Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: rPa/jDwubmKl9eiliObMgzjKRGHs/3N+3nZsYFWepgE=
Subject key identifier: 4A:3B:78:2E:C8:DD:74:CE:9E:76:AE:74:E4:4C:C5:48:C1:30:C5:29
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019D2B4E29034122702D1A95488D7E9DA854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 145C
Signing time: Thu 26 Mar 2026 18:00:35 +0000
Manifest this update: Thu 26 Mar 2026 18:00:35 +0000
Manifest next update: Fri 27 Mar 2026 18:00:35 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: 14km2yMRn3bgvQTLo9wRDU8IKogahz/uxL6JfA3rHz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:29:03:41:22:70:2d:1a:95:48:8d:7e:9d:a8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Mar 26 18:00:35 2026 GMT
Not After : Mar 27 18:00:35 2026 GMT
Subject: CN=4a3b782ec8dd74ce9e76ae74e44cc548c130c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:48:79:85:08:5f:99:d3:70:2e:d7:ea:f8:
7a:be:ca:d7:e1:86:33:ad:df:48:04:e3:ec:41:d9:
be:d6:53:12:0f:c1:28:8b:fa:23:95:3c:ec:f3:ad:
3f:79:85:b9:87:27:1e:90:0a:69:52:d3:ba:41:ca:
ce:8b:a9:00:7e:aa:19:64:d1:de:33:90:2a:05:2d:
68:60:dc:d4:02:d8:06:2f:2f:68:9b:e0:eb:65:e2:
9b:4a:a7:dc:4b:2b:2a:89:38:be:ea:0c:f0:2e:ec:
b2:27:17:e3:6b:38:14:62:e8:3f:1b:cf:92:e2:c6:
0c:54:fc:05:dd:31:a7:f9:b2:15:50:68:89:7b:ab:
d1:f5:f2:94:1e:c6:4c:9b:9f:62:c2:e0:35:10:2a:
4c:85:8d:3e:3e:5f:b4:4e:c7:56:15:1a:0a:07:80:
93:60:4f:c0:0a:a1:32:01:90:f8:76:93:e8:f3:56:
17:1c:6c:06:09:b4:3c:9f:00:05:85:a6:70:17:43:
af:44:34:e7:18:56:72:ee:b1:9a:6f:75:d3:2a:49:
2f:1b:4f:9a:9d:5d:8f:b5:bf:a0:5c:92:9c:ec:8d:
54:e1:14:bd:75:50:9c:7b:53:4d:81:f2:c4:d9:df:
a6:08:88:45:9c:ce:bb:24:13:cb:e0:64:ff:28:e7:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3B:78:2E:C8:DD:74:CE:9E:76:AE:74:E4:4C:C5:48:C1:30:C5:29
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f4:5e:ad:c7:58:2f:db:bc:c0:dd:31:ba:ed:04:c9:2e:52:
a5:24:a5:c8:40:23:d4:f9:85:c7:8b:75:7e:69:9c:00:54:cf:
37:f1:5f:e7:3c:52:60:2b:31:62:82:a4:0a:e0:f6:b2:0f:72:
2a:c8:6d:03:76:bd:4e:66:eb:e8:04:b0:b7:c2:8b:d5:5e:fc:
33:f5:09:ba:8f:c7:22:c0:9d:0a:a9:43:7a:ba:47:08:6a:0b:
88:20:5c:27:68:84:32:be:8e:94:4b:3a:7c:1b:e3:5c:1d:7e:
a6:91:27:b8:15:5f:65:fb:1a:42:13:b1:5b:8f:60:b3:e5:60:
29:ef:c1:23:d5:9c:de:bd:c5:ee:eb:66:41:a3:5b:be:37:a5:
94:3a:9a:9f:dc:eb:0c:00:79:86:3b:55:59:c3:74:04:44:46:
3b:19:67:8a:68:d9:c9:db:8d:7d:05:fc:6e:21:36:ff:41:b8:
1a:56:c4:ba:60:0d:e1:7c:60:83:3e:66:bb:db:2c:e7:54:8f:
9d:95:50:43:8e:b6:d5:cd:ba:80:d2:75:1c:29:5c:2d:f3:71:
9a:62:7c:83:9a:b1:2f:26:3b:cf:b7:43:52:3e:6b:33:b5:b2:
fa:4c:28:96:5c:eb:3b:60:e9:1d:e8:eb:85:13:13:e1:74:bb:
d2:75:7c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:36 2026 by rpki-client