Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: Js9kONgMSCHCfDQlA2dlmngz5zUWapdj1p3FdoZlmBk=
Subject key identifier: 50:06:88:F3:86:21:B6:4F:E4:A2:97:8D:67:B9:3E:D3:E4:6D:FF:CF
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019D27E0223661DC146D52C57667615A1990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: iufLVhEflIWRK7CCyLfgw3HIzUHnlGM4BO31aIYyJAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:22:36:61:dc:14:6d:52:c5:76:67:61:5a:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=500688f38621b64fe4a2978d67b93ed3e46dffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:0a:46:c1:6c:fd:77:e9:30:33:ad:fe:05:
c3:1c:a8:31:a5:1c:8d:39:ae:5d:57:0b:20:09:2c:
4c:64:b9:de:ce:28:5c:eb:26:fa:fc:1f:4a:0f:f1:
82:e8:80:7d:0c:c8:8e:13:bd:65:01:5a:1c:c9:54:
3c:14:87:d6:d1:a4:bf:75:7f:cc:64:93:40:5b:9f:
64:03:b9:ec:b4:1a:40:b5:a3:38:10:af:ca:2a:91:
bd:b9:63:92:38:8b:61:3e:b7:8e:46:ac:bd:42:85:
7f:28:f8:79:90:db:58:4a:53:f5:78:d7:58:3f:bc:
59:1b:aa:d7:3a:28:89:44:6d:6e:18:31:3a:b5:53:
74:14:a6:71:91:b1:fd:2c:0f:13:f1:21:f5:21:1a:
10:f5:4d:db:07:5d:17:5b:87:18:31:4c:76:63:8a:
22:76:ec:48:73:c3:4a:83:89:16:ab:c9:22:be:59:
82:e9:bc:66:f6:83:60:0b:06:d1:0a:38:e5:27:01:
60:97:41:aa:9b:b9:11:4b:17:27:33:2a:56:7c:bb:
09:fc:7d:7e:0d:85:d8:d6:d3:0c:8c:0e:a9:f9:d3:
84:43:34:61:26:fe:20:a7:6c:f6:2e:ca:c6:59:6d:
73:80:2b:51:85:93:92:fe:e3:2a:fa:ee:5a:d9:40:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:88:F3:86:21:B6:4F:E4:A2:97:8D:67:B9:3E:D3:E4:6D:FF:CF
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:4d:5c:66:4e:2e:52:e6:10:0c:71:6a:9c:52:e8:0a:d6:
42:ed:2f:5b:85:19:df:83:76:73:01:cf:c6:5a:9a:2d:b8:51:
fe:49:ce:eb:fa:9b:b7:79:f6:c6:3b:a4:57:9d:68:f4:99:d6:
10:98:d1:b0:f9:59:1a:27:33:14:79:5e:8d:ab:cf:85:d0:52:
bf:db:cd:dc:41:10:1d:5e:9f:c8:c8:3f:ce:42:50:13:33:3c:
97:25:d2:f1:74:24:cf:82:ed:bc:a0:00:a8:25:b9:43:95:cd:
96:9e:3b:49:66:70:7f:80:f8:79:6d:33:35:f5:c9:0a:cc:7d:
92:e5:8d:29:44:39:49:08:1f:81:6a:51:c5:e5:3a:a4:91:c6:
37:e7:d7:be:6b:2c:8e:71:cb:85:58:cc:36:7d:ca:c8:e3:fa:
d3:55:c8:82:52:e0:18:e8:23:a9:65:f2:1a:c1:87:08:fd:9f:
39:17:8a:2a:66:fb:0f:8b:86:29:ff:59:df:90:0e:67:23:14:
97:ee:d3:5c:df:e3:f4:ce:32:d9:c4:ff:89:c8:c6:75:f1:8b:
58:a5:8b:42:49:06:50:21:b8:40:65:f7:21:f4:bc:48:81:31:
65:46:d3:a4:3d:31:30:0e:e6:e8:d5:42:c0:e2:ed:cb:a4:e3:
5d:f2:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:31 2026 by rpki-client