Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: e/YKiWEHn2PvGI2bOjD4C8KG2ugN0rU/u2ZIe0n0GQ0=
Subject key identifier: 5A:09:7C:3E:31:AA:99:32:0A:91:C7:A6:A9:8A:C7:DA:87:05:E3:31
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 01A0DFBCB64B1261CF0B937E6757FE18EB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 22:01:21 +0000
Manifest this update: Sat 26 Sep 2026 22:01:21 +0000
Manifest next update: Sun 27 Sep 2026 22:01:21 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: oFof3p01jVECg/vFsi1ohP5cuRO5FcLJGa8BEz+Zkjk=)
2: fnxekr8hjBPYztHEpriyNTg-w1c.roa (hash: Yw6ebR/XuI9yJ6QrRRVgWW8yPZGg+etxygR5z7m4D2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:b6:4b:12:61:cf:0b:93:7e:67:57:fe:18:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Sep 26 22:01:21 2026 GMT
Not After : Sep 27 22:01:21 2026 GMT
Subject: CN=5a097c3e31aa99320a91c7a6a98ac7da8705e331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:d3:f2:77:8d:53:9f:51:3e:de:56:cc:cd:
0a:a0:3a:7e:d2:ee:8d:2b:0d:3d:f3:1e:4c:aa:42:
56:1d:8e:e2:4d:f7:34:51:bc:e2:83:9e:8e:d9:b2:
82:19:d1:3b:11:5a:0c:6b:20:5c:19:06:09:70:a2:
4c:6b:b3:72:59:50:12:f9:13:76:99:64:77:90:9d:
d6:aa:77:53:6d:b6:0a:1f:94:c4:e7:c9:57:73:e7:
41:44:a1:9f:82:39:f4:d6:0a:8c:b8:54:81:9a:94:
5b:88:ee:1d:65:4c:c7:07:c5:eb:77:cb:80:70:c7:
84:04:16:a2:82:89:e9:72:b8:ee:df:9c:9a:de:af:
f5:08:01:aa:c0:e6:a4:e4:92:e8:d5:37:2c:8a:7b:
2d:04:4c:cb:94:16:8d:6b:39:5d:c1:c9:c0:dd:52:
36:f5:75:d7:e8:3d:4b:e1:94:c5:cd:56:8b:7b:25:
a4:bb:fc:b7:e8:52:c3:ea:14:6b:29:f0:89:f2:3a:
27:ab:03:dd:f7:41:f2:94:57:9c:e6:ad:31:17:35:
b8:c1:3d:a7:32:9d:50:46:e0:ac:bc:d9:1b:2d:2c:
90:b0:62:34:3c:67:b3:13:4a:5b:40:8e:09:fc:38:
97:e6:28:4b:34:1a:15:c8:04:47:49:d1:9c:d2:51:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:7C:3E:31:AA:99:32:0A:91:C7:A6:A9:8A:C7:DA:87:05:E3:31
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:27:f6:15:a4:62:ce:79:2c:c9:5e:5d:b8:c3:be:88:c2:
dc:84:db:78:ae:d6:ed:f3:4c:b9:b3:1b:87:8c:ee:c0:0e:33:
19:5c:82:ca:ff:63:d8:f9:02:e3:74:9a:38:b4:a1:6c:90:7f:
36:0c:a4:d6:de:38:ae:0e:77:98:4b:59:26:12:27:d8:f1:ff:
d3:1c:f1:3a:32:c3:41:03:c8:5c:c9:e2:19:ea:00:92:df:2a:
a2:30:0d:e2:41:29:10:33:e2:21:8f:17:4b:1a:a1:3a:71:2b:
ae:77:f5:a2:bb:90:53:a0:43:cf:a1:0d:e1:45:a3:b2:82:af:
1e:33:27:dc:75:f3:53:5b:f4:ff:17:60:ee:6b:b7:5e:47:77:
2d:35:bc:01:4b:73:d1:5b:a1:eb:12:20:25:73:aa:c0:e4:0d:
cb:24:5e:51:1c:c3:e7:a9:3f:0e:f1:00:50:82:e7:25:0a:13:
49:2b:28:0f:4a:f2:dc:0c:db:52:77:ed:59:05:ca:3a:6d:1d:
33:38:5f:b8:5c:73:cd:5e:da:89:0e:5c:09:70:b3:82:98:86:
16:18:5c:7b:ec:97:28:3e:1d:d3:ac:bb:b0:46:22:2a:02:48:
f9:36:70:58:49:d5:62:e3:d1:65:7b:be:3d:4b:99:b7:26:48:
8e:87:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:54 2026 by rpki-client