Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File: mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier: WOUa7Y27I5YCD9c/8eBDZs0BYqZBWqCCpYZW4F8YFco=
Subject key identifier: 2D:CF:CE:1D:36:E3:D1:37:99:A9:D8:03:26:FD:A5:C3:FB:08:8A:07
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 019D284E1A5B290CD6772B27B814A7781FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: 1-hSBct9w7V_v2aJj7OfoONMoQtc.roa (hash: 8Rt7WyNoryQAHJMpDa6SeX8TdTMr+iEX/3ANZvJf5vE=)
2: 5MZBnWU5gNxUVds2GS_ctx40VqM.roa (hash: QG6wEupT4WWEY6cienEgpE1K7AnWp3lnUif0PehHGFE=)
3: eCDlzK7WYx2wyI-MhH3sYue8XDg.roa (hash: 98RRinAUWzlpQnMjZqJmjkePB1/6O3taw25GtrD0NQY=)
4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: YNAaTSqevgs+qoVvDlKtVLVwFtVInpqpwIPz31ts3+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1a:5b:29:0c:d6:77:2b:27:b8:14:a7:78:1f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=2dcfce1d36e3d13799a9d80326fda5c3fb088a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:d5:c2:f8:83:6b:ec:86:af:ad:00:9c:0f:
65:89:f0:1b:61:25:70:a4:d6:0b:13:57:e6:9d:d1:
ec:eb:41:88:fd:a2:bb:c2:99:d1:07:12:ff:58:e8:
74:1b:c8:fe:b5:74:c8:11:d6:36:6b:aa:af:7f:2a:
b5:43:7b:0c:6f:9d:7b:64:f7:71:d1:41:ac:ab:21:
77:11:c5:5c:38:47:f9:bf:73:6e:ed:b2:e7:68:4b:
d0:ec:15:3f:41:cd:e5:1d:d6:68:9d:b0:69:2b:c1:
5d:20:68:f2:ec:44:03:ed:01:69:26:28:d8:cb:ab:
73:45:20:ea:f9:7e:52:05:34:e2:a5:0f:6e:e3:ff:
2f:9e:03:07:05:08:0d:b1:72:67:b6:cb:35:d9:cb:
3d:d6:d9:3d:bb:5f:0b:99:66:f8:46:4d:08:ab:47:
5c:97:2d:aa:85:e6:24:f5:f8:f5:d0:43:c2:23:17:
67:5f:4b:46:0e:32:bb:e7:2d:7e:61:dd:10:80:18:
28:05:a5:75:01:e7:47:75:df:c5:7f:33:03:fc:f7:
e2:a1:35:b5:91:a4:d7:d1:b8:73:5a:49:fa:42:e6:
76:1f:24:36:a2:f3:d9:35:f6:e2:6c:5d:d8:0f:69:
0b:3e:d1:75:df:47:59:60:c9:93:38:1d:c5:15:1b:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:CE:1D:36:E3:D1:37:99:A9:D8:03:26:FD:A5:C3:FB:08:8A:07
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2a:32:19:b5:ed:e0:aa:65:94:23:5c:77:78:da:60:f6:ed:
19:6f:26:2e:c7:e7:c8:43:07:dd:ff:38:ad:dc:c4:db:0b:81:
0b:83:58:e8:1f:47:37:c1:41:33:92:b5:ad:1d:00:13:cc:38:
05:9c:ba:0a:24:17:72:71:5e:2c:6f:b0:07:b4:7a:da:48:82:
bb:7e:e5:63:ee:3d:a4:2f:69:f1:ac:d7:fe:34:4d:63:8f:dc:
71:50:9c:5a:60:b2:7f:e4:70:5d:c2:72:89:22:44:18:ae:72:
df:9f:b3:49:4e:38:84:e5:96:9c:40:f4:77:8f:67:02:2a:d1:
d6:53:35:4c:2a:8b:06:ac:5c:ce:ee:e1:aa:be:c5:98:d6:63:
ce:1a:6f:ce:b5:5f:9f:4b:5a:60:90:b8:3a:3d:30:18:51:a1:
9b:6d:47:5f:25:fd:9e:c7:50:40:94:2a:37:72:f5:d4:1a:f0:
d8:bd:c8:82:4a:c9:2c:3c:5a:e9:7e:e9:cd:d7:31:83:e3:e0:
84:6d:c2:12:6a:af:bb:ae:b4:9d:e4:99:5d:88:6d:01:20:03:
b0:45:b7:b4:8c:15:01:b5:a6:d2:b1:2c:fb:b0:c3:3e:ef:5a:
50:b7:34:4b:db:07:e7:26:ac:38:3b:28:55:ba:ca:33:be:d9:
40:08:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:52 2026 by rpki-client