Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: ClYi4+hsf4IOwqV+wew6Ws/pWkmR/FTPKXv8jIbd1r0=
Subject key identifier: 3D:B9:25:4B:CF:FB:95:A7:B6:0E:5C:BA:11:10:38:C6:91:8A:79:5D
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019F92484C2CCE1BBB63EF906203EDE83B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:39 +0000
Manifest this update: Fri 24 Jul 2026 04:00:39 +0000
Manifest next update: Sat 25 Jul 2026 04:00:39 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: ouDgUVwwBFMLIfUAK+Z/FW+KjFpU6Ala2gEEeB+p/hM=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:4c:2c:ce:1b:bb:63:ef:90:62:03:ed:e8:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jul 24 04:00:39 2026 GMT
Not After : Jul 25 04:00:39 2026 GMT
Subject: CN=3db9254bcffb95a7b60e5cba111038c6918a795d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:c5:e4:80:70:c2:f8:10:02:6e:06:6e:b4:
23:bf:d0:60:ad:23:3f:5c:d2:17:8d:96:26:a8:29:
c3:6b:c2:fb:a8:66:d3:37:c3:19:88:c2:e7:ec:bd:
2c:a3:af:cc:e8:fb:0b:93:96:c3:c2:97:81:ed:b7:
74:65:03:83:d8:17:f5:4f:81:23:19:33:82:a4:f0:
81:79:d3:45:0a:8b:29:c0:a1:4e:61:ef:6a:f6:1f:
1f:25:c3:a1:5b:b9:14:ef:9d:94:8f:5f:85:10:f0:
be:21:57:70:83:5a:95:32:9c:69:7e:26:b6:98:a1:
dc:f7:2c:2f:86:48:1d:f5:e4:03:ae:98:f8:19:42:
1b:2c:88:89:c7:88:45:98:13:34:73:8f:68:ce:26:
5d:32:2e:ba:8d:83:72:94:f5:43:34:e3:57:de:24:
31:bc:82:8c:86:a4:c0:8f:b6:99:c8:5d:41:a7:0e:
65:1d:7c:a3:d7:c4:cf:2b:31:3b:ea:cf:7f:f6:8e:
1a:1f:c9:d7:ca:d7:14:a2:5a:fb:e1:8b:0f:d0:9d:
93:c2:cd:7f:3e:4e:b8:7e:15:3d:50:c8:07:59:99:
b9:30:c1:10:b5:14:71:d6:e8:8d:df:b7:d2:cb:68:
5c:5a:47:6a:fe:7f:81:d4:ad:04:6f:a4:d8:82:fe:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:25:4B:CF:FB:95:A7:B6:0E:5C:BA:11:10:38:C6:91:8A:79:5D
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:ae:7e:3a:1c:5f:50:18:18:ef:7a:5b:7e:80:1e:b0:38:1d:
3f:27:0c:19:48:35:df:76:9c:90:de:8c:be:75:24:18:68:99:
67:7c:43:00:9e:e9:62:d3:36:6d:27:94:63:24:60:43:4a:7d:
2c:50:71:f9:70:09:59:02:ae:34:9e:63:8b:0b:70:94:7c:ee:
58:d1:9f:0c:96:7a:7a:23:37:49:a3:6a:88:7e:ee:dc:e8:4d:
26:cd:84:e8:79:86:67:4c:ff:cc:23:8d:53:5b:67:4b:fa:1a:
c9:89:60:41:78:df:e6:b4:e0:28:12:9e:81:1e:81:c3:36:18:
ba:9e:5e:5a:00:6b:b7:a2:d8:73:73:bd:99:41:8d:83:39:5b:
67:13:4c:ba:79:15:8b:c7:c9:e8:45:57:a7:0a:25:4e:73:17:
17:8f:55:ae:fd:74:e7:c2:5a:77:88:a3:74:a6:b6:e9:d4:f9:
a9:d7:c4:ec:16:7e:6a:4b:5d:c7:74:c5:12:fe:99:6b:ca:b1:
e1:8a:6d:ae:8e:52:a8:2b:55:e1:b7:19:be:b9:36:45:96:1a:
dd:c0:4b:15:06:10:e4:22:55:79:21:53:b1:d3:2a:19:57:f5:
db:e9:1f:23:22:92:f2:90:3e:96:89:f5:5f:ec:72:64:a3:b2:
0d:ef:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:34:56 2026 by rpki-client