Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: ENrtoNLYQaIeKVhV43ZGZc5EjYK52MSGOXNGy/ipdFQ=
Subject key identifier: 89:F1:D5:E7:C5:3C:43:15:7C:72:03:58:DF:57:9A:4B:1B:3C:DC:8C
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019F93C90D236D15814D717177DBF2D15903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 11:00:54 +0000
Manifest this update: Fri 24 Jul 2026 11:00:54 +0000
Manifest next update: Sat 25 Jul 2026 11:00:54 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: ol3VRD9Hs5q+EBt3crKXsIEpcpTHyq5a1ypxNpnE/Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:0d:23:6d:15:81:4d:71:71:77:db:f2:d1:59:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jul 24 11:00:54 2026 GMT
Not After : Jul 25 11:00:54 2026 GMT
Subject: CN=89f1d5e7c53c43157c720358df579a4b1b3cdc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:5b:97:6d:39:70:e3:c3:94:3d:fc:58:67:
2e:ee:b9:d0:02:77:6a:80:16:a9:2d:5f:40:98:8c:
05:30:58:1e:e7:b2:14:1c:51:7b:03:68:c1:d3:79:
c2:b3:8c:e8:4b:c5:08:8e:37:51:87:e4:ef:b0:f8:
bf:f5:71:c9:e3:26:3b:a9:1b:7a:50:88:6e:5c:d7:
a6:a4:d5:c8:03:e9:c4:64:d6:5a:1a:eb:15:2e:8a:
3b:f0:a0:17:41:62:22:03:fc:7d:9c:6f:46:36:49:
09:7c:63:f9:08:fc:85:87:29:25:46:d8:fd:53:93:
58:36:0e:c8:55:43:e9:ac:a9:1b:d1:6b:13:1e:b4:
d0:5b:6e:1f:db:b2:9a:45:95:e3:2c:db:81:31:d6:
17:d0:e8:99:df:f5:f4:3a:2d:8b:4c:ba:f8:af:57:
f8:bf:1d:bf:11:f6:45:97:bf:f6:ad:78:00:46:d7:
f2:55:77:dc:eb:a3:73:88:80:d1:fc:30:9f:1c:53:
c6:bf:94:1b:fc:de:93:a5:7c:dd:e9:a2:b9:ec:35:
dd:34:4a:12:78:0e:51:91:ba:1f:89:46:d8:ee:f7:
5b:df:b6:61:3f:c9:65:c2:5c:bd:03:ee:01:05:ce:
01:ac:d1:d9:c2:15:2b:58:4f:e6:b1:ff:56:55:e7:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F1:D5:E7:C5:3C:43:15:7C:72:03:58:DF:57:9A:4B:1B:3C:DC:8C
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ef:7d:c1:6c:3e:14:2a:77:23:4b:d9:bc:12:91:4d:93:42:
e7:a0:56:14:af:67:39:f8:87:3c:eb:3f:38:37:71:86:1c:76:
c8:33:97:75:17:6e:da:c0:29:ee:1f:2c:c1:3f:65:e7:96:bd:
3e:88:fb:4d:82:b7:1a:fc:3a:9e:e5:06:81:ef:8b:48:2b:89:
24:a2:d2:28:d9:55:23:3a:22:db:c3:a6:dd:aa:02:0a:3f:94:
6b:7b:b4:9f:ba:7d:34:46:90:43:54:dd:1b:23:5c:1d:07:95:
e3:e4:2e:8d:8d:73:90:cb:69:41:7e:73:99:b5:9a:ae:d2:e7:
96:6c:9e:fb:45:de:44:6d:ff:d1:8c:f8:3d:32:1f:4d:23:f7:
d4:02:3f:0a:f2:ca:96:a9:1f:3a:26:df:8a:9f:bb:e3:0f:82:
0b:9e:58:00:2e:2e:00:6f:c1:09:7d:47:ed:9f:96:22:f3:a8:
3d:4b:3b:08:4f:38:8f:7c:42:be:8a:e5:1a:24:72:8c:91:56:
40:a5:a6:8c:be:9b:a7:07:dd:d5:a6:75:78:f8:ed:f0:d0:7e:
dc:f0:ec:c6:b9:ce:8d:a5:6a:c4:a4:b4:9f:c2:13:e2:11:57:
e0:01:3c:be:1e:5b:70:dd:ec:5f:48:a7:9d:9a:55:14:59:3c:
5b:22:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:51:51 2026 by rpki-client