Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: Ed6HZ9ltfCrLnlSPtD11zEwrsDeqru5p9mgQ7TcVmLg=
Subject key identifier: CA:F5:16:9A:7C:D0:B1:8D:A3:48:96:CA:22:48:3A:F8:71:4F:74:04
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019E1D9118443AD00459E3D625C775CF5B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:48 +0000
Manifest this update: Tue 12 May 2026 19:01:48 +0000
Manifest next update: Wed 13 May 2026 19:01:48 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: 1clmfqX2Ldf13DOvebxtQCSaOLs/tSXUa4E3NBTMhWE=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:18:44:3a:d0:04:59:e3:d6:25:c7:75:cf:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: May 12 19:01:48 2026 GMT
Not After : May 13 19:01:48 2026 GMT
Subject: CN=caf5169a7cd0b18da34896ca22483af8714f7404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:ea:5f:24:82:c8:0f:46:c9:d2:5e:d8:b3:
1d:49:a3:61:78:63:6f:b6:59:ed:00:d7:cf:59:99:
d6:d9:7c:68:96:4a:80:43:c4:5e:dc:c6:c7:c6:ac:
f9:a6:74:33:a5:3c:13:4f:03:62:9c:82:ef:5b:2f:
70:40:3b:6a:a4:a0:b3:9f:97:04:fa:95:3b:e5:7b:
53:f9:43:87:48:5a:13:22:dc:d7:15:6f:8b:d6:0d:
51:db:e2:a5:a2:0e:1d:9e:8e:38:9c:93:56:94:d2:
88:05:d3:83:2b:b0:8f:42:84:b3:89:f6:05:57:2d:
38:df:cf:e5:32:12:6f:31:0b:02:eb:df:c2:93:84:
61:f5:42:69:27:a1:e8:79:88:1f:41:5d:00:e1:b0:
fa:97:71:dd:bb:be:92:91:f5:e9:57:1a:d3:83:78:
0f:55:9a:80:07:cf:1f:d9:ad:74:3c:7e:e0:0f:1a:
86:ff:ae:c8:ab:2f:5a:bf:60:d6:a1:ce:4e:29:f6:
2a:59:8a:f5:4f:b1:72:c5:67:9b:91:d4:87:14:61:
27:91:11:ad:68:1f:b6:f4:db:ee:33:a6:1e:0c:a4:
60:bf:96:d4:18:be:6b:18:e9:1f:b3:4e:77:58:15:
d3:84:0e:19:c0:4d:f2:5e:21:87:13:aa:27:7d:bf:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:16:9A:7C:D0:B1:8D:A3:48:96:CA:22:48:3A:F8:71:4F:74:04
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a2:f6:ab:ae:ac:34:d5:82:7a:56:5e:e0:38:f6:24:dc:b7:
30:d6:25:de:7e:ec:90:47:e0:ac:d3:ad:a9:2e:fa:0a:41:a3:
6b:a7:6f:c0:5d:46:e0:0b:a5:f9:07:21:43:f9:df:ef:fc:0a:
0e:66:4b:a1:41:84:e2:e7:bd:73:04:f8:60:0e:c3:7a:af:70:
3a:d7:a0:d7:5e:ce:d6:0c:db:f2:d4:c4:cc:75:2b:e9:ff:05:
27:d5:11:09:a9:95:7d:d7:06:28:b4:35:1f:ef:7b:48:e8:ac:
ff:4c:0d:c8:42:4f:01:54:7e:72:a0:c4:64:90:8f:52:21:d1:
54:6f:24:63:84:6f:13:51:a1:bb:7b:56:9f:3b:8c:3f:9a:9c:
84:41:34:6a:d4:2a:bb:a0:83:50:25:4e:7b:4a:59:4b:5e:11:
77:61:09:3b:42:20:55:50:05:07:13:84:60:e5:6c:12:f6:82:
df:5e:07:f6:ac:7f:4f:24:b1:f8:82:42:36:e3:79:d6:97:36:
a2:49:ab:3f:d0:10:c6:2e:10:32:de:14:9b:61:c5:06:b5:50:
af:db:1d:17:20:e4:05:c7:98:e5:3a:96:32:0d:d9:83:79:d1:
e8:71:0e:45:7b:f1:df:21:c4:91:c8:29:de:ae:69:67:08:e7:
25:d5:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:17 2026 by rpki-client