Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: VgEKhLSiKFyftqEvW3rrcwQiVfQxKXRTPcKjOuuNwEY=
Subject key identifier: 78:68:22:3E:5A:05:D7:C8:8C:C0:17:24:48:7A:8D:89:04:A0:ED:7B
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 019F8FB583610F4AF6D52D8F4FD3A39FEA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 16:01:05 +0000
Manifest this update: Thu 23 Jul 2026 16:01:05 +0000
Manifest next update: Fri 24 Jul 2026 16:01:05 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: BfKTsQnDCjegv9TVVF1FPRMVCk6MBXKs+awsuZDox0U=)
2: fnxekr8hjBPYztHEpriyNTg-w1c.roa (hash: Yw6ebR/XuI9yJ6QrRRVgWW8yPZGg+etxygR5z7m4D2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:83:61:0f:4a:f6:d5:2d:8f:4f:d3:a3:9f:ea:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Jul 23 16:01:05 2026 GMT
Not After : Jul 24 16:01:05 2026 GMT
Subject: CN=7868223e5a05d7c88cc01724487a8d8904a0ed7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:4f:46:f3:f0:bd:51:5b:06:d3:81:b2:f1:
c7:b1:a0:56:7d:db:57:5c:55:da:63:d9:eb:cd:0c:
bb:a1:59:a4:5a:e5:56:a4:11:5a:2f:01:82:58:f9:
10:da:fa:c5:88:bf:fc:54:6b:c4:5a:6d:d2:3c:ff:
fe:ac:3e:a6:93:f3:ca:f2:c6:c8:e8:4c:be:fb:42:
b1:6f:c7:ee:85:e8:15:8a:c2:6b:ac:a2:bd:94:42:
cd:6a:1e:32:ba:81:4c:be:83:e6:d4:2a:4b:3d:a1:
87:6b:3e:be:b7:d3:92:79:fc:c2:cc:a7:46:7e:c7:
80:8c:c3:a0:f5:f2:58:fa:d9:9e:b0:a2:d1:1e:b4:
a1:5e:e2:f3:25:84:fb:28:3b:6e:09:94:fd:09:8b:
6e:06:ab:87:04:32:d3:1d:18:dd:2f:28:c3:9a:40:
84:eb:42:c2:b0:20:49:11:a6:a4:16:5a:24:7f:2a:
b2:45:02:9b:e2:5d:2a:cb:9a:41:2c:e3:41:57:56:
3d:cf:c8:63:e9:35:10:a5:fc:15:83:ca:2a:d8:7c:
f6:5d:87:b8:f8:fe:52:a0:89:a8:5d:cd:de:d0:0d:
be:98:0d:61:a3:09:8b:26:1f:93:72:ec:5c:99:6d:
d3:d7:77:32:03:4b:c3:52:c5:ef:42:fc:2c:40:ac:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:22:3E:5A:05:D7:C8:8C:C0:17:24:48:7A:8D:89:04:A0:ED:7B
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:28:5a:81:19:be:7e:b4:50:ee:84:c6:bc:1e:09:ac:e2:56:
be:4f:b0:c8:3f:11:09:a6:5c:8b:2e:ef:ab:8b:f1:10:ef:bd:
f9:7f:d2:94:a5:59:a2:e8:98:bd:f0:e9:d4:a1:1b:fd:d7:e6:
20:fc:a2:d4:46:d0:2a:f2:82:c4:47:83:73:92:41:89:81:54:
55:b1:c0:de:77:86:39:69:eb:6f:59:16:31:19:cf:5b:ac:6f:
23:9f:b9:bf:f8:4a:d1:78:c7:f0:ea:19:e8:72:d8:e7:60:19:
ec:83:cb:67:b9:cd:e8:42:df:04:2a:8e:71:e5:a7:bd:2b:62:
1e:00:4d:36:22:0a:fe:d7:50:d9:68:c6:ef:b4:6f:ed:3e:a4:
61:ae:f8:aa:a4:b2:a9:e0:d6:45:0b:bd:85:32:73:11:58:08:
7e:8d:b0:6a:b2:f0:29:d7:ac:be:5d:88:9f:09:7a:8a:48:b7:
39:49:66:15:b7:d5:42:ee:ea:27:8c:04:f0:4a:53:49:fd:80:
6b:ee:30:42:48:41:4d:dd:b3:62:47:d8:1e:d8:19:38:30:52:
d2:0c:ab:ca:8e:0e:1b:d5:18:1a:36:51:1f:1e:6d:79:57:a7:
04:c2:03:8d:49:6d:97:61:93:02:6b:ab:dc:04:79:96:38:3c:
0a:e8:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:09 2026 by rpki-client