Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: OWTadws/3C7r12MgCqFiPwLMbZiZCGzEa7vWbc4+86U=
Subject key identifier: 4E:38:CA:2E:7F:47:5B:71:03:E4:57:91:11:4F:5A:A8:92:7F:4C:E0
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 01A0DB72738D0A2E7FAC8E3B57129A990797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 1A03
Signing time: Sat 26 Sep 2026 02:01:46 +0000
Manifest this update: Sat 26 Sep 2026 02:01:46 +0000
Manifest next update: Sun 27 Sep 2026 02:01:46 +0000
Files and hashes: 1: 84a_5dunO5tT13Gn8_j3cCElA5U.roa (hash: myvurQJ8o/9M7JEPK/Rdbm3h4MrG2xioG91InHNEhRU=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: fKyDrw/8od4l7yLKAR5M84Ndhk33SY9OsO9onVAMXAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:73:8d:0a:2e:7f:ac:8e:3b:57:12:9a:99:07:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Sep 26 02:01:46 2026 GMT
Not After : Sep 27 02:01:46 2026 GMT
Subject: CN=4e38ca2e7f475b7103e45791114f5aa8927f4ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:a9:a4:26:84:f2:94:8b:22:d8:4a:1b:42:
84:42:c6:39:02:83:20:8f:8d:87:ff:e0:1c:4c:22:
72:2f:51:de:4d:4c:ee:14:5b:74:3c:28:d3:2d:9c:
5a:7d:b0:eb:37:1e:37:38:51:91:81:9e:07:15:2a:
9e:d8:43:fd:f0:84:a6:99:32:70:7b:ab:f9:86:09:
08:4b:29:03:1f:0c:00:de:54:36:80:ac:48:d1:17:
ea:6a:41:e3:4f:68:17:e4:35:f8:f2:49:81:13:2f:
69:88:87:60:18:13:7d:fc:a1:5d:29:66:d4:71:44:
87:e1:5c:ec:67:0a:d9:5a:0d:76:e0:12:e8:d8:9a:
e8:bd:4b:e4:99:c6:ca:eb:b4:74:55:8e:d0:9a:56:
56:75:4c:a3:9f:f8:46:de:b0:ff:87:16:25:76:c1:
05:d0:37:ce:6f:c4:3e:93:57:6a:a5:d2:20:ce:1b:
d7:43:68:7f:19:e4:62:0a:22:d0:55:d2:9d:2d:2e:
28:f2:ff:32:39:6a:24:16:11:13:b4:ab:3f:1a:c0:
ab:f3:46:29:47:6e:ae:2f:97:cd:4a:57:73:2e:fd:
1e:3f:bb:0d:76:66:da:ab:bb:0e:0d:2e:36:05:1e:
79:df:4e:0b:f0:a3:4e:8a:c1:6d:5a:1e:69:33:3f:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:CA:2E:7F:47:5B:71:03:E4:57:91:11:4F:5A:A8:92:7F:4C:E0
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:35:e3:70:29:c5:66:5d:9a:76:37:3c:eb:4b:0a:d5:df:
f3:bd:b8:1a:bb:6b:8c:98:1e:7a:0f:0b:dc:48:50:10:29:28:
46:b5:0c:1d:19:78:c0:23:a4:52:93:81:c4:48:b3:8c:80:e7:
9f:c7:3a:be:e6:f4:1c:4f:08:22:7a:7d:50:f0:07:5b:e2:ac:
a2:80:1b:75:f8:f6:3d:83:db:d2:21:ab:b9:e0:6c:fb:82:ba:
ef:58:3a:12:19:90:42:bb:ff:3e:62:fb:5b:9e:de:bd:4a:07:
6f:05:bb:d1:3f:c0:9a:3e:ce:a9:05:d6:61:7f:51:7a:2f:0b:
76:af:1c:ad:a6:7c:86:54:fa:a1:82:47:9d:cd:82:57:7a:17:
17:30:35:5f:84:d4:24:2e:a6:fa:11:11:2d:a5:54:0e:ae:90:
0b:b9:98:62:b0:77:6c:d7:6e:74:30:e3:8c:1c:6c:51:67:0b:
81:5d:6e:1f:ed:99:3c:75:53:cd:2d:ff:0c:59:93:ae:30:59:
23:29:2c:c9:5f:6b:af:26:1c:6c:ee:c8:07:52:38:6e:a0:89:
cc:fb:0c:23:11:08:70:38:ee:e2:6a:bf:ef:a4:74:e3:e3:ae:
b6:32:08:16:cc:de:dc:48:1e:9b:ce:44:ce:b2:40:ee:c2:a7:
1d:14:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:02:12 2026 by rpki-client