Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: G5aJ38zeiYWmLpGjHHSNplFyBXhy4RivWEVoQ81jMYk=
Subject key identifier: C4:E1:12:6F:66:B2:0B:00:58:83:AA:5A:A6:DB:85:5E:14:98:1E:76
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 019D26CD19E9BBCEB2BCED117FBA7F2BE247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0F58
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: fdZsF/4FQd2u377ceSdRcYp7bLcmS1ZbgKkmAdWpp3A=)
2: _0u7vnHZdg310nUrSqnTSu55Or4.roa (hash: xOaMS4kje5xsRAQ6hRbBK0m2M3+HpCRiKnXrVnEapA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:19:e9:bb:ce:b2:bc:ed:11:7f:ba:7f:2b:e2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=c4e1126f66b20b005883aa5aa6db855e14981e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:08:1a:53:8a:62:11:61:fc:a0:12:4d:ec:
66:28:b7:b0:54:75:52:64:69:86:0f:97:21:c5:57:
aa:b3:e4:f5:80:7d:f9:f0:7b:c8:7d:92:a0:71:e0:
87:05:2e:c8:ef:1e:29:05:a4:7f:ce:f3:6f:e6:0c:
6f:0f:e8:a3:58:aa:9a:86:e9:23:7a:02:fb:1b:c1:
53:11:ba:83:17:96:b2:78:75:07:6c:f9:27:5a:6f:
cf:47:fb:d9:60:74:1a:46:3f:9a:da:36:7b:91:d0:
f7:da:7b:13:60:58:7e:eb:26:b9:99:d8:f2:0f:9b:
2d:ff:3d:b8:db:8e:d7:23:11:3e:58:ab:99:16:b0:
66:10:67:a1:7e:2b:38:ed:2e:84:35:65:ec:2e:00:
48:c6:fc:94:7e:d9:dc:9c:24:5b:93:da:c4:22:ec:
0b:bb:88:ee:c2:8c:8c:f5:52:1f:1f:50:09:d9:46:
53:43:25:9b:d9:24:01:00:4a:61:23:a5:88:7b:33:
c8:81:e6:24:f7:3b:ca:1e:70:b5:35:e7:f9:38:1a:
a2:67:cf:e0:f5:19:d8:4a:58:fe:00:06:a0:1d:2b:
fd:f5:ee:aa:ef:17:45:08:38:41:6b:3f:18:b0:23:
93:67:bb:7f:6a:a9:65:f5:86:36:47:93:01:ba:fc:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:12:6F:66:B2:0B:00:58:83:AA:5A:A6:DB:85:5E:14:98:1E:76
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c7:c4:43:d8:dc:7a:40:af:f3:c6:32:8f:f7:be:8a:fb:21:
5a:d7:d5:2d:a5:c5:8c:6e:cc:55:32:ca:37:fe:61:ed:8c:8a:
f1:9e:15:34:5a:5c:30:41:aa:e5:80:b7:28:4c:f4:84:23:c2:
94:50:0f:be:77:32:ef:df:d6:a5:c2:95:a0:6f:c6:6f:7b:f1:
2d:17:06:00:2f:3f:d0:93:37:d1:8d:df:68:7a:d2:5e:55:dc:
f9:29:fb:3a:95:ed:3b:79:57:c2:3c:0e:f1:fd:a7:f9:13:c0:
fc:d0:53:4f:d7:06:f7:27:91:5f:e4:5a:0d:9c:3f:81:fc:14:
86:26:11:51:85:11:29:db:20:dd:18:1e:bf:3c:f4:69:4e:88:
20:82:5c:30:df:c1:73:14:c4:77:64:1b:09:35:cf:58:d4:d3:
e6:9a:7d:c7:fb:ab:a2:f9:cf:a4:ac:52:7a:92:d8:2f:90:8f:
66:96:1c:0f:b2:a2:9f:ab:d6:83:16:c2:97:6a:10:3a:f3:30:
d1:49:27:96:6b:0c:07:17:19:ab:b9:79:f8:3a:c7:ea:c3:3c:
ad:5f:53:85:30:f7:f9:7b:88:5a:d6:fb:ef:60:92:a0:03:ea:
48:22:bb:44:a5:9b:80:98:d2:36:f6:c6:d8:0b:77:99:a5:7f:
6a:d2:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:35 2026 by rpki-client