Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: AdS91HuLwJqrkAglwfw81x96qdyozKYuAp4mymy5vBI=
Subject key identifier: 44:59:05:1A:5E:EC:28:8A:C3:CE:EB:B6:F1:E8:B4:DF:12:94:50:87
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019D262886876E8C3C124373888472B07044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0BED
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: 81CsxWD73wewL/QBJ14twZixwllYxPfjNtDAgMIj1u0=)
2: lWJEJ38LG2xnxFB2fT73IqXyIEA.roa (hash: KHwos3EmOZKUtMcSQbvFbuttFTsD5TBtKXWrJtoYgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:86:87:6e:8c:3c:12:43:73:88:84:72:b0:70:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=4459051a5eec288ac3ceebb6f1e8b4df12945087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:f8:00:ed:51:56:52:e8:86:69:fd:32:f6:
23:a9:e2:db:f3:21:74:b9:f7:10:aa:79:83:70:c3:
55:90:5d:05:e7:81:13:c1:9a:3d:d3:50:ca:f4:f9:
2f:fe:b4:aa:5d:cc:11:c1:59:e6:45:57:27:33:41:
59:b1:37:2f:77:61:f4:fc:b0:8d:9b:3b:a0:7e:2f:
af:67:e6:8d:64:d7:df:4c:8d:01:e9:59:bb:00:3c:
fc:dd:33:a9:5d:79:8b:11:38:f6:69:7a:9f:26:28:
da:6c:6d:96:ad:e5:12:7c:18:6c:ef:07:f7:fe:11:
68:51:a7:1c:af:60:e1:6c:66:55:5c:aa:68:cb:04:
bb:4b:68:a7:0f:48:1f:29:2d:97:54:8d:bc:96:bd:
95:90:01:6f:eb:85:97:01:fa:33:02:de:ae:20:b6:
e6:99:24:50:d2:70:90:17:23:af:64:f8:d6:e2:f6:
35:84:83:1d:ee:45:3c:46:4a:36:cf:b8:46:ce:cb:
09:a3:0c:0c:92:2e:a2:35:48:9c:21:29:f1:db:75:
ba:27:e7:b7:90:c8:25:55:69:c4:29:6d:37:82:0d:
34:95:e6:e8:a9:b0:b7:96:67:47:84:f9:e4:d6:61:
1d:cb:2b:92:0b:c2:07:0c:b2:7b:09:da:dd:65:3b:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:05:1A:5E:EC:28:8A:C3:CE:EB:B6:F1:E8:B4:DF:12:94:50:87
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:bd:f7:01:70:19:18:65:1c:78:b8:f4:e6:2a:f7:2f:68:
64:ae:e0:9e:27:ce:63:88:a4:fd:ab:24:cb:31:c6:f9:ac:b9:
58:b0:22:b7:99:0c:f4:d4:a8:6b:75:77:22:96:b6:c5:c7:dd:
15:3b:8e:4e:c7:e4:56:82:ad:52:02:1f:35:d9:bf:67:db:c0:
f2:e9:25:a4:ab:69:e5:27:0a:a6:f1:b9:53:7d:70:fb:78:cf:
a3:84:3d:9c:b4:68:d3:59:bd:5c:af:90:d9:d3:ec:62:2b:d8:
5a:1d:4f:a1:65:c7:2d:3a:07:7b:13:72:e0:4f:c7:5b:1a:1f:
d3:ef:f1:a2:fe:57:81:2c:86:e7:ab:b6:b2:f3:a0:e2:37:eb:
9f:00:b3:d8:58:95:97:42:3e:56:c5:a2:10:16:b4:e4:09:ce:
ce:bb:5e:5c:01:36:c3:1e:51:4a:a8:fd:10:7c:02:f5:c4:24:
76:20:1c:bd:73:5d:f7:6c:48:eb:0a:98:67:b1:72:f1:c2:70:
d6:58:5a:d5:fd:a4:ba:f8:b0:a7:b4:8e:b9:31:d6:f8:2f:fe:
9d:54:58:b0:f4:f5:24:5f:53:6b:bb:bb:7f:50:ae:3f:d5:08:
31:99:a5:b3:dd:43:d9:9d:eb:cb:b9:29:c1:41:0e:68:64:4f:
cd:66:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:49 2026 by rpki-client