Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: 620FkOpDqEq6lG99KRAVfZlj4qUggEeZGzvzhuqNp+E=
Subject key identifier: 5D:E6:CB:4A:E7:2D:25:99:D6:AE:D1:84:27:A5:78:DA:70:22:54:C7
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019E1F10BF2E6A5682308DA33741071F31C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 02:00:51 +0000
Manifest this update: Wed 13 May 2026 02:00:51 +0000
Manifest next update: Thu 14 May 2026 02:00:51 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: zF6u3sC7Fqdgtom0jeaTHt5oL9Mfu/ZRbYaeOaSvI4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:bf:2e:6a:56:82:30:8d:a3:37:41:07:1f:31:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: May 13 02:00:51 2026 GMT
Not After : May 14 02:00:51 2026 GMT
Subject: CN=5de6cb4ae72d2599d6aed18427a578da702254c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:a2:79:e1:c5:9a:1d:c3:cc:7c:60:4d:1f:
1a:7d:ee:95:5a:5b:3f:0d:ab:a3:40:4e:31:dd:3b:
71:6b:ca:b9:4c:1d:b6:1b:6a:22:8c:53:dd:ee:72:
bb:87:e7:c9:1e:54:02:0f:bf:02:64:6c:3e:b3:2e:
cf:83:8b:93:44:9c:ba:86:c6:32:6c:20:ce:52:3e:
18:be:f3:f9:fb:31:41:06:1b:42:df:6a:e1:50:b0:
1f:0f:f8:c1:ac:dc:e0:5b:33:46:20:ea:91:8e:0a:
ba:0b:00:62:b8:b4:2f:8c:d0:89:14:f6:b6:51:d8:
36:4b:67:c8:2c:96:a5:4e:94:b3:ef:87:5e:05:6a:
54:1c:8c:4d:dd:96:82:db:87:34:91:77:2c:44:a9:
a9:b0:64:39:75:e3:ea:25:65:5f:30:22:79:54:b5:
86:5e:60:63:42:bb:6f:86:3c:44:06:4c:f4:b6:db:
b8:b4:51:5c:a1:14:79:4d:7c:ee:99:ea:22:34:39:
f2:90:70:cb:2e:1f:32:a2:2a:43:4b:b2:26:4e:71:
90:49:93:e9:9f:00:bf:64:b6:ca:ac:ba:54:4d:49:
40:7b:6c:51:9d:34:97:53:d4:50:78:be:53:85:44:
1c:38:81:b5:43:85:6f:b8:55:c9:b4:13:28:48:c1:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:CB:4A:E7:2D:25:99:D6:AE:D1:84:27:A5:78:DA:70:22:54:C7
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:64:f1:0c:0b:3e:11:0e:1b:61:ba:20:a7:b2:69:88:fc:a5:
57:7d:7a:2b:30:eb:0a:f4:22:7f:f4:c4:55:a3:c6:24:72:86:
20:e7:76:17:bb:ab:aa:61:85:bc:d3:79:8a:3b:99:86:c3:01:
a2:75:02:9b:11:db:d5:39:ec:39:ff:db:3c:2e:0c:c6:7c:e1:
cd:fb:1a:3c:92:15:9b:6c:a7:c6:9c:64:a7:fa:49:fb:cc:aa:
47:70:45:2b:7d:5d:47:dd:86:50:63:25:a7:86:a0:8f:7d:48:
ae:08:57:01:3a:43:40:96:b4:19:01:1d:82:73:b7:41:2b:fa:
67:f3:40:b5:0c:24:65:48:4b:d7:00:3c:82:42:90:26:01:6e:
fc:26:90:48:b3:4d:b2:a7:82:76:25:cd:1b:2e:1b:26:38:a5:
23:92:5a:3c:3d:0a:e9:7d:1b:66:b4:2b:9d:0d:e3:70:ea:8e:
43:b1:21:a0:79:9e:1b:55:52:19:35:61:1c:6e:7e:dc:0a:4f:
d0:f7:30:8f:c1:ba:39:35:b9:86:72:f1:03:ec:2a:3a:79:b2:
b8:7b:96:59:0e:46:4d:d9:a3:8f:99:fa:b5:27:95:dd:86:a3:
1b:ff:59:d8:80:52:72:cf:8d:3e:95:3e:32:fb:a3:1f:9c:e2:
af:11:95:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEL8ualaCMI2jN0EHHzHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj
MzMyNTAwHhcNMjYwNTEzMDIwMDUxWhcNMjYwNTE0MDIwMDUxWjAzMTEwLwYDVQQD
Eyg1ZGU2Y2I0YWU3MmQyNTk5ZDZhZWQxODQyN2E1NzhkYTcwMjI1NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V+ieeHFmh3DzHxgTR8afe6VWls/
DaujQE4x3Ttxa8q5TB22G2oijFPd7nK7h+fJHlQCD78CZGw+sy7Pg4uTRJy6hsYy
bCDOUj4YvvP5+zFBBhtC32rhULAfD/jBrNzgWzNGIOqRjgq6CwBiuLQvjNCJFPa2
Udg2S2fILJalTpSz74deBWpUHIxN3ZaC24c0kXcsRKmpsGQ5dePqJWVfMCJ5VLWG
XmBjQrtvhjxEBkz0ttu4tFFcoRR5TXzumeoiNDnykHDLLh8yoipDS7ImTnGQSZPp
nwC/ZLbKrLpUTUlAe2xRnTSXU9RQeL5ThUQcOIG1Q4VvuFXJtBMoSMFaFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3my0rnLSWZ1q7RhCeleNpwIlTHMB8GA1UdIwQY
MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct
ZTA4YmUwZWRhZjc2LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2
LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmTxDAs+
EQ4bYbogp7JpiPylV316KzDrCvQif/TEVaPGJHKGIOd2F7urqmGFvNN5ijuZhsMB
onUCmxHb1TnsOf/bPC4MxnzhzfsaPJIVm2ynxpxkp/pJ+8yqR3BFK31dR92GUGMl
p4agj31IrghXATpDQJa0GQEdgnO3QSv6Z/NAtQwkZUhL1wA8gkKQJgFu/CaQSLNN
sqeCdiXNGy4bJjilI5JaPD0K6X0bZrQrnQ3jcOqOQ7EhoHmeG1VSGTVhHG5+3ApP
0Pcwj8G6OTW5hnLxA+wqOnmyuHuWWQ5GTdmjj5n6tSeV3YajG/9Z2IBScs+NPpU+
MvujH5zirxGV1g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:48 2026 by rpki-client