Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: CSS04apcvHvBESmc/E9TTh6xa/5Db9Ho4/Oae73OLWk=
Subject key identifier: 11:4F:CE:E2:B2:CC:94:20:57:E7:B5:FF:C8:5B:85:AF:92:87:A9:41
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 019F92B5FD1D4B0C52B94FA50FD9F23E6306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 109A
Signing time: Fri 24 Jul 2026 06:00:28 +0000
Manifest this update: Fri 24 Jul 2026 06:00:28 +0000
Manifest next update: Sat 25 Jul 2026 06:00:28 +0000
Files and hashes: 1: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: lY/tzfD9GHFccbxoTe4bBGLKTqXb+meUv1D8kppVqvo=)
2: XSVXot1mrN9KrobWqSb7ZJcFIHo.roa (hash: XG35l+m4PstJ+C55dywjRW/YEAH7VQspHcuyVm5s0zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:fd:1d:4b:0c:52:b9:4f:a5:0f:d9:f2:3e:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jul 24 06:00:28 2026 GMT
Not After : Jul 25 06:00:28 2026 GMT
Subject: CN=114fcee2b2cc942057e7b5ffc85b85af9287a941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:4b:96:07:6c:1b:75:12:4d:e3:d5:64:6c:
58:03:0b:4d:2d:ba:58:87:a8:ac:40:04:05:40:c0:
13:3d:3b:7c:45:f6:1c:f7:81:aa:5b:f8:26:c1:f1:
9d:47:99:0b:c3:75:f9:b7:bb:6c:46:da:27:2f:4b:
d3:0e:4f:9a:55:a5:0f:07:6c:fd:fd:1e:69:f5:76:
cd:62:ce:e5:59:77:52:cc:e7:73:87:4a:a6:19:53:
a6:3d:ee:21:ba:bd:a8:fa:07:0e:33:35:0d:b8:ec:
ff:99:be:9f:6d:84:f0:c6:a9:85:f8:d1:02:00:50:
4c:dc:d5:c7:74:f5:22:b7:1c:ee:d3:96:98:94:b0:
ce:f2:3c:dc:b1:42:a6:ba:eb:4d:28:4e:6c:95:e8:
80:7e:06:d0:b5:f2:73:b0:33:2b:f3:24:18:9f:5d:
8e:aa:13:50:f8:35:91:3c:7e:7e:77:de:36:ab:53:
16:65:0b:d4:ad:c7:82:16:50:11:ea:b8:71:95:f6:
00:b1:c6:14:73:27:d1:13:97:8d:00:c0:34:80:31:
6a:17:b8:49:d0:aa:8e:6e:7f:65:b7:95:04:69:76:
ff:c3:dc:43:b7:da:92:7c:69:54:c1:b9:3b:ca:a7:
3e:c2:82:e6:b9:75:f2:f3:dd:a3:9f:73:88:b6:4d:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:CE:E2:B2:CC:94:20:57:E7:B5:FF:C8:5B:85:AF:92:87:A9:41
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:85:22:64:bd:c8:25:ad:dc:b9:6c:81:c2:95:d9:24:ee:
53:0c:ce:bc:e1:da:ce:94:22:1e:51:7d:d4:8a:cc:f0:f3:70:
ac:20:3c:ea:b5:21:e8:8e:db:df:4b:f8:58:7c:59:6b:d6:7a:
9d:b0:98:bf:8f:ff:49:d2:ab:71:ea:6d:4a:67:8f:e6:9b:88:
58:83:e6:bf:21:5a:84:de:be:ff:0c:13:31:e9:50:15:bf:4f:
7a:cb:03:fa:fd:19:79:bc:a6:e8:9e:cb:20:44:f9:e5:f8:8f:
d4:94:25:8f:28:99:09:64:30:53:2c:a8:0e:ca:fc:d7:77:48:
00:c1:f6:ee:ce:f3:88:1c:d3:73:73:8a:e1:ed:4c:d9:91:a0:
29:4b:95:eb:16:1d:34:bd:2b:06:d1:71:ed:f1:cd:68:c8:64:
1a:b4:f0:3a:f2:87:57:1b:bc:b1:c5:b8:0c:b9:0d:2e:38:08:
e0:d7:6f:2a:89:a0:5e:1b:12:f2:4e:85:a5:59:ef:8d:0d:f7:
5a:fe:00:0a:7e:f8:78:85:a1:7d:1c:01:ed:00:a6:f8:e4:19:
12:35:44:c0:18:d3:89:c6:0f:0d:b5:34:67:4f:9f:73:b3:9f:
80:04:a6:1a:5f:b9:71:f6:31:e6:e8:c4:64:5b:1e:1d:d7:6b:
b0:ca:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:20 2026 by rpki-client