Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: zEjWE+GlXcDqRohCiiw8YbCY6Y7PWRQP0mOQPUGZjrA=
Subject key identifier: 1A:FF:79:66:CF:93:14:0B:29:FE:54:F3:90:7F:C0:AB:ED:22:3C:63
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 01A1472973D0611B573A8E2693A7726004DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0EF3
Signing time: Sat 17 Oct 2026 00:01:01 +0000
Manifest this update: Sat 17 Oct 2026 00:01:01 +0000
Manifest next update: Sun 18 Oct 2026 00:01:01 +0000
Files and hashes: 1: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: wthZIuWfPJifZURPbu7hzZiX0Lsp1qvJVfILjT6LOj4=)
2: _buqN6yYSytWYhTqNPA1kKSIBNk.roa (hash: c6bP7C3wNXIAyK047P+noenWK/m8RQLknUBgsv8PDgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:73:d0:61:1b:57:3a:8e:26:93:a7:72:60:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Oct 17 00:01:01 2026 GMT
Not After : Oct 18 00:01:01 2026 GMT
Subject: CN=1aff7966cf93140b29fe54f3907fc0abed223c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:59:f3:5c:5f:44:6a:42:82:05:99:de:0e:
7b:5e:3b:bd:22:64:00:27:0d:a8:2b:dc:f5:f8:87:
08:82:50:27:6d:33:a5:6a:b6:40:59:7d:4c:33:1f:
b3:97:cb:4b:d2:9b:d7:72:ff:01:ca:a4:05:b0:3c:
48:4c:22:fd:ae:91:18:9c:df:0f:c2:c9:f4:9a:f7:
a4:04:31:37:cd:6e:86:44:ce:92:41:cc:d3:35:96:
e1:38:5b:6e:ed:44:82:d7:42:c7:00:1a:be:c7:a0:
77:73:4e:73:ee:00:8d:cb:b6:8a:9f:4f:a7:a2:67:
8d:f1:7a:ea:bb:7f:4b:ad:6c:1b:29:cb:6f:91:96:
58:9e:e2:d1:5f:08:16:da:ef:23:3a:b0:23:de:d1:
ef:ba:04:bd:ea:71:06:7e:89:fc:89:0c:88:1a:b6:
55:fb:9b:8f:c2:1d:39:12:b3:7c:e5:99:cc:ba:8d:
32:df:15:31:55:fe:f7:82:67:a4:75:38:b6:af:ab:
b7:80:b6:6f:61:cb:00:45:4f:6b:4b:89:66:4c:92:
04:40:8b:02:f8:d1:7c:dc:80:4b:56:74:e3:1c:71:
09:54:fe:6f:20:a1:01:39:74:9c:7f:7a:3b:0f:4e:
f1:54:d4:3a:e2:3a:5f:3b:7d:5f:6e:a7:b6:ab:64:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:79:66:CF:93:14:0B:29:FE:54:F3:90:7F:C0:AB:ED:22:3C:63
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:39:b8:d6:70:3e:e9:37:a7:69:70:31:ad:f4:52:a7:f9:
dc:f8:6a:b1:f6:19:19:44:ff:b4:8c:19:ae:1c:98:3c:e2:a5:
46:96:e2:a5:7b:4c:3f:6a:2c:9d:c5:0e:c5:73:47:b8:65:ba:
a4:f8:50:56:42:d5:26:8d:81:44:93:bc:29:f6:52:22:8a:88:
d1:97:7e:4e:d5:2f:73:82:06:c9:1a:09:19:b7:bd:d2:01:73:
5b:10:c3:1f:99:f6:91:0b:b5:d5:2a:61:6d:45:91:56:05:b0:
38:58:44:18:5b:c9:eb:81:ef:d0:bc:11:e0:b5:3e:e9:2d:e4:
79:d1:aa:1e:90:ca:29:87:64:e3:98:31:71:82:50:4a:74:0d:
17:d7:fd:92:f6:91:0f:0d:bb:0d:93:f8:d7:13:cc:91:48:46:
12:32:5d:ad:04:32:6f:69:45:ef:26:51:29:a0:a4:bb:99:73:
ae:ea:85:73:0e:ca:16:d7:e2:0b:4f:13:04:55:1e:57:ae:12:
c2:77:53:8b:87:b3:2b:49:e0:3b:95:f2:12:89:b8:ab:2a:5b:
4c:9e:fa:f3:4c:d4:2e:7e:58:b2:0b:ea:ad:13:53:12:cb:06:
e0:b6:52:e8:a1:46:21:f7:5b:e1:8b:0e:1b:12:91:c6:d6:e1:
4b:fb:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:39:34 2026 by rpki-client