Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: lAiamvvgSMvlx7PLFcq0ISGBmjI2VbsJnmZ2IJ0dzJ4=
Subject key identifier: B7:D1:EF:49:8B:81:83:F3:C3:60:05:68:9A:47:2D:5F:1C:74:02:DB
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 019D29297183E6BF8052C1345598423FB5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 074E
Signing time: Thu 26 Mar 2026 08:01:15 +0000
Manifest this update: Thu 26 Mar 2026 08:01:15 +0000
Manifest next update: Fri 27 Mar 2026 08:01:15 +0000
Files and hashes: 1: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: P0o+hjTNpQdtB0AM//4jyeN/Ls+NHiu6jNEE09oo01c=)
2: qqoPemYi4_pyOzOVoO62_Uat0so.roa (hash: Sdr4R7TpF1P6pqqGJyLye0mNOG4fczQyXXubw1Zcqyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:71:83:e6:bf:80:52:c1:34:55:98:42:3f:b5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Mar 26 08:01:15 2026 GMT
Not After : Mar 27 08:01:15 2026 GMT
Subject: CN=b7d1ef498b8183f3c36005689a472d5f1c7402db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d3:00:12:bf:6b:e4:6c:d5:e4:40:28:dd:2f:
96:6c:2f:a9:af:c1:a6:f2:43:7a:40:47:43:0d:be:
9d:ba:df:b6:d7:f3:91:2a:fb:35:af:95:cd:70:1b:
0c:09:ac:90:48:0a:3b:45:d4:b4:bb:06:b5:43:a3:
f9:3b:68:e5:62:f7:0f:97:e9:1d:25:f1:a5:b0:9a:
c6:6a:16:38:af:46:d9:6c:fa:2b:51:ac:65:24:a2:
dc:5c:37:c3:1d:2e:82:9e:44:e0:d7:43:7b:eb:9e:
c0:ca:ec:4d:08:e0:e0:b8:bc:3a:42:a7:56:5b:6a:
fa:fc:c7:f8:11:ff:63:6f:7b:c0:8f:1e:e0:4d:a2:
c4:ae:d7:65:9a:f4:7e:b4:14:82:85:53:e0:52:b6:
bc:41:66:df:ff:bc:06:67:b5:30:e3:e6:d0:29:35:
1e:25:74:a7:7e:62:af:3c:e1:65:4b:fd:dc:8a:c6:
52:41:e8:ba:ec:18:0b:f0:f4:93:12:c5:5a:9b:6c:
5e:22:49:b3:c5:de:2e:7a:f6:17:c3:f9:2a:ba:95:
ad:b5:05:25:07:bf:62:4c:72:2c:8a:8e:5c:a1:c3:
fa:9b:b9:66:99:ff:c6:61:ba:ee:cb:db:f9:7b:14:
7b:53:bd:23:9e:52:1a:93:20:93:ae:6f:cd:86:6b:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D1:EF:49:8B:81:83:F3:C3:60:05:68:9A:47:2D:5F:1C:74:02:DB
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:89:b9:c2:c8:0e:b3:aa:78:ae:2c:10:cd:7d:66:06:5e:59:
a4:e0:16:c7:9c:8b:ce:47:5c:dc:8b:f3:6e:57:31:84:58:1a:
37:e1:b7:69:1d:b1:71:26:2e:60:74:fa:e8:82:b6:91:e0:c7:
04:e4:96:90:df:f4:c9:bb:de:5b:16:92:22:11:15:6a:ee:5b:
dd:10:bc:94:37:57:02:78:85:c7:01:e4:2d:03:2f:e0:38:65:
49:e3:52:f1:c7:bc:cf:00:b8:43:42:1d:d5:7e:8d:1a:1b:1d:
ea:ec:3e:17:4d:24:ed:d7:39:1f:cb:09:aa:3d:4d:15:8a:a8:
0f:e0:a0:05:79:da:5b:a2:a8:b1:7b:df:03:aa:84:b1:6c:65:
0e:60:67:d7:7b:23:c8:27:4f:f8:d9:d2:65:5c:e9:97:30:fd:
e2:e7:ae:22:36:21:f2:6c:0e:b3:0f:d2:05:9c:ea:9b:35:da:
94:48:a6:40:b3:9e:48:1b:47:f8:cd:19:78:7f:de:b3:e8:44:
83:91:af:86:f3:64:cc:5a:4d:93:60:32:02:66:f6:f7:e6:a2:
b9:3c:f2:e9:08:96:38:5a:2a:22:03:8f:e7:ae:bc:34:59:5d:
78:5b:f7:86:23:65:af:39:8e:4d:b8:7d:d3:92:b4:81:9a:40:
b0:ef:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:24 2026 by rpki-client