Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: phPjOsZYEY7GwX/vwSgDHbLcC9/DIvVh96LAe4EUUZU=
Subject key identifier: 13:B6:E8:85:F4:02:BD:CD:28:19:19:E5:1D:1A:21:3C:97:6F:02:39
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 019D2960AD81BC8446023B6B02036585642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0CD4
Signing time: Thu 26 Mar 2026 09:01:34 +0000
Manifest this update: Thu 26 Mar 2026 09:01:34 +0000
Manifest next update: Fri 27 Mar 2026 09:01:34 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: nv9WJkap8polqjxHv3bxWVFjdS90QBvCi4Oo227h7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ad:81:bc:84:46:02:3b:6b:02:03:65:85:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Mar 26 09:01:34 2026 GMT
Not After : Mar 27 09:01:34 2026 GMT
Subject: CN=13b6e885f402bdcd281919e51d1a213c976f0239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:a2:f6:80:ad:d4:e1:dc:ff:ae:15:af:eb:
5b:70:4e:24:a7:0f:08:f0:bd:56:48:e0:aa:39:2b:
7d:cc:61:65:a9:78:1c:77:b6:45:be:19:67:8d:7f:
b2:cb:57:ba:ac:3e:99:a4:53:b9:a4:27:c2:70:e9:
a4:2f:eb:ca:03:8e:40:41:df:d6:48:0b:e5:11:77:
0d:d0:6d:a8:43:a9:46:5b:00:fa:f2:85:be:4c:17:
48:6e:c8:c5:fa:5f:cc:47:a8:01:90:57:89:9f:8d:
0a:45:20:a3:f0:42:9f:16:8c:1e:11:7b:5c:21:48:
fc:ac:6f:b0:29:4b:84:1e:09:ad:5c:b0:45:5d:cf:
b6:e5:66:6a:cd:8a:8d:bb:10:e2:b9:de:a6:f2:15:
76:bd:cc:df:a6:76:8f:96:93:3c:da:96:95:18:b2:
1a:59:4a:46:83:f8:e0:ea:73:26:31:a1:f1:cb:55:
4d:1d:cd:78:0d:a2:75:29:c0:25:4b:dd:13:3a:4d:
d3:87:fd:4d:7e:55:31:a8:27:7d:63:d4:d5:d7:f8:
51:57:83:71:4b:ae:33:ed:7e:e2:97:f7:4f:2f:c8:
d4:c2:6c:dc:7a:c8:7b:bd:55:31:d2:0b:4e:34:13:
bb:34:b1:c8:66:2c:f2:3f:d9:2a:d3:79:96:3a:c2:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:E8:85:F4:02:BD:CD:28:19:19:E5:1D:1A:21:3C:97:6F:02:39
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:83:ed:f8:0f:91:b8:02:f1:b8:cc:b7:a1:8c:ae:51:3a:
06:1c:07:53:86:a3:7a:93:5c:63:1b:f0:43:bd:81:14:a9:72:
7d:61:b8:50:a0:05:d2:37:4b:bf:bf:64:ed:87:74:83:ac:76:
31:05:2f:62:64:93:1a:e2:44:d8:46:e3:e9:45:ae:58:d9:5b:
85:1d:b8:2c:49:d0:69:34:cc:f1:e0:93:f5:41:39:22:b8:9b:
bd:01:b3:49:b5:10:db:8a:ec:3b:a4:92:a8:fe:f1:22:49:82:
a8:43:4a:44:77:26:b8:8a:a0:ce:0b:81:f8:46:e8:44:28:a7:
29:37:dc:ba:03:d1:72:a1:40:d6:b9:b1:d8:e8:aa:03:9c:1c:
65:c1:96:54:a3:d3:a9:ff:87:86:8c:46:07:a7:0a:59:57:32:
cf:f3:65:5d:b9:f0:f5:d7:95:50:9c:81:13:d0:4c:9f:27:ee:
82:56:73:63:3c:f7:c4:e2:52:f5:25:51:84:05:27:49:09:3b:
34:35:05:e1:61:03:d0:37:b0:80:64:85:6b:3f:3e:04:b7:fb:
e5:db:32:ab:9a:d2:f6:6f:30:44:4a:70:29:2a:06:df:7f:ce:
ff:8b:16:b4:87:b1:9a:4d:6d:de:80:a2:3c:43:9a:f2:e5:a6:
11:18:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:10 2026 by rpki-client