Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: EXGvXbyiXdrS2seMXM+AthOPPIOKLqQ2ZN9mMJZYj1o=
Subject key identifier: A3:BA:8F:94:4B:D1:8B:73:80:86:75:56:20:3A:41:E2:27:FE:FC:16
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 019D333F21311831C91A8E699ACF74D519EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 07:01:08 +0000
Manifest this update: Sat 28 Mar 2026 07:01:08 +0000
Manifest next update: Sun 29 Mar 2026 07:01:08 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: jGIItrA5DCDDAIyNG61VPVdl7nAoDo6vKgwswGmEmOo=)
2: fnxekr8hjBPYztHEpriyNTg-w1c.roa (hash: Yw6ebR/XuI9yJ6QrRRVgWW8yPZGg+etxygR5z7m4D2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:21:31:18:31:c9:1a:8e:69:9a:cf:74:d5:19:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Mar 28 07:01:08 2026 GMT
Not After : Mar 29 07:01:08 2026 GMT
Subject: CN=a3ba8f944bd18b7380867556203a41e227fefc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:54:69:77:f5:44:69:fc:5c:5b:46:e3:e5:
ec:c9:19:64:75:20:9c:8c:9d:3e:b8:37:07:e4:58:
cc:96:71:07:da:a5:a6:4d:d3:ed:32:c9:e9:50:1d:
b5:25:3d:50:e9:06:07:c1:7b:e1:8a:21:70:49:53:
d6:e7:7d:e8:06:74:c3:c9:75:45:52:15:87:9f:79:
af:d2:59:4c:e0:d9:d4:ec:f1:5d:5c:22:61:53:14:
0c:9a:85:90:4e:3a:36:a2:2e:c0:1f:ff:ab:0d:e6:
94:0e:cd:b2:09:c8:db:7f:65:80:d7:6e:a9:a0:1c:
f6:ad:14:46:d6:95:09:9e:39:e7:71:66:36:c0:e5:
03:29:73:2b:ba:9e:52:87:fd:a9:70:f4:ce:69:33:
3c:ca:2b:51:b0:54:8e:f2:bc:d5:24:90:07:93:7c:
5c:8d:be:dc:93:b5:c9:5f:bc:96:f7:a9:12:e1:c3:
4c:bb:12:38:21:54:83:28:ee:79:74:01:0c:57:64:
2a:47:90:41:29:c6:ab:6c:ff:37:17:b2:4e:b6:c4:
4f:73:0a:f6:a9:f2:f3:93:e6:d4:45:46:2e:e3:35:
e2:54:ff:ca:a4:31:f4:03:c8:8a:bc:f5:3e:e1:1a:
cd:fc:21:aa:49:37:a9:54:31:c7:50:70:cd:46:85:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:8F:94:4B:D1:8B:73:80:86:75:56:20:3A:41:E2:27:FE:FC:16
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1e:34:88:49:a1:48:e6:d9:c1:f5:cd:5e:6e:4b:39:06:6d:
49:74:32:fe:de:04:80:d9:db:b2:c5:6f:b7:bc:b8:5f:aa:b5:
98:bd:c0:ee:1a:a4:e1:0a:11:be:ee:42:75:16:ea:23:cd:46:
78:2c:65:4f:ae:91:95:fd:bd:16:60:94:f6:17:44:01:9a:63:
d1:d2:85:18:21:b5:a4:e0:71:55:5d:d0:68:11:32:7b:b3:f1:
0f:38:f3:bf:38:74:31:45:6a:75:43:73:8d:52:7e:20:fe:c4:
38:82:f4:8a:c8:50:29:a8:1d:13:d0:57:e8:cc:b7:4b:32:d9:
e4:07:c4:06:6f:37:96:81:9c:fd:18:32:e2:85:23:f1:4e:d4:
f0:2d:ef:da:0c:87:83:55:0d:47:be:81:51:f8:97:a4:da:d4:
9a:c1:0f:de:05:a2:ac:d1:09:98:2f:7c:8e:4e:6c:9b:38:a5:
b7:81:49:77:76:54:ed:10:9e:a1:8c:f0:ec:60:99:09:28:99:
24:4d:fe:50:39:19:26:46:e9:fc:b3:ab:64:27:e3:92:c0:30:
18:95:94:fe:c2:b2:de:a7:75:03:49:7e:b1:41:2b:2a:e2:b5:
dd:03:b1:ac:1b:0b:2e:11:bd:9f:a3:78:bc:85:e1:f1:54:76:
c5:54:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:22 2026 by rpki-client