Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: uB09jdB2+Vqy7DjlhII7xcnkKw8kbxZ/rJYOD39sG98=
Subject key identifier: 09:54:D7:ED:76:6D:BD:74:8B:C0:0B:00:97:75:8C:FE:01:EE:A5:C8
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 01A0F7FB5FD30FEC83AA449EC83FF86A9515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 1153
Signing time: Thu 01 Oct 2026 15:00:41 +0000
Manifest this update: Thu 01 Oct 2026 15:00:41 +0000
Manifest next update: Fri 02 Oct 2026 15:00:41 +0000
Files and hashes: 1: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: KJBWXwGDHTGeDreKmVINz8LoFKVMV/GYUZKBLnP12kU=)
2: XSVXot1mrN9KrobWqSb7ZJcFIHo.roa (hash: XG35l+m4PstJ+C55dywjRW/YEAH7VQspHcuyVm5s0zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fb:5f:d3:0f:ec:83:aa:44:9e:c8:3f:f8:6a:95:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Oct 1 15:00:41 2026 GMT
Not After : Oct 2 15:00:41 2026 GMT
Subject: CN=0954d7ed766dbd748bc00b0097758cfe01eea5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:44:1c:5c:18:08:35:f9:2a:e1:ae:7f:69:
69:11:86:36:74:05:1e:ce:7a:a8:36:44:d3:d4:d6:
dd:68:c0:61:4e:86:e6:92:de:04:46:bb:0a:76:0f:
ce:9e:60:c8:0e:00:bf:79:4b:e9:41:11:9d:fe:02:
42:5c:28:c8:48:a1:83:0d:5c:05:f4:59:3b:d8:09:
28:fc:1b:a0:7e:4e:30:d8:d2:d8:46:3e:15:32:c4:
c2:0d:26:55:cf:cc:0d:8a:39:72:9e:35:f6:c5:f6:
8e:2c:58:06:d3:d5:08:55:c8:5a:e8:c4:73:08:6a:
f2:87:cb:d1:99:5e:83:80:99:0e:0b:0c:02:2a:bd:
88:80:df:6c:6c:2d:2d:8b:34:1a:57:7c:7e:fa:9c:
c5:51:65:aa:3d:32:4b:f7:93:0b:78:a6:13:1e:32:
40:ea:0e:6a:72:d4:74:33:6c:e5:7b:7c:10:1d:16:
24:2b:78:64:d2:43:80:cc:91:0c:e8:9d:b1:cc:b7:
fe:6f:c0:50:b7:e7:76:3a:29:42:e1:48:59:04:05:
d7:cc:54:cf:b7:7e:ff:bf:fe:c7:f8:9a:15:ae:6b:
58:35:36:f2:91:06:07:78:cc:b3:d5:18:43:31:5d:
61:c8:a3:72:0c:d7:47:55:be:d9:27:9e:58:c5:ca:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:D7:ED:76:6D:BD:74:8B:C0:0B:00:97:75:8C:FE:01:EE:A5:C8
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:31:e2:b4:2a:5f:48:7f:48:f9:63:b6:86:9e:b1:93:e3:32:
31:36:9a:5b:be:1e:fa:8c:fc:e0:59:da:fe:68:70:8c:85:4c:
fd:56:13:c5:e5:f6:83:30:5b:82:2d:60:c4:88:60:36:59:8a:
4b:95:d1:25:df:db:32:21:5f:d9:91:23:0e:5c:d6:21:27:0a:
9f:2a:55:21:f3:9b:3d:69:84:9d:32:4a:cc:1a:40:7e:52:ba:
35:c0:d4:f2:04:94:66:c2:62:08:d7:2f:4d:c9:a3:af:84:8e:
33:3e:78:48:af:f1:47:61:f3:ad:16:d9:cb:73:91:7f:f5:97:
3d:4d:e5:c8:af:78:c1:3c:ee:70:a5:54:cb:7e:71:48:f0:f9:
14:8f:b4:37:88:24:d6:4e:4a:0f:50:33:cc:3c:58:1a:0d:8f:
5d:c0:49:8c:a6:7e:48:60:81:5f:f7:9d:5b:de:f2:4c:6f:68:
27:4b:67:cd:51:2a:97:da:87:a7:8a:97:a1:2e:8f:db:16:e3:
e4:80:41:73:cb:bb:7a:8f:e9:99:90:51:c3:e8:eb:25:ca:f3:
48:06:ed:40:94:da:c3:bc:a3:b6:b2:c8:c0:58:0c:17:cf:3a:
ed:18:99:09:df:52:27:1e:4e:1a:1b:77:be:bb:29:b8:32:b7:
09:5d:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:43:19 2026 by rpki-client