Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: O67IwMMcTRTWh2DS32qUyyYNjhBJxNUAOREIzVvARoQ=
Subject key identifier: 0F:3E:12:D4:CE:62:E5:8E:90:2A:AC:58:79:5B:14:62:AE:F5:75:55
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 01A0DA965A3CA44FA1C708EB156AE6BDE7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 0696
Signing time: Fri 25 Sep 2026 22:01:21 +0000
Manifest this update: Fri 25 Sep 2026 22:01:21 +0000
Manifest next update: Sat 26 Sep 2026 22:01:21 +0000
Files and hashes: 1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
2: V_tPVXkmNH-9PJavVnocYPrTQTA.roa (hash: AGRfFdJJ1C/dURKRvBBJILwUMj7XLrg7AaRP8T3ZsSM=)
3: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: /ci9C5f1g6vIjt7r5Q+Ij7WfNZu+bo5hDuoD5crepJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:5a:3c:a4:4f:a1:c7:08:eb:15:6a:e6:bd:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Sep 25 22:01:21 2026 GMT
Not After : Sep 26 22:01:21 2026 GMT
Subject: CN=0f3e12d4ce62e58e902aac58795b1462aef57555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:18:e1:f2:75:43:8a:30:51:fe:e4:59:ec:
e5:50:99:d5:08:f1:4b:e1:3a:28:30:8f:d7:27:c8:
34:cb:84:c2:a1:68:e9:9d:f4:0e:ab:cf:25:4d:0c:
a9:eb:60:49:d1:3e:9b:89:30:99:89:80:2e:9a:2d:
29:d3:b4:8e:ed:4d:62:ed:e7:48:64:75:64:5e:3b:
c9:bd:a8:c8:5b:f2:96:9a:88:1f:dc:85:06:34:d0:
e7:0f:4a:04:3b:52:52:89:e4:e4:78:21:52:ff:15:
eb:99:70:a6:72:9f:09:94:f0:2c:f4:f4:8c:37:35:
19:6a:f0:a1:a0:83:3f:53:7a:26:7d:5a:7c:a7:86:
91:f4:9b:0e:03:51:2d:ee:5b:4b:1d:5d:ed:01:27:
09:f7:cc:07:7a:5a:e8:58:be:f9:d8:a1:a1:26:fd:
87:8c:58:2b:0c:b1:5c:33:a4:37:78:52:1c:9f:66:
ce:14:0d:77:6b:fe:a5:de:86:7a:94:d6:59:1b:b7:
4c:d2:48:eb:07:55:e2:7f:08:5f:a1:6b:69:43:2e:
37:50:9f:46:7e:0c:42:35:89:84:4a:d7:1b:54:a4:
d9:8d:b1:23:75:5b:b8:2f:ca:f0:db:59:64:fe:5b:
ac:bd:6a:1b:44:e3:69:bb:f1:37:8f:97:78:4f:7a:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:12:D4:CE:62:E5:8E:90:2A:AC:58:79:5B:14:62:AE:F5:75:55
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:98:c2:3a:d1:cd:7e:0c:77:af:ca:40:1a:01:08:9f:14:a9:
b5:ca:61:fe:12:df:80:74:92:68:e8:2d:29:4a:a3:d6:43:12:
aa:4b:14:55:2e:1e:35:9d:ed:13:6e:1f:35:e2:d5:d9:c0:6c:
52:54:5b:1a:e9:c8:e6:2f:17:94:66:3e:c1:16:85:47:95:59:
1c:de:e3:24:b5:f5:a7:e1:a2:ab:33:08:21:61:b9:a3:43:a9:
ed:7f:de:a8:b6:f4:7e:85:18:34:cc:b5:13:6c:d4:e4:ec:d9:
58:1f:b0:7f:6f:b3:bb:ee:7c:66:04:ab:9f:5d:ab:d1:72:e9:
d0:83:8c:7c:c5:d7:1d:08:13:04:81:c0:8c:46:21:9b:47:ef:
e6:8a:3c:92:a5:1b:20:13:e7:d0:0c:bc:ce:95:0c:9d:79:af:
38:e2:2a:f6:ac:5e:0e:2e:c8:7f:eb:03:b9:c0:32:70:82:12:
40:e0:f1:21:7f:31:07:38:21:9b:a1:92:33:5e:96:b0:e1:84:
48:b0:e1:3e:9f:7f:1a:d1:84:22:a7:52:e8:db:f6:cc:70:54:
29:4c:68:17:e2:17:c7:47:93:7b:9f:88:9e:0f:10:cc:cf:8a:
ad:ca:d6:75:b3:10:a9:f7:fc:2e:81:0a:4f:06:ec:ba:ee:f9:
17:0d:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:08:31 2026 by rpki-client