Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File: MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier: GgLplJZAVrAu8B5JxGR/Ni5lmDjX8xPtF8KGfnbUjQA=
Subject key identifier: B7:25:DB:BA:E5:CA:F1:EB:C6:73:F0:C1:17:97:18:7E:E1:88:44:74
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer: /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial: 01A0D83BF79F2E38C19C878FCC9DFC1F3EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number: 1616
Signing time: Fri 25 Sep 2026 11:03:23 +0000
Manifest this update: Fri 25 Sep 2026 11:03:23 +0000
Manifest next update: Sat 26 Sep 2026 11:03:23 +0000
Files and hashes: 1: LxGPVJPyHWs5hHWhFZXK4a7O2-M.roa (hash: DEIc9UcHZJ6CJFEO4vc1601YJk4dflrb/oBYiYPKpTI=)
2: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: rYNFtzSEUolokN84wNW9OcYWSh5l8f5PcjRU8wWW1X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:f7:9f:2e:38:c1:9c:87:8f:cc:9d:fc:1f:3e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
Validity
Not Before: Sep 25 11:03:23 2026 GMT
Not After : Sep 26 11:03:23 2026 GMT
Subject: CN=b725dbbae5caf1ebc673f0c11797187ee1884474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:b1:4a:31:f3:96:86:46:2e:a0:9f:6c:cd:
ec:f4:5a:c5:26:bf:6c:66:4e:aa:3a:52:58:6c:ca:
ea:7e:0f:22:c7:82:34:80:93:4d:a8:73:17:3c:b7:
c5:ee:5f:0e:c2:df:7c:db:ab:0a:2f:51:9d:09:fb:
2e:a6:d1:0a:d3:0b:df:5d:eb:9a:5b:1e:25:a9:e0:
57:bf:a9:54:d1:17:9a:25:30:a4:66:d9:e1:85:6c:
ae:82:c4:f7:8b:f2:ba:37:ec:3a:aa:a8:41:cd:3a:
d0:26:78:10:f0:7c:81:ad:1c:8c:bd:a5:05:81:57:
7f:29:68:75:27:e8:ec:d7:8c:9e:02:93:bd:a5:13:
be:1a:1b:28:f2:e5:9c:bb:5c:b9:ef:b3:a5:9c:3c:
7c:ae:a4:22:09:bb:07:5a:49:ec:79:79:a1:48:e0:
a3:ad:86:0a:5c:7a:55:73:33:b9:09:7c:97:b5:91:
24:ee:d1:f2:78:9d:da:5a:46:00:28:ef:d1:5c:06:
ee:34:65:b0:5f:e5:ed:8b:23:48:0a:be:0d:be:d2:
d0:09:2d:5e:50:d0:0d:c0:9a:7d:be:ac:4c:75:fe:
a2:ed:53:e2:5b:3f:28:01:22:ce:95:06:21:59:4a:
fd:b7:84:03:ee:d7:61:95:1e:ef:5d:55:d0:79:9f:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:DB:BA:E5:CA:F1:EB:C6:73:F0:C1:17:97:18:7E:E1:88:44:74
X509v3 Authority Key Identifier:
keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:ca:68:b8:17:e0:2a:bd:be:3b:f1:9c:6c:6a:9b:02:95:
69:86:ed:e4:39:aa:10:80:60:69:e1:51:6b:48:04:d1:ee:fa:
7c:c8:98:b8:0c:00:0e:38:77:17:c8:cf:9d:ec:d0:06:73:a0:
3e:9d:e6:af:cd:49:c8:b0:98:e2:d0:35:38:b2:2c:11:28:d5:
4e:2f:6e:c9:cd:6e:7c:c6:52:63:47:c8:f9:02:9c:3c:ef:8f:
5f:2b:c8:cc:57:a7:30:d8:9a:5d:df:3b:34:19:f3:c7:53:79:
96:23:de:53:23:5b:ad:fb:fb:f4:7b:ab:76:7a:08:c5:51:96:
ce:48:99:a9:63:10:8f:47:8c:d4:4b:23:a1:76:f3:28:f1:10:
45:56:42:31:76:99:05:7a:c5:d3:5b:2b:52:97:d2:46:b3:63:
6d:9f:ec:48:2d:ae:95:2d:c8:52:5e:d4:7f:48:17:da:b2:bf:
ae:a4:80:06:9d:23:47:56:2a:49:b7:00:10:a9:78:0f:74:be:
6d:99:93:e7:00:ae:06:06:93:54:f9:c2:b9:46:ad:90:d1:98:
f6:0a:86:59:52:44:e4:c6:c6:c8:9f:ce:c1:49:e7:97:31:40:
93:e7:63:35:03:f8:a5:dd:79:59:40:3b:97:40:ba:48:48:25:
d7:1a:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:32:54 2026 by rpki-client