Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: fhEh+hzZTskxIzOTkIWSoB19VgKf3ZaDVcpf3NRCX68=
Subject key identifier: F9:A7:BF:F8:6F:FA:08:6E:57:5A:D8:9D:91:C7:5B:E0:74:7C:9D:9D
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01A0DA5F9C489E205B06C55D18EC1CF9590C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 19C6
Signing time: Fri 25 Sep 2026 21:01:34 +0000
Manifest this update: Fri 25 Sep 2026 21:01:34 +0000
Manifest next update: Sat 26 Sep 2026 21:01:34 +0000
Files and hashes: 1: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: c7PJXV5L54JdP2g6/Qh+jZyI/nOB9BVYifuQ3a8O48g=)
2: niPFA17j7uRHpaTYenf6Cly67RI.roa (hash: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:9c:48:9e:20:5b:06:c5:5d:18:ec:1c:f9:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Sep 25 21:01:34 2026 GMT
Not After : Sep 26 21:01:34 2026 GMT
Subject: CN=f9a7bff86ffa086e575ad89d91c75be0747c9d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:77:55:67:e9:a2:f4:dc:b5:c1:b5:da:38:
30:68:60:4d:fe:b9:93:29:d9:ae:bd:74:46:55:0e:
cd:f1:c1:3a:c4:f1:7a:8f:01:fe:d0:3d:01:59:fd:
7a:61:37:aa:a2:63:e9:4d:e5:31:bf:0c:af:3f:44:
38:da:a9:98:31:92:80:64:ba:2b:4a:f1:06:52:a3:
aa:7c:f0:1d:21:e6:68:7d:a7:84:98:07:0d:4c:b6:
ab:ab:05:06:34:a3:07:93:56:de:a6:fb:7c:f8:65:
b9:3d:98:ab:f2:e4:97:c9:ac:ae:26:86:af:ad:b1:
a9:a1:ad:5f:15:1f:e9:6b:b3:0d:f0:d6:89:92:14:
a5:ef:91:1b:d1:67:47:5f:52:c7:4f:5b:f5:e4:8a:
c2:1d:e7:fb:f7:ef:9e:a2:8e:bc:65:0f:e5:60:b2:
45:1e:c9:f9:75:31:bb:87:ac:ba:65:51:48:a2:52:
a6:09:91:a3:79:30:67:06:d0:84:59:0f:a1:01:27:
9e:d6:01:4d:82:ed:ae:4b:8f:61:5a:f6:3d:c0:73:
81:76:04:b9:ec:d1:cc:81:12:bb:df:07:76:43:ef:
aa:28:75:54:44:97:e2:22:dc:12:36:ca:d2:af:2e:
ad:35:39:9d:fe:58:d0:6e:28:85:07:fe:db:f7:f9:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A7:BF:F8:6F:FA:08:6E:57:5A:D8:9D:91:C7:5B:E0:74:7C:9D:9D
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:a9:52:95:13:85:fe:2d:6a:bd:38:c5:47:26:9a:e1:00:75:
b1:8e:44:ec:cd:1d:df:ef:c6:d3:c9:8e:26:59:88:2e:c8:05:
e3:ac:72:49:a5:cb:54:d0:7a:cb:50:73:d9:26:fa:14:06:47:
f2:f9:de:fa:8f:7c:30:53:b6:5c:f3:32:99:70:8e:5f:f5:1a:
63:74:e3:12:6e:cd:86:ec:e6:ac:94:b2:a1:7b:d7:18:0e:99:
8a:bf:41:e8:64:cc:51:cd:60:f9:78:91:e2:37:43:45:28:1f:
88:6c:31:8e:59:8e:98:5a:67:84:98:bb:c9:2f:e3:36:35:e7:
fb:a0:df:a1:1f:a2:7d:e4:43:8f:b1:83:76:49:66:55:75:b7:
90:e4:a5:27:66:75:6f:0c:dc:5b:74:70:ee:c5:08:08:7e:a5:
f7:04:97:d1:75:7d:a0:81:f2:ca:dc:11:b7:d7:95:8b:84:be:
29:1f:98:b4:c0:0a:cd:3c:c5:e2:d0:68:f9:51:9f:7e:18:12:
a4:2a:45:b4:73:8c:4c:0c:d9:95:be:cb:4d:17:fe:4d:b8:65:
72:a0:67:6e:31:cf:09:90:1a:df:69:69:ea:b1:38:8c:b7:8b:
74:9a:2e:25:36:dc:f0:76:6e:87:50:77:78:a5:f7:c9:e8:99:
c6:32:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:54:05 2026 by rpki-client