Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: L+kjAJXucxGSRUySJWNjSmhw5ZbnokCpLOmk+qRCS1A=
Subject key identifier: 03:02:4B:39:D1:C6:40:8F:F0:0F:68:44:CB:34:9F:D4:2A:D7:B0:A2
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 019F94A45C691DEC352A46759B2FE48DD39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0E12
Signing time: Fri 24 Jul 2026 15:00:27 +0000
Manifest this update: Fri 24 Jul 2026 15:00:27 +0000
Manifest next update: Sat 25 Jul 2026 15:00:27 +0000
Files and hashes: 1: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: mEePFOPUhuzo8tKuQb38TZM9WIFklupbhHYAuTsUkFA=)
2: _buqN6yYSytWYhTqNPA1kKSIBNk.roa (hash: c6bP7C3wNXIAyK047P+noenWK/m8RQLknUBgsv8PDgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:5c:69:1d:ec:35:2a:46:75:9b:2f:e4:8d:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Jul 24 15:00:27 2026 GMT
Not After : Jul 25 15:00:27 2026 GMT
Subject: CN=03024b39d1c6408ff00f6844cb349fd42ad7b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:f3:07:be:80:76:82:dd:30:68:e7:1f:e0:
2e:af:9a:d5:a0:3a:73:3e:c4:76:e7:db:30:5f:c7:
2b:d9:46:27:3f:69:bc:3b:cc:32:62:9f:25:67:0f:
fa:02:8a:a1:07:3f:15:11:5b:6c:aa:3f:c1:b4:44:
33:57:ff:a3:fc:f7:0c:5e:bf:67:88:73:0d:14:c9:
1f:32:79:18:7a:2c:89:0b:0b:22:2e:d3:e6:63:06:
20:33:c4:60:20:35:98:1c:8c:08:69:61:4c:35:3a:
72:53:30:3f:d4:2e:ed:35:19:88:4e:4f:18:94:79:
73:dc:05:38:57:38:85:d2:4a:1c:f9:8c:1d:20:d1:
32:9d:b4:79:fd:e9:24:e8:23:fd:c4:b3:73:48:22:
79:fa:07:05:0f:70:06:f5:ba:5c:1a:00:3c:fe:62:
3d:62:26:e1:21:7e:2b:52:c5:39:38:fe:0d:a6:2b:
cd:dc:34:48:4d:42:c1:86:cf:fa:f7:90:f8:c1:3c:
17:1b:e7:b9:46:f9:89:57:de:45:b9:4b:c6:61:35:
aa:81:b5:b8:ab:43:db:7c:84:39:38:f8:14:16:49:
fb:15:51:0b:28:82:e5:1b:41:9f:37:bf:40:b6:5f:
38:eb:cf:f1:4d:e8:91:7d:50:ee:41:28:86:f3:66:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:4B:39:D1:C6:40:8F:F0:0F:68:44:CB:34:9F:D4:2A:D7:B0:A2
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e7:bf:12:3b:83:c4:49:3e:85:2a:4b:df:a0:bc:99:bf:71:
b5:46:8b:14:35:23:4f:26:fc:77:7b:cf:32:13:5b:9a:6d:56:
99:8b:1a:7f:52:46:87:5f:4d:03:d0:e8:a4:c3:12:a9:68:44:
94:f1:3f:b3:62:00:f7:45:3f:06:19:4b:1c:ed:a1:68:19:3e:
ca:5d:4b:f9:76:c5:af:2c:17:0f:5b:c4:56:f0:13:b1:8c:a5:
cb:a0:72:44:4f:cd:ea:f2:bf:61:af:6f:29:a4:9f:03:d7:06:
e3:a4:32:14:18:63:f9:9a:92:07:1b:9d:64:9e:c0:04:b6:1c:
f8:ed:0a:b8:d7:cf:26:be:f4:64:cd:ea:8b:79:26:0e:0f:1b:
0f:48:ff:9f:02:03:02:b1:f4:d9:83:3f:51:c3:ac:c4:3d:ca:
55:3d:e7:4f:0f:55:6f:52:8f:15:b2:33:f3:f7:b8:92:d7:36:
9f:6f:61:4c:d3:f5:22:01:0c:be:fe:86:ea:b5:50:0a:fd:8f:
cc:ea:ba:67:1d:0a:10:fe:2e:cd:1b:a6:0f:e0:8b:53:79:32:
e3:63:87:42:f3:f1:83:4d:0d:c8:7e:a3:c2:34:39:1b:47:9c:
ab:9c:29:08:24:0a:4d:48:cd:c1:ea:d9:eb:b7:5d:0e:46:92:
44:4f:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:53 2026 by rpki-client