Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier: 5DIYyDyGSombgqa8aSXcwEdxB7YSm0jGysBoRpA+PtU=
Subject key identifier: DF:68:97:02:0D:2A:42:07:BF:F7:1C:56:10:2B:BD:91:16:70:11:91
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial: 019D2B85435C0E989AD5C3DD0330673A6DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number: 082E
Signing time: Thu 26 Mar 2026 19:00:46 +0000
Manifest this update: Thu 26 Mar 2026 19:00:46 +0000
Manifest next update: Fri 27 Mar 2026 19:00:46 +0000
Files and hashes: 1: H2UHdxs--mUhysff_fZAcgdRx8M.roa (hash: +4m/DoxWlWwqGWh1EfHl8rJsWNMtyllJ1qewG1BywTo=)
2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: 9ukDbh5Ya4NhaHJwt6IdQsOluShuDSihXq0pZZbHa8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:43:5c:0e:98:9a:d5:c3:dd:03:30:67:3a:6d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
Validity
Not Before: Mar 26 19:00:46 2026 GMT
Not After : Mar 27 19:00:46 2026 GMT
Subject: CN=df6897020d2a4207bff71c56102bbd9116701191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:d2:90:c4:a6:4f:86:13:8a:83:0b:fa:d3:
f2:da:3e:9d:68:53:13:bc:40:63:32:44:f7:09:29:
e2:3a:7a:39:50:b7:22:88:cb:02:63:ca:56:a2:ba:
72:7d:0d:19:91:8f:f2:7d:2e:57:84:14:03:c9:54:
43:05:17:a5:3d:ad:89:05:e8:f5:96:9e:58:8c:5e:
35:c9:67:17:18:5d:9d:75:20:df:97:3c:f3:5c:e7:
00:ec:bb:ed:1a:ca:bc:2e:a0:28:27:d6:e6:66:76:
19:72:11:e7:80:9a:62:75:1f:ca:b5:2f:7b:97:58:
e7:ea:68:29:b5:22:0e:ce:71:e7:44:d1:7c:cf:08:
f5:cd:56:5d:e6:50:57:fa:c8:fa:96:56:e1:b5:24:
c5:e7:ec:f7:f1:8f:63:d2:3e:4c:17:03:03:1d:dc:
18:46:6f:1a:34:53:00:75:8d:e1:3c:a0:54:ef:8d:
33:aa:91:d6:5e:43:88:5e:85:47:68:03:4d:14:1a:
4d:a0:ea:c0:ff:55:2e:10:8d:45:0c:15:c9:09:30:
ff:48:2d:c5:70:6b:6e:ad:a3:8e:40:2a:8e:f2:f5:
de:73:1b:c1:fb:45:ff:3d:7e:55:66:7f:4d:ea:93:
88:62:6b:51:4c:70:a7:06:f6:64:df:f5:6f:eb:1c:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:97:02:0D:2A:42:07:BF:F7:1C:56:10:2B:BD:91:16:70:11:91
X509v3 Authority Key Identifier:
keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c9:00:3e:42:49:a7:12:cb:2e:43:43:bf:eb:31:13:aa:84:
87:8c:15:2b:ef:c7:28:59:22:3e:92:51:2f:1f:64:b9:70:a6:
8b:b6:9b:63:96:33:62:28:14:63:7e:fd:bd:c5:ee:fb:cb:9b:
40:65:78:87:da:08:12:db:46:3d:ee:c0:f2:9c:c6:08:5a:7c:
81:67:6e:6c:bc:cf:38:2e:40:37:98:65:d0:92:fd:b3:44:44:
e1:95:60:8d:b1:92:7e:57:16:2b:d1:fa:8b:60:bd:81:64:95:
49:e1:50:61:ad:a1:5a:98:89:7d:96:84:a4:7d:ac:64:57:85:
05:79:11:6a:ad:46:7f:d7:2f:18:42:d8:72:53:93:58:22:02:
0f:92:03:33:24:ab:d2:2f:71:5c:4b:e0:aa:df:c7:dd:3c:d2:
38:f4:d1:bd:eb:46:a2:96:c2:ef:eb:99:ca:76:93:62:7f:7c:
36:12:4a:08:ab:1a:b0:87:49:5f:24:78:ce:95:4f:64:88:f7:
69:f2:45:55:f7:94:d3:32:f4:c2:27:d1:48:c0:0d:d3:6e:40:
b3:b7:dd:47:02:3f:3e:af:54:30:a5:85:fb:9e:23:c1:a5:a5:
8a:26:7e:42:a5:c8:16:39:12:07:5f:7d:b8:39:71:70:11:8b:
1b:f8:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:01 2026 by rpki-client