Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: hjyqinORYE4T32I6PHAeuhH9+01jA84gOrI61SysPYU=
Subject key identifier: 6E:BA:52:E2:B4:C1:C0:F6:DA:25:BC:98:A8:5A:54:B5:79:45:1F:A2
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 019D2704712F2FC9C3403F379ED0D620BF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: yTvn7tQY/auTnCfT2hlPCFHK+tfoNqKiZBAGs8Tn26A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:71:2f:2f:c9:c3:40:3f:37:9e:d0:d6:20:bf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=6eba52e2b4c1c0f6da25bc98a85a54b579451fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6d:76:6e:38:87:c7:79:a0:7a:1d:86:f7:61:
c5:eb:e7:0f:0d:b2:51:81:cf:97:51:8d:81:35:92:
7a:5c:c8:02:e4:96:e5:d2:80:32:67:bc:8e:36:2f:
5f:c5:e0:1f:f3:12:3f:fa:58:a5:ca:79:0d:48:55:
46:99:ac:48:42:e1:05:21:b0:bf:5a:4c:19:09:30:
7f:f2:f8:69:87:a1:d1:37:c6:ca:2a:e8:8e:e4:4b:
c8:4f:50:e4:04:b6:3d:64:4e:c7:4f:d5:94:bb:5a:
d5:02:82:04:bf:27:f0:61:27:1c:31:53:b1:fd:9f:
df:3c:49:5e:2a:16:59:05:f1:46:7c:52:63:32:51:
61:a5:fb:e2:23:68:68:f4:be:a0:9c:fb:9f:17:97:
f9:b9:d8:a6:5d:43:a2:a8:f8:f9:39:d1:a5:f9:4d:
51:54:ed:7b:72:fa:03:59:9e:81:65:97:4d:fc:23:
16:7c:85:74:2b:1d:fa:a3:cb:fd:72:cd:a9:bd:dc:
50:5c:9d:7d:1c:38:6c:61:eb:1e:d2:7e:c8:8d:6e:
c8:25:b2:d9:74:8f:d0:d8:21:fb:5a:90:e9:d4:f1:
86:4f:ed:57:94:67:c2:d4:2a:ab:21:bb:7c:22:92:
e3:d4:87:a1:30:fd:48:95:24:52:13:e9:08:ea:d5:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:52:E2:B4:C1:C0:F6:DA:25:BC:98:A8:5A:54:B5:79:45:1F:A2
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ff:20:38:62:b7:5f:c6:02:e5:e0:81:85:14:6f:64:f4:3e:
50:49:5b:ae:ef:b3:37:0e:93:86:d0:ed:e9:46:88:cf:48:09:
1b:90:56:52:dd:7a:f7:32:3d:c0:f6:b9:97:a0:da:8b:fe:76:
39:0c:b0:33:63:94:0f:d7:9c:e6:51:0a:5a:c5:37:ea:8f:20:
94:30:ab:32:23:3f:49:ac:64:47:69:53:a9:6d:b9:39:f5:5b:
0e:42:61:72:05:34:af:28:18:24:96:7a:e4:ad:c2:c4:6c:47:
f1:de:62:a6:5e:1d:34:9e:33:a7:81:16:80:a1:6f:39:cc:4a:
37:71:6c:77:fe:ac:27:95:fa:d5:c6:78:b4:a2:d7:9a:3b:d9:
41:f9:e4:b5:2c:83:cb:b7:05:f0:e6:9d:05:11:ed:15:6b:51:
08:49:c8:6c:06:68:25:c5:30:0c:fb:f1:4d:c7:f4:90:e5:01:
7f:8f:d1:42:86:e7:32:36:51:8f:2e:ca:79:db:fd:fd:13:8e:
83:09:06:c9:d1:49:6a:81:15:50:11:a1:57:5d:72:fd:9d:a4:
8f:62:e1:d3:3d:bf:c8:e7:4c:b5:e6:c9:d1:04:0e:91:30:31:
a2:c8:68:74:4b:7c:8e:15:ea:17:c8:da:59:4f:3c:4a:51:6f:
af:ee:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:47 2026 by rpki-client