Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: uwwsmTmUGRKI1R4cVjgwlikpc8BolmlRrl8RabYVX90=
Subject key identifier: 2D:38:AE:71:12:BC:73:50:8C:4F:1E:92:B9:0A:3B:D2:11:BA:0C:22
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 019F921134CB4EAFFB2267EE36302A6F0D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 191C
Signing time: Fri 24 Jul 2026 03:00:28 +0000
Manifest this update: Fri 24 Jul 2026 03:00:28 +0000
Manifest next update: Sat 25 Jul 2026 03:00:28 +0000
Files and hashes: 1: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: 03DguTxMrH4Z9q/rCso+JnhHlZZfrBBhK+jC4uZqzTE=)
2: niPFA17j7uRHpaTYenf6Cly67RI.roa (hash: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:34:cb:4e:af:fb:22:67:ee:36:30:2a:6f:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Jul 24 03:00:28 2026 GMT
Not After : Jul 25 03:00:28 2026 GMT
Subject: CN=2d38ae7112bc73508c4f1e92b90a3bd211ba0c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:46:c2:c1:52:7c:6a:48:3e:b8:63:00:f3:
3e:62:ec:a1:c6:9e:c8:ec:e9:68:cc:9a:e9:1b:49:
52:56:aa:73:c5:30:8b:9b:89:1a:08:8c:24:85:01:
d1:f1:e1:25:24:7c:75:65:aa:7a:b0:54:57:72:14:
b1:52:35:e4:3a:cc:4a:33:d3:ae:9f:9f:b5:18:96:
cf:cd:d5:66:b9:dc:9a:be:f7:27:33:19:79:48:a2:
f1:a6:b6:38:3a:f0:e2:59:4f:6c:4d:1c:b0:fd:01:
77:b7:ff:60:b3:af:bc:5c:8c:70:fb:0b:a7:85:e6:
13:b9:7b:34:22:13:a6:e9:ed:8f:33:ae:6d:9a:59:
d9:0c:ab:23:f2:8e:fb:a2:f3:bb:3f:f9:1d:c8:d7:
05:25:ef:c7:ee:8d:4a:2b:02:76:98:61:24:8e:77:
7c:d8:d4:75:70:08:29:eb:2c:c6:24:92:cf:0e:3c:
06:2a:98:ba:4e:73:de:88:92:0e:bc:82:7c:bb:0f:
d8:da:40:0b:a5:66:7a:64:12:17:ef:9b:a9:ac:23:
6b:94:c2:60:26:48:31:96:57:5d:15:a4:30:bf:cf:
b7:b0:1a:a3:76:70:18:46:71:5e:85:45:eb:28:3b:
d2:b7:cf:e8:1a:44:09:69:e3:05:43:d1:44:3e:b4:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:AE:71:12:BC:73:50:8C:4F:1E:92:B9:0A:3B:D2:11:BA:0C:22
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:c9:92:d3:62:b8:66:44:d2:ec:09:09:8d:b1:9c:a5:cb:
2d:e6:c8:83:7b:8f:d6:ff:85:e5:d7:2d:54:96:4a:a7:eb:73:
b0:93:7e:29:c8:54:6a:d2:d4:25:74:6a:7d:c0:b9:2b:75:bd:
8c:22:15:d4:6b:5f:45:af:be:98:7e:9e:fb:67:38:75:b1:e8:
bb:b8:93:3c:9d:14:0b:1d:c2:4a:52:f5:6b:ac:d7:5c:2d:b6:
67:af:11:3f:35:e6:45:0c:b0:a4:3a:2b:01:bb:94:ea:a7:04:
91:6f:53:06:7f:3f:f7:ab:5f:95:f0:17:74:03:2f:af:a9:d6:
0f:19:c6:4f:31:01:01:5d:c1:79:af:e1:bc:18:d6:b7:c4:f5:
b2:29:64:f4:7e:25:72:48:ab:91:06:49:17:e9:3c:7d:48:bb:
d5:6a:6c:07:6f:9b:24:38:c0:11:72:45:10:57:b0:cc:8e:f9:
d0:c1:bc:b4:86:c4:3f:98:8e:12:32:4c:4f:e1:d4:ab:03:39:
4b:df:e4:40:dd:dd:ac:15:76:c4:ed:51:d3:0b:3a:10:a4:e5:
07:56:4c:73:db:1d:0d:32:5c:63:60:1a:c3:83:f4:57:11:64:
f0:11:38:7d:85:99:c4:71:6b:7a:7a:c2:6f:d4:a2:99:a0:bb:
b8:ae:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:45 2026 by rpki-client