Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: nuXfkNtpPHd48fMCaaOFNQGBs/RIXcJhqVNEdEeJLyk=
Subject key identifier: 17:00:31:55:0F:4C:7A:61:EB:41:80:DE:45:DD:EA:B8:64:E3:0B:BA
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019D29CEAD4B7BDB820140DFA82606A66301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:43 +0000
Manifest this update: Thu 26 Mar 2026 11:01:43 +0000
Manifest next update: Fri 27 Mar 2026 11:01:43 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: XUjQkVxFT19O+Re6g26ALephQE7trTbie0LPl6tKKy0=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:ad:4b:7b:db:82:01:40:df:a8:26:06:a6:63:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Mar 26 11:01:43 2026 GMT
Not After : Mar 27 11:01:43 2026 GMT
Subject: CN=170031550f4c7a61eb4180de45ddeab864e30bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:e4:38:e1:36:06:98:72:97:5b:fa:2d:c6:
06:19:b5:d7:98:d9:40:89:83:ab:23:80:6c:1e:6f:
46:31:e8:45:6d:c2:3f:42:ab:e0:24:41:c9:19:0f:
77:1d:e7:59:3d:a0:90:e3:b7:2f:b2:b3:a3:a1:0d:
bf:e1:12:94:45:ef:13:c1:c4:67:a2:a6:5f:13:c3:
f3:fd:66:ef:1d:42:28:f6:54:01:44:60:f4:1b:4c:
48:d5:f2:d6:ce:5f:e2:68:a4:f3:8c:71:dd:d0:fd:
39:db:1b:2c:74:0e:06:9d:12:1b:67:2f:06:21:c8:
3a:04:7d:dc:a0:c2:7a:a8:34:ce:9e:2c:af:e2:4a:
f1:8a:39:fc:e8:e1:64:24:14:34:5e:3f:50:fc:b8:
b2:9a:b1:f6:44:e2:d6:e1:1f:fc:50:bc:df:00:d7:
5c:75:9d:ca:56:d5:a2:ed:69:cc:04:85:b6:68:49:
98:45:4a:6e:93:23:81:82:c5:57:76:88:0d:d9:a3:
00:58:70:59:09:21:98:84:5a:17:9f:22:be:eb:5d:
b5:5a:b7:9e:7c:cb:cc:27:c3:85:4d:72:ac:9f:7b:
f0:39:9b:85:c4:8b:73:1e:b0:b7:d9:fc:11:84:9e:
72:c0:26:0a:fa:b1:b1:46:6f:1b:b0:86:25:ec:1b:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:31:55:0F:4C:7A:61:EB:41:80:DE:45:DD:EA:B8:64:E3:0B:BA
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7b:35:9e:0d:9a:9e:f7:de:f4:4c:08:ee:dd:d5:5c:d8:9f:
f2:9e:b4:d5:03:ab:1b:35:8a:8d:80:59:fa:6e:74:4d:5f:0f:
02:01:78:75:2e:df:62:34:0a:53:7f:eb:aa:93:85:e4:6e:b2:
77:7c:31:38:81:9a:3e:fe:51:fc:93:43:00:f6:87:eb:03:89:
e3:ab:8e:98:03:07:ca:47:70:27:b9:9a:15:3b:25:e0:13:5c:
6b:d4:57:85:9b:3f:c1:c6:28:b3:9a:dd:97:7a:03:46:cb:71:
9d:95:83:88:1a:cd:85:2e:61:22:99:d1:4d:6e:0a:37:a6:d5:
40:70:24:01:f6:f8:2a:18:07:ac:5b:81:c4:d5:b9:4d:42:cd:
52:d2:ae:6b:82:07:d5:38:30:1e:97:a5:4b:be:36:9b:92:81:
4e:6e:b5:05:53:91:91:cf:25:ad:34:10:5b:f1:f4:cc:47:76:
84:9e:43:3e:8f:e3:7e:ef:5d:f3:15:8c:b8:47:43:19:c8:56:
12:3c:b4:f6:e0:cf:88:99:e8:de:48:ae:21:08:0e:19:92:4d:
93:ff:be:0c:27:3a:5f:50:cb:e6:4e:8d:7d:e8:7e:b2:34:40:
96:63:2c:b4:06:3d:19:00:3e:df:22:99:bc:fb:3f:09:75:09:
0f:07:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:37 2026 by rpki-client