Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File: RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier: 2gfow8LGjSzNdI6hbrn/YKyFp+Zi/BVgXo/lvA+qRdI=
Subject key identifier: E7:FE:45:E1:E3:D9:01:68:5C:47:BC:A9:F9:7B:3B:24:A6:D2:3F:44
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial: 01A15A42D7B9E8353CF3884D4A3576CEE7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number: 0334
Signing time: Tue 20 Oct 2026 17:01:32 +0000
Manifest this update: Tue 20 Oct 2026 17:01:32 +0000
Manifest next update: Wed 21 Oct 2026 17:01:32 +0000
Files and hashes: 1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: PQL0oteDVPtA56iVNOOlTyanBubPtsIkZcN51+oTKXs=)
3: gFOGmZRlX2Va7a4eZJorJSldfM0.asa (hash: iWV8IrqVD+U7+lJQU0PeeR9WILJwhPNuOe7C9EI2EN0=)
4: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:d7:b9:e8:35:3c:f3:88:4d:4a:35:76:ce:e7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
Validity
Not Before: Oct 20 17:01:32 2026 GMT
Not After : Oct 21 17:01:32 2026 GMT
Subject: CN=e7fe45e1e3d901685c47bca9f97b3b24a6d23f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3c:8d:a7:82:12:16:60:f7:78:0d:32:ea:21:
38:52:70:57:33:b1:62:8e:d4:fd:8c:25:0f:c1:c2:
c1:61:c1:f9:b4:4c:e9:85:fc:09:0b:d0:08:3f:11:
61:de:77:1a:e7:59:0a:0e:49:73:64:70:cd:b9:5f:
f8:86:49:b9:67:a2:e6:0e:06:e3:da:23:84:2c:28:
ad:6a:3f:22:e8:58:9f:23:28:c9:ff:9e:11:8a:f8:
d1:e3:6a:d8:cb:69:bf:50:4a:22:62:53:59:91:c5:
e2:f2:6a:5b:e7:cc:ed:31:6f:8a:26:ba:88:a0:a3:
98:1f:af:1f:e1:52:f5:fe:44:16:c6:5a:84:3c:b2:
48:c2:a3:01:69:3c:fd:73:e0:e1:12:b9:2d:14:25:
52:81:51:e1:52:a9:84:8b:96:45:14:67:a7:5c:c6:
b8:25:3b:87:63:4b:d7:68:9a:86:bb:7e:1e:d9:45:
f4:77:aa:c2:b7:e1:76:ae:c0:3a:42:75:e9:c8:8f:
4f:2a:ba:d4:9e:32:11:67:02:a6:c0:6e:e2:03:06:
14:e0:0b:77:8b:a0:41:35:7e:8b:3e:87:01:be:32:
9b:b9:5b:3c:1a:b6:61:df:00:23:ef:cc:39:fb:1f:
b3:4f:6d:1d:d9:65:bd:ab:ea:1d:57:09:70:f7:c3:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:45:E1:E3:D9:01:68:5C:47:BC:A9:F9:7B:3B:24:A6:D2:3F:44
X509v3 Authority Key Identifier:
keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:b7:86:17:a1:6a:d1:66:ba:86:9a:b2:3b:16:76:77:6b:
46:2b:e5:a7:ae:cd:1a:02:23:55:9b:03:10:46:98:8d:05:1a:
f8:07:5d:5c:c3:fd:db:ab:54:1a:c3:a3:2c:ca:86:d3:ef:4b:
12:0f:49:f8:de:b8:31:7f:aa:26:6e:01:4c:21:c2:c2:59:e1:
4a:66:0f:97:a7:6e:6d:d7:db:03:49:af:2b:5d:00:17:3e:e9:
24:9b:d8:35:6f:10:7e:72:6b:91:8d:15:7f:38:6f:e5:19:1e:
94:c3:54:7d:da:98:55:f2:37:ae:2b:29:75:43:e4:b4:99:79:
9e:80:34:d1:7a:11:85:5d:df:ff:a3:cf:6d:17:ce:09:c3:d0:
73:23:d5:25:30:a7:95:ca:30:3f:2f:9b:49:54:ba:36:82:36:
34:ee:37:ff:56:f1:88:40:3b:f1:d3:cb:dd:95:50:c3:02:7a:
51:26:ee:a7:1a:a2:ae:5d:9a:92:68:16:3b:2d:58:87:ed:c2:
be:dd:2f:f3:e0:b8:e0:a3:37:b4:87:11:1f:d5:51:fd:c7:21:
61:32:29:33:90:86:52:d7:26:0f:f1:cb:cd:a9:53:b5:72:25:
02:37:e4:25:58:a6:59:61:b4:08:7c:16:a5:d7:33:5b:b5:87:
37:df:d8:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFaQte56DU884hNSjV2zueqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Mjc2N2E3Mzc1ZjFhYzU0NjY5MWFhZjJhNTExZmJiNjI3
NzAzMWQwHhcNMjYxMDIwMTcwMTMyWhcNMjYxMDIxMTcwMTMyWjAzMTEwLwYDVQQD
EyhlN2ZlNDVlMWUzZDkwMTY4NWM0N2JjYTlmOTdiM2IyNGE2ZDIzZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jyNp4ISFmD3eA0y6iE4UnBXM7Fi
jtT9jCUPwcLBYcH5tEzphfwJC9AIPxFh3nca51kKDklzZHDNuV/4hkm5Z6LmDgbj
2iOELCitaj8i6FifIyjJ/54RivjR42rYy2m/UEoiYlNZkcXi8mpb58ztMW+KJrqI
oKOYH68f4VL1/kQWxlqEPLJIwqMBaTz9c+DhErktFCVSgVHhUqmEi5ZFFGenXMa4
JTuHY0vXaJqGu34e2UX0d6rCt+F2rsA6QnXpyI9PKrrUnjIRZwKmwG7iAwYU4At3
i6BBNX6LPocBvjKbuVs8GrZh3wAj78w5+x+zT20d2WW9q+odVwlw98N0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf+ReHj2QFoXEe8qfl7OySm0j9EMB8GA1UdIwQY
MBaAFEYnZ6c3XxrFRmkarypRH7tidwMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hOTAyNGQtYmJkOC00ZGVlLWEzMjMt
MDA1MGVhMzZjMjk2LzEvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9hOTAyNGQtYmJkOC00ZGVlLWEzMjMtMDA1MGVhMzZjMjk2
LzEvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4O3hheh
atFmuoaasjsWdndrRivlp67NGgIjVZsDEEaYjQUa+AddXMP926tUGsOjLMqG0+9L
Eg9J+N64MX+qJm4BTCHCwlnhSmYPl6dubdfbA0mvK10AFz7pJJvYNW8QfnJrkY0V
fzhv5RkelMNUfdqYVfI3rispdUPktJl5noA00XoRhV3f/6PPbRfOCcPQcyPVJTCn
lcowPy+bSVS6NoI2NO43/1bxiEA78dPL3ZVQwwJ6USbupxqirl2akmgWOy1Yh+3C
vt0v8+C44KM3tIcRH9VR/cchYTIpM5CGUtcmD/HLzalTtXIlAjfkJVimWWG0CHwW
pdczW7WHN9/YyA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:28 2026 by rpki-client