Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier: ihT3mHz3gHoDf36Uuxcx8V39xA6xoA6Q3+AK3I05reA=
Subject key identifier: 8E:86:AB:27:95:7D:40:9F:BA:BC:59:2A:F3:7E:04:06:75:84:C2:EC
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial: 019F927F0847A52B9021A0F9D9CBB991C213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number: 025A
Signing time: Fri 24 Jul 2026 05:00:26 +0000
Manifest this update: Fri 24 Jul 2026 05:00:26 +0000
Manifest next update: Sat 25 Jul 2026 05:00:26 +0000
Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: SWQfGn+4SpfbvQoQDeY/Cy2eBJOUXE5qdI5oA1ArRvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:08:47:a5:2b:90:21:a0:f9:d9:cb:b9:91:c2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Validity
Not Before: Jul 24 05:00:26 2026 GMT
Not After : Jul 25 05:00:26 2026 GMT
Subject: CN=8e86ab27957d409fbabc592af37e04067584c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:72:0f:dc:e5:4b:b8:d7:f6:6c:ca:bf:1c:
a7:c1:3c:74:b8:89:12:84:7b:fa:5c:d8:53:70:30:
de:91:0d:2c:dd:d2:17:20:f7:32:99:38:3a:ea:97:
5b:df:ab:39:14:5e:c3:32:d2:9e:57:9c:e7:3a:44:
61:a8:69:5c:76:cf:aa:4d:26:16:18:76:a8:45:9d:
8d:7d:f7:d0:96:53:d7:e1:45:b7:dc:1a:3c:86:d0:
b0:b5:e6:0b:cc:f4:31:86:04:88:a0:17:b8:02:1e:
70:e3:8d:ca:4f:a6:0d:64:3f:24:a6:c6:48:4e:36:
f0:a3:71:76:36:7f:13:57:20:23:6e:03:09:0b:a4:
f3:cb:d3:62:b8:0d:74:b9:31:72:68:ed:d7:6d:be:
27:8c:ee:4e:b4:82:7a:bd:db:77:13:89:52:2c:32:
cb:c2:78:b8:3c:fa:4c:a8:a1:d3:b2:7d:17:b2:02:
97:e7:8e:2a:46:8c:3d:49:84:18:67:b5:d6:76:86:
c3:16:4e:4c:9d:26:e2:d1:27:a5:e7:c9:5e:41:d6:
4e:94:2a:63:dc:5f:24:bf:3f:ab:ff:2c:f5:81:71:
4a:47:0d:84:49:71:14:65:c3:da:23:87:6d:a6:88:
e1:b3:cb:56:d2:c4:26:c8:b7:ec:dd:2f:20:69:23:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:AB:27:95:7D:40:9F:BA:BC:59:2A:F3:7E:04:06:75:84:C2:EC
X509v3 Authority Key Identifier:
keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ba:f7:4b:83:e5:45:95:6d:ae:5e:60:7c:8b:dd:aa:5f:fb:
24:d0:e8:ce:2e:2b:89:99:16:93:c7:99:d3:b7:fb:75:70:13:
71:bc:e5:bd:f7:db:70:d5:a0:94:6c:ae:ce:b2:ff:c0:60:50:
f3:b2:b9:0b:61:0a:8d:85:ba:aa:5f:c1:a5:8b:29:5f:65:fd:
17:ab:96:be:76:27:96:8e:02:b2:66:17:8d:3c:22:96:78:8b:
74:09:91:f5:20:07:c4:ef:aa:36:6e:3a:12:1b:45:e6:fc:d9:
15:b6:22:1d:b6:82:77:98:ba:55:76:64:5c:b1:fe:07:c3:41:
71:55:f7:58:9c:29:f1:a7:8c:b8:96:8d:e8:7a:6e:1c:6e:a2:
7b:9a:3a:a1:36:3d:50:d9:af:4f:c9:80:46:03:91:ec:99:e0:
6d:63:91:b5:ac:6e:3c:6a:72:40:8e:75:74:a0:a6:07:28:b7:
60:12:65:e1:c6:72:43:3b:ce:cb:1b:2d:23:57:f9:9f:3b:80:
11:7d:be:70:b1:41:61:ba:0a:10:6d:e3:0f:ec:81:88:11:63:
01:8f:ef:99:f6:e7:04:5e:eb:33:74:21:f5:78:01:e5:18:15:
8f:a8:64:d0:fc:aa:8d:0f:7e:c0:2d:c2:bc:6c:49:e5:49:c9:
53:ee:61:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfwhHpSuQIaD52cu5kcITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzQzMjI5ZGUyNTFjYzg4MjVhN2M0NGM4ZmU5M2U0YWNk
YmMxMTUwHhcNMjYwNzI0MDUwMDI2WhcNMjYwNzI1MDUwMDI2WjAzMTEwLwYDVQQD
Eyg4ZTg2YWIyNzk1N2Q0MDlmYmFiYzU5MmFmMzdlMDQwNjc1ODRjMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24dyD9zlS7jX9mzKvxynwTx0uIkS
hHv6XNhTcDDekQ0s3dIXIPcymTg66pdb36s5FF7DMtKeV5znOkRhqGlcds+qTSYW
GHaoRZ2NfffQllPX4UW33Bo8htCwteYLzPQxhgSIoBe4Ah5w443KT6YNZD8kpsZI
Tjbwo3F2Nn8TVyAjbgMJC6Tzy9NiuA10uTFyaO3Xbb4njO5OtIJ6vdt3E4lSLDLL
wni4PPpMqKHTsn0XsgKX544qRow9SYQYZ7XWdobDFk5MnSbi0Sel58leQdZOlCpj
3F8kvz+r/yz1gXFKRw2ESXEUZcPaI4dtpojhs8tW0sQmyLfs3S8gaSPVrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6GqyeVfUCfurxZKvN+BAZ1hMLsMB8GA1UdIwQY
MBaAFDM0MineJRzIglp8RMj+k+Ss28EVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUt
NjQ4MzJiMzkwNTdkLzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUtNjQ4MzJiMzkwNTdk
LzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7r3S4Pl
RZVtrl5gfIvdql/7JNDozi4riZkWk8eZ07f7dXATcbzlvffbcNWglGyuzrL/wGBQ
87K5C2EKjYW6ql/BpYspX2X9F6uWvnYnlo4CsmYXjTwilniLdAmR9SAHxO+qNm46
EhtF5vzZFbYiHbaCd5i6VXZkXLH+B8NBcVX3WJwp8aeMuJaN6HpuHG6ie5o6oTY9
UNmvT8mARgOR7JngbWORtaxuPGpyQI51dKCmByi3YBJl4cZyQzvOyxstI1f5nzuA
EX2+cLFBYboKEG3jD+yBiBFjAY/vmfbnBF7rM3Qh9XgB5RgVj6hk0PyqjQ9+wC3C
vGxJ5UnJU+5hjg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:44 2026 by rpki-client