Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: EqV+NxcP5IzMK5qRG6re+cQ2t6I/X7uYMLTkL3ydjJA=
Subject key identifier: 19:71:A7:BA:DB:C5:86:17:63:72:38:B8:39:C4:20:CB:82:87:F2:4B
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019F95B7AD4A633A1775597C01F136DBD689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 20:01:10 +0000
Manifest this update: Fri 24 Jul 2026 20:01:10 +0000
Manifest next update: Sat 25 Jul 2026 20:01:10 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: aOCC2YS1SZ/X57ivLg2pQX6CD6aH01HAeXFTEvtGIlE=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:ad:4a:63:3a:17:75:59:7c:01:f1:36:db:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Jul 24 20:01:10 2026 GMT
Not After : Jul 25 20:01:10 2026 GMT
Subject: CN=1971a7badbc58617637238b839c420cb8287f24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:a7:09:4c:d7:3a:21:70:af:33:36:f4:af:
fd:94:e4:b9:36:41:49:fc:a1:1b:87:9b:04:a6:25:
08:ce:56:36:d7:11:5a:04:cf:21:2d:e9:7b:a0:32:
b5:95:85:8c:77:56:73:7b:1d:1e:8c:b4:29:ae:ff:
23:27:0b:61:d3:48:8f:ad:5c:b8:53:63:42:fc:b7:
e0:2f:3c:65:07:30:85:69:d9:5b:a3:be:30:e9:39:
89:33:f6:e5:5f:ae:5f:2d:56:12:7c:7e:71:2c:cc:
4f:79:8d:d6:18:c3:e5:b0:8b:c0:ed:86:1d:fc:8d:
2c:82:51:00:ac:6f:e2:ac:28:1a:f2:ea:e2:85:c8:
f6:32:ce:ce:4c:80:1f:06:14:28:3a:21:b8:aa:46:
b1:37:24:ec:ba:4f:e2:b7:9a:7e:9f:8a:1a:2b:92:
3e:93:2d:8d:b3:6f:91:d2:e1:3b:4c:82:e6:d3:08:
55:d9:08:d2:f7:e4:45:09:83:56:94:b0:16:ac:17:
56:75:00:91:96:05:12:e8:34:62:af:94:c6:b5:b6:
02:f3:3c:3e:e8:26:1f:57:0f:db:1d:9c:5d:78:a5:
e8:38:3b:62:fe:9f:a7:2b:45:0a:b5:ba:bb:c7:43:
52:6b:b5:2a:03:de:b7:7d:cc:73:72:70:dc:4a:75:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:A7:BA:DB:C5:86:17:63:72:38:B8:39:C4:20:CB:82:87:F2:4B
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dc:9b:e0:5a:b8:ee:aa:cc:73:ef:07:c7:25:bd:99:0e:b4:
95:b7:8b:64:ac:fd:43:52:22:e9:f5:2b:dc:d2:b1:20:dd:72:
a3:a2:3c:c9:d0:a2:c5:6e:e4:d9:94:2f:0d:bc:ce:c9:c6:e8:
79:df:d6:b7:c1:eb:a6:33:af:ff:f3:22:d2:31:0e:78:0a:64:
31:4b:32:5b:69:d5:69:5f:d7:35:df:bb:df:0f:ba:b8:ef:89:
00:3e:76:d5:33:65:ea:bb:87:8e:ee:9c:03:8c:9b:4e:a6:22:
ad:2d:06:4a:e8:4a:6a:07:fe:ff:7d:ac:1b:93:5f:13:e1:68:
c7:ad:ec:a8:6a:1e:e6:33:5a:e2:42:e9:80:96:6a:20:ea:47:
a0:44:31:e8:84:9d:c7:b9:a1:97:6c:4f:40:23:08:6c:b3:c4:
29:4c:df:51:6e:bc:94:81:de:da:6e:80:b4:d1:68:b3:71:a6:
de:32:07:e2:65:bc:81:7a:f5:77:d7:ca:94:72:82:44:3e:05:
b2:9a:68:66:b2:23:25:8c:7f:d4:67:72:cc:36:5f:5f:fa:21:
3d:ef:e6:e2:7e:75:02:fc:cf:21:86:09:ef:e2:3b:5e:49:e0:
b4:11:b5:fa:0f:44:3d:65:38:67:00:fb:74:5e:34:eb:63:85:
19:4a:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:15 2026 by rpki-client