr28YbKNsUK
66ZtRq+B8vMFP5UXjf8qASxErXRYB9sUs+3Eklml3LnOhOj3sfIy+BYP2pJxXRJC
iI3ZKWN7QzqRgZfaGU9O+xLYHWhFrtXPOaZMltdWyxxZXT0qPVjELeFNyCsscAZw
3a+G8KFD27+gdnvHkdgSbHSjdv2vA8mzpXO538/mSKtyn3zS00xSB9LlODY85xz6
U9bo+uLSDyEY7g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:08:07 2026 by rpki-client