Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier: LdwaG+AHI2apd+YFO6d5xZ1O2xaBGNgbYKbm79MNMQE=
Subject key identifier: BB:27:E7:EE:ED:B6:9C:17:36:E6:6C:73:83:FC:1D:54:57:68:10:4A
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial: 01A0E098C2ED86406A9E476B134D03820F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number: 0307
Signing time: Sun 27 Sep 2026 02:01:42 +0000
Manifest this update: Sun 27 Sep 2026 02:01:42 +0000
Manifest next update: Mon 28 Sep 2026 02:01:42 +0000
Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: SUPwDHBVe0jAl3mz82VnbrLl8Kn+C2Ibkn8cx3SKmCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:c2:ed:86:40:6a:9e:47:6b:13:4d:03:82:0f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Validity
Not Before: Sep 27 02:01:42 2026 GMT
Not After : Sep 28 02:01:42 2026 GMT
Subject: CN=bb27e7eeedb69c1736e66c7383fc1d545768104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:da:8d:de:fd:5b:6e:37:df:26:00:a4:c3:
22:69:d7:c2:07:f0:eb:88:d4:a0:bc:f6:a8:fe:31:
13:9a:f5:a7:b2:1d:b6:07:f6:a8:c4:69:5c:81:f6:
ff:b1:e3:53:ad:6a:95:c8:de:57:03:43:8b:5b:ae:
0a:25:04:3e:59:23:dc:06:bd:f0:35:0b:bd:19:4b:
e2:e7:39:79:fe:67:38:4a:3f:cd:c5:d2:91:81:31:
5c:3b:b0:eb:61:0c:5c:50:3d:52:a1:a3:7f:8f:45:
89:57:0d:7d:9d:cf:9b:d0:09:cd:e2:b5:2e:a7:a9:
35:b5:c0:f4:20:24:9b:64:00:3b:70:eb:1a:4d:6f:
82:2e:ab:5f:32:4b:eb:e3:bb:3a:93:88:52:0a:0f:
77:b4:58:0c:f5:ef:b7:ec:b2:aa:0d:68:e6:48:99:
39:d5:fb:60:92:d6:fb:b7:fa:39:ee:4e:39:aa:7a:
50:a6:6b:92:3e:37:2a:c7:85:18:39:a6:09:90:e9:
1d:42:fa:d7:19:6e:51:28:b4:12:76:c7:09:02:31:
c6:c7:c2:c5:24:a4:71:80:d8:ba:ed:b9:84:78:07:
c9:58:1c:d7:b6:55:0f:ec:4a:14:6f:a2:b0:bf:6a:
0d:29:e6:73:0b:be:4e:85:a8:7f:57:d3:5a:a4:ab:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:27:E7:EE:ED:B6:9C:17:36:E6:6C:73:83:FC:1D:54:57:68:10:4A
X509v3 Authority Key Identifier:
keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:08:a3:ed:98:06:78:4d:a1:c8:d8:49:d5:32:f8:e8:df:8d:
b4:5c:d3:04:d0:f4:23:53:f0:c8:a1:7a:a8:88:0c:1b:1d:e2:
0d:f4:09:bd:d2:8a:28:d6:26:66:80:b8:8c:84:00:77:1a:f3:
2e:3b:37:5f:f0:a4:3a:7a:1d:97:21:4b:83:16:e6:1f:3c:9f:
49:8b:17:bd:4e:cf:9f:c0:f4:42:9f:dd:fd:92:c2:90:d8:db:
00:40:97:22:e7:9a:e6:c0:d2:06:c9:ba:9c:fa:24:16:05:4c:
db:95:55:e3:98:5f:39:06:4e:01:20:fd:75:e8:30:77:ab:46:
3a:4c:40:16:1e:fd:f9:e3:06:fe:a2:ee:bb:8b:16:c2:5c:3f:
d4:fa:81:92:80:f5:f2:e3:13:f9:6b:a0:91:a9:f4:a0:ff:04:
14:91:1d:bf:51:63:76:ed:5c:55:bc:04:68:69:f1:af:0b:a6:
85:f9:c6:85:ff:52:94:39:e9:88:c8:61:88:7a:35:54:03:7c:
dd:7c:5f:9f:fc:ec:1d:6f:44:1e:5e:ca:1f:48:7f:b4:79:41:
b7:5e:93:94:aa:6c:df:66:21:50:e5:aa:3f:3e:f1:ac:82:13:
76:8e:dd:1e:4f:2b:c1:01:3b:b0:7e:a9:53:e7:f5:93:ce:50:
bf:b6:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:17:08 2026 by rpki-client