Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: RdrdnfoTR33V3QLyyjBD7FtQ2rMfhumWEQvtj6u9YKs=
Subject key identifier: 3C:79:F9:A6:EB:9F:48:D2:92:87:B7:89:B7:AE:6A:09:D7:AF:DB:24
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 01A10A7094EBDF5FD0B8D915DC9CC111E6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 05:01:52 +0000
Manifest this update: Mon 05 Oct 2026 05:01:52 +0000
Manifest next update: Tue 06 Oct 2026 05:01:52 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: Wo1mZxPD0O67YX+s843QcGalds6HondJsM6VgGSJbNo=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:94:eb:df:5f:d0:b8:d9:15:dc:9c:c1:11:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Oct 5 05:01:52 2026 GMT
Not After : Oct 6 05:01:52 2026 GMT
Subject: CN=3c79f9a6eb9f48d29287b789b7ae6a09d7afdb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:e8:04:93:f2:95:d0:8a:e8:47:69:1f:97:
5a:d3:3c:b6:e3:03:fc:4c:e1:0c:95:82:81:76:18:
6f:b2:32:62:08:e7:9b:93:6e:37:fd:01:f7:52:d7:
6a:2e:3e:51:da:03:54:f1:99:a8:8f:f2:c7:ef:80:
67:5a:ae:fd:74:1f:fa:9c:2c:e9:36:60:7b:49:3e:
8f:d6:47:70:91:76:4e:ff:25:45:fc:7f:57:70:12:
6a:77:eb:1f:19:d8:f2:ad:8b:e8:5c:0d:d4:f6:c2:
36:9e:58:8d:87:d6:75:72:22:26:85:3e:77:94:14:
3e:53:7d:23:b2:ba:ff:77:e4:6f:25:7a:59:6c:5d:
cd:a1:3f:75:d0:4d:3f:a6:ba:9e:ce:64:90:c1:75:
ee:0e:ed:8d:21:1d:6a:2d:ca:8d:a7:a5:86:bc:55:
25:7c:92:9d:f2:e9:28:7a:70:0b:45:6b:a2:92:48:
2e:41:4f:eb:aa:85:36:f2:6a:e6:65:9e:3c:95:d3:
42:a6:af:73:91:cb:76:83:27:ee:dd:85:d6:b1:c9:
f8:bc:9c:f5:72:41:7b:20:b7:ac:d9:ce:16:3d:61:
a9:67:ea:30:e9:6a:3c:f6:66:fb:b2:60:d0:b7:42:
3d:50:fe:c7:d4:35:be:e0:a9:4e:bd:00:b5:d4:56:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:F9:A6:EB:9F:48:D2:92:87:B7:89:B7:AE:6A:09:D7:AF:DB:24
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:c9:3e:cc:61:d1:cc:05:95:58:f0:42:e0:45:89:c6:3f:
80:e4:48:7e:ab:2f:7d:60:74:ec:16:b8:73:78:72:6b:b9:64:
5a:1b:dc:82:09:9f:29:36:43:93:db:97:53:d4:ea:43:86:0b:
50:d2:ec:57:06:22:55:87:94:01:03:17:1f:ae:b0:8e:3e:9d:
55:14:7e:5f:9d:fd:70:9c:da:60:0f:67:ee:8c:0f:cf:8a:65:
b1:b5:e8:27:1a:87:b4:f8:96:36:93:23:07:c0:e2:c8:60:d6:
5c:f8:69:00:11:98:11:5d:47:cb:a1:df:df:11:88:f2:30:bf:
04:12:7d:43:9e:4b:4e:42:7e:c1:30:7a:6b:6b:a6:5b:41:92:
0a:90:48:a7:dd:d3:bb:f4:34:c2:b4:6f:2b:18:2b:2d:ee:a2:
be:72:61:25:26:b4:1c:81:11:b1:d0:80:04:34:35:59:f8:48:
8b:e1:15:e9:d1:38:22:54:96:8c:0e:8f:73:93:31:16:4e:7f:
89:55:bf:ff:ab:fd:03:47:eb:0f:20:1e:cd:48:66:bf:bc:4e:
76:e0:87:b4:0f:3b:d8:b1:1e:ee:32:e8:1c:20:5e:c0:e2:61:
97:ac:91:70:d6:fe:f2:1d:4d:60:a6:26:c5:f0:27:e9:ef:2a:
8c:15:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:52:47 2026 by rpki-client