Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: J0X+DVLRWJyBhzr409P0hA6e5f0XqzJfCAmU+6dKlk8=
Subject key identifier: 08:87:AF:9B:2B:DA:9C:34:8D:2C:5F:EB:F2:89:52:16:CD:A7:EF:BC
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01A0D0EDAF7DCB161C2C558A63B19EBBA3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 01:00:32 +0000
Manifest this update: Thu 24 Sep 2026 01:00:32 +0000
Manifest next update: Fri 25 Sep 2026 01:00:32 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: YkVeNEZabzGfii4tWiXnPtz4XviRPiGIhBz2ZoP9QdM=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:af:7d:cb:16:1c:2c:55:8a:63:b1:9e:bb:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Sep 24 01:00:32 2026 GMT
Not After : Sep 25 01:00:32 2026 GMT
Subject: CN=0887af9b2bda9c348d2c5febf2895216cda7efbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:40:bf:2a:76:48:b0:a3:02:a3:ae:e3:bf:
ad:6b:1c:62:8f:db:b4:57:8e:7d:7d:f5:3a:c2:c4:
4a:ae:71:42:e3:68:fa:a7:d4:d6:b0:6f:10:5c:9f:
98:6a:12:d7:49:2c:09:34:f4:ef:6a:14:8c:4f:05:
29:8c:43:83:e6:9c:5f:7f:91:38:d8:7b:d5:3e:f5:
98:0b:f1:e8:bb:0a:fe:a2:db:81:e4:1a:41:8d:23:
2b:42:81:c3:a7:e4:d7:d5:13:d0:ba:2d:f8:fd:04:
2e:65:20:36:1f:fc:4f:eb:93:a2:f2:5e:e4:19:f8:
2d:26:25:89:1e:93:41:25:c7:49:9b:48:15:65:0a:
02:1c:ec:b3:b1:28:4b:e6:70:65:70:1b:6d:9f:4b:
c3:5d:2b:f6:78:75:f0:93:bb:ea:93:76:1a:8e:e3:
3b:27:19:1e:5b:c6:82:32:93:fd:42:58:5f:a2:73:
3b:fb:ef:ee:b1:da:7a:69:bb:02:92:b0:7f:b1:ca:
3b:1a:11:71:a7:d6:07:d4:83:32:11:3b:48:1f:96:
5f:09:6c:4f:9a:b1:b7:54:a6:53:23:ec:45:15:6d:
ee:34:5c:0c:9d:06:8b:00:40:1d:c0:8b:70:38:8c:
4c:6f:1b:8b:3e:56:83:45:02:fc:72:99:c3:3d:5b:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:AF:9B:2B:DA:9C:34:8D:2C:5F:EB:F2:89:52:16:CD:A7:EF:BC
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:44:9b:04:ee:dc:80:1d:71:ac:c1:68:d4:6a:db:3a:39:9d:
b1:16:3a:d7:20:95:59:dd:e1:ce:87:86:84:4c:69:43:5a:c2:
5d:73:5a:8c:aa:ee:f0:97:f8:03:da:2b:45:25:8e:40:85:c8:
cc:6f:80:43:04:cc:0b:38:c5:f7:a0:4d:ea:b5:45:f1:43:3d:
e6:9f:55:b1:de:6e:83:6c:65:e1:93:95:35:a0:15:d4:2c:d8:
6c:9e:f3:3a:c9:d1:ac:20:ba:f5:67:77:a3:b1:c5:b7:b3:7a:
bf:4a:d1:42:44:26:26:25:4d:e0:c6:ab:dd:ee:41:77:58:01:
5a:cb:b4:28:5e:84:d2:d4:cc:44:22:07:7d:49:e3:31:d1:3a:
26:c4:ff:bd:5a:c8:73:40:e9:0a:62:a7:91:ad:c2:9f:15:0a:
00:91:ba:82:11:01:0a:d4:97:38:d0:d2:9b:31:c6:28:51:e5:
d8:50:af:4d:d3:e3:66:2d:1d:90:04:bf:37:44:6c:5f:3d:66:
a3:09:9f:84:51:63:1a:03:35:0b:33:c5:02:4b:ee:e8:6a:a4:
c3:b5:7c:b4:92:a7:11:09:73:4f:c8:d3:e3:75:5b:54:a7:21:
af:a5:a2:1a:90:93:95:d2:9b:55:4d:fc:ba:24:f6:29:27:7d:
7d:23:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:39:45 2026 by rpki-client