Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: 3JQ0BDzKVrANnofDsoCk2b2Gy053ysNcoSpg1gbFbT4=
Subject key identifier: 5D:32:DC:27:1C:F2:98:7A:F6:2F:85:09:C4:D0:B2:89:49:A5:7E:08
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019E209204FCA61CFB97DBD0D07301E65732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 14DB
Signing time: Wed 13 May 2026 09:01:40 +0000
Manifest this update: Wed 13 May 2026 09:01:40 +0000
Manifest next update: Thu 14 May 2026 09:01:40 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: uJhBdw303JoC0BFvrfsbiM14005bAQhaOUp/5jaRTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:04:fc:a6:1c:fb:97:db:d0:d0:73:01:e6:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: May 13 09:01:40 2026 GMT
Not After : May 14 09:01:40 2026 GMT
Subject: CN=5d32dc271cf2987af62f8509c4d0b28949a57e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e2:97:3c:6c:d0:38:fa:e2:6a:18:8b:8e:33:
05:3b:ce:83:6f:b3:45:f6:f4:38:8b:45:f0:6f:36:
f1:6d:79:b4:9a:82:e3:8b:aa:2d:80:fb:1d:5a:b3:
97:91:c8:a6:0a:8b:b7:e8:56:44:7a:f5:44:b1:e3:
5e:c7:53:77:d3:8b:56:ac:f2:60:57:7c:92:d0:ee:
ae:4e:d6:0b:b0:56:67:4d:e1:4b:5d:13:4f:1a:e4:
7a:6a:f0:25:b7:7f:e6:ef:ec:ab:57:a4:81:34:9e:
84:45:e6:00:b3:3b:d2:2f:ab:dd:47:e9:50:bc:68:
d8:56:21:3d:2f:15:16:11:1c:a6:f7:b2:93:58:d4:
81:e9:c3:f9:3c:44:07:e3:5c:e0:96:83:65:20:b7:
5c:f5:d2:bb:a6:66:d5:38:ad:cc:ab:41:db:73:fa:
60:5c:86:20:96:0f:50:72:f5:77:ca:f3:e8:a4:97:
8e:ff:d3:28:f7:db:3b:eb:1c:80:cc:10:19:45:58:
59:9a:57:d3:7c:41:ff:23:64:3f:21:9e:3e:69:34:
68:ad:cc:e5:a8:e9:76:7e:cb:ba:06:5f:54:18:52:
d0:00:65:ef:95:4a:99:a8:33:ed:38:24:3a:eb:7d:
08:59:3e:79:d6:bb:10:80:c4:ac:66:df:5c:08:92:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:DC:27:1C:F2:98:7A:F6:2F:85:09:C4:D0:B2:89:49:A5:7E:08
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:13:bc:7f:56:e6:01:18:a0:b3:51:7d:c4:dd:9a:7b:22:ec:
20:56:a8:46:a9:0e:75:da:f8:82:af:21:b7:54:07:28:d4:5b:
ea:51:29:af:14:b5:4f:fd:04:80:7a:61:49:07:36:27:f5:ca:
e6:33:2d:64:b3:0b:b0:cf:7c:b9:4d:f5:e9:ce:73:87:c0:21:
1f:fa:8b:fc:b6:4d:4e:8b:3d:44:f3:48:16:3b:1a:f2:d2:5e:
66:c3:20:ed:d1:39:d5:14:3e:68:20:bf:73:f8:69:07:2a:ee:
1f:21:9e:ee:d2:df:2d:be:d0:13:32:e0:98:18:d7:e4:20:89:
c3:ce:11:c7:27:a0:01:8c:7e:66:a9:b0:7a:23:f4:fb:e6:27:
aa:1b:94:72:cb:9f:34:4b:22:f7:71:4b:8f:4e:b0:52:86:df:
95:7b:83:ae:ca:14:27:94:df:9f:57:6d:95:85:cd:fc:e2:4b:
51:e8:32:91:60:66:22:71:b0:c6:71:b3:b1:0a:fd:fd:6d:7a:
1b:b3:f6:b3:65:63:52:9f:60:74:ea:2d:cd:df:ab:1f:60:27:
57:8b:75:66:b8:df:82:95:c1:db:a3:dc:2e:f8:5b:41:d9:35:
6c:9f:b9:f7:b3:92:8b:f1:b7:58:07:ec:7a:79:cb:dd:86:2e:
89:b6:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:49 2026 by rpki-client