Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: siI4cLcfFRboPHwpDEid898fTfTan+zYr6Tk56q7PME=
Subject key identifier: E7:6B:8B:21:A3:DE:D1:40:97:73:67:0A:F9:C0:F7:60:06:F7:62:40
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019D2704BC5E0B4DC0DEE67D45FCD86E420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 04AA
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: f7rhZEdy66g4pmPR4QBnfWlx3+5Tt6gRUm3ebgk3xsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bc:5e:0b:4d:c0:de:e6:7d:45:fc:d8:6e:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=e76b8b21a3ded1409773670af9c0f76006f76240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:3e:12:40:ba:57:12:92:24:0a:4a:39:b6:
b7:48:2f:da:06:c3:f0:98:96:55:d2:10:70:c5:1b:
98:e3:63:89:d4:9d:67:13:15:81:ae:86:18:df:85:
9e:d2:f4:ec:56:dc:15:c8:62:ce:08:83:9a:5c:f4:
f5:17:a1:69:81:49:8d:09:84:ff:01:c9:5d:06:11:
68:c8:05:7c:19:45:8f:28:65:d8:ed:b1:cd:29:e3:
fc:b8:4b:de:51:5d:cd:0b:91:70:6a:21:0b:aa:07:
61:54:90:d0:f2:98:79:ad:19:1d:02:99:28:0e:18:
eb:59:4c:59:7b:67:b8:7b:18:7d:16:00:fc:82:28:
f2:ea:08:a7:92:2a:ae:74:cd:28:c0:18:22:21:0e:
d5:69:be:fb:d3:93:42:29:45:6d:d2:17:9d:d7:a3:
be:5f:61:9d:b2:de:7a:89:76:91:be:90:07:ec:12:
62:0a:88:c2:44:ce:0e:51:d3:2e:ca:19:eb:cd:1c:
95:fd:15:fb:e2:5c:a7:84:72:03:67:af:1f:49:29:
6d:ac:35:85:11:70:c2:35:69:51:86:dd:f8:74:73:
f5:aa:49:0a:6a:e5:d4:ef:8a:00:91:a7:ee:63:c0:
3f:2b:ab:98:52:d8:f9:e3:f5:52:25:5b:a1:1b:b1:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:8B:21:A3:DE:D1:40:97:73:67:0A:F9:C0:F7:60:06:F7:62:40
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ed:89:00:50:bb:7e:ed:95:a8:20:f1:a1:34:a5:ac:79:2f:
d0:7b:65:04:4d:0c:d1:1f:e5:39:a4:4a:15:f7:18:a5:e3:59:
d3:d0:11:aa:be:9c:2d:36:0d:b0:29:e3:d7:21:60:97:69:e0:
c7:20:84:41:88:a6:32:a3:09:fe:e7:e6:bd:d2:64:3f:29:34:
c7:55:33:9c:70:6f:4f:6f:f3:c9:d2:8d:e5:2c:c8:5b:f8:44:
4d:6f:e8:02:69:1f:bb:3b:80:9f:54:b3:56:ba:fe:55:a8:71:
f7:66:46:33:e5:c4:cf:57:95:84:c5:cc:c0:73:79:33:8f:21:
63:dc:79:58:c6:af:df:1b:e7:a3:dd:fa:70:e4:e0:4a:a6:12:
94:38:87:bd:4a:12:41:f0:6c:f5:1b:c4:ea:99:9c:73:c3:56:
5e:24:2c:03:b5:16:7a:f7:1f:d4:d7:c6:de:5c:74:3a:5e:68:
a4:73:a3:94:47:3f:e3:d6:4c:1b:0a:83:ef:5f:e1:b0:65:cd:
1e:18:58:4c:36:9f:b2:05:18:5e:15:6c:bd:aa:55:2c:36:3f:
50:7d:7e:9b:e6:8d:7e:39:eb:fc:99:19:16:ea:38:3e:a5:1e:
06:da:df:bf:c0:c3:4b:3f:38:3f:64:35:5e:55:aa:c4:2a:79:
de:9b:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:34 2026 by rpki-client