Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: B8Q1SoSfFjHRCidjhhrnldA8Nfbfc1eQ6FtylJH6aeQ=
Subject key identifier: BB:EE:10:79:AD:64:19:E9:DC:8C:CB:C6:5C:CC:40:42:9A:FE:B4:F7
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 019D28BB563E14D7C61AD85E21E3BB59477C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:00:59 +0000
Manifest this update: Thu 26 Mar 2026 06:00:59 +0000
Manifest next update: Fri 27 Mar 2026 06:00:59 +0000
Files and hashes: 1: 8HOqsxKCS56C5l2TYH5vJenn9Uc.roa (hash: r5GuTgTO8u43SvuFo8e3I9Qx7FDg9zvojI1lw4JUs+Y=)
2: EuTvpzj_rBg4p9cpcF0sTGEJSQg.roa (hash: 2ycyJUxPv2cATlhlJrwI3vU1U2HjLZsDnb7MjY9bKXM=)
3: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: G4Xx3O3D6DgW/qPXCdzg916GV0kEqkSLNLpahEEqj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:56:3e:14:d7:c6:1a:d8:5e:21:e3:bb:59:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Mar 26 06:00:59 2026 GMT
Not After : Mar 27 06:00:59 2026 GMT
Subject: CN=bbee1079ad6419e9dc8ccbc65ccc40429afeb4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:38:ab:42:b1:5c:0a:40:aa:6c:5b:76:19:
f6:6c:b0:5b:80:4b:ab:78:38:de:d7:cd:8a:c2:29:
da:a8:df:51:d3:23:64:74:28:e6:42:8b:d4:9b:31:
21:3e:ab:04:aa:13:40:27:ba:7a:82:d9:32:59:f2:
01:63:c7:8e:44:4b:fd:4a:02:ca:fa:21:1a:f5:b6:
bb:18:9a:c5:08:44:b2:b7:d8:1b:6c:36:f8:9c:62:
27:c3:4c:00:b1:98:7a:a9:4c:9e:d7:92:79:78:f6:
9c:64:cf:fa:5f:f4:f2:12:42:22:e7:af:28:18:2f:
04:f6:af:b2:3b:a6:8a:cf:7f:8d:ec:dc:fa:36:49:
f1:f6:95:53:20:63:dc:7e:0e:00:4d:58:b2:65:c4:
1e:be:05:71:ef:e0:7e:30:71:9e:30:55:f8:44:d4:
ea:9b:58:68:7d:32:cd:0c:92:2c:e5:bf:7d:8b:74:
68:61:a1:0c:89:e3:f1:de:1b:90:98:65:5a:92:36:
87:28:a1:be:c6:b2:5e:37:aa:20:8d:7f:19:a9:fa:
49:e9:3a:9d:98:67:80:92:43:ad:60:d3:6c:6a:39:
f6:c2:5c:92:33:ff:0e:2b:61:3b:d8:00:ee:fe:dc:
af:b1:c9:ab:ae:32:4a:23:4f:6d:b2:db:75:e0:41:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:10:79:AD:64:19:E9:DC:8C:CB:C6:5C:CC:40:42:9A:FE:B4:F7
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:61:7f:f8:95:43:60:64:6d:d7:d8:36:89:c1:fb:de:da:e1:
72:94:86:a6:68:7a:a9:7a:f6:6a:4e:44:7f:27:2d:64:e7:09:
54:b3:0a:b4:95:fd:67:1c:b4:b4:1b:19:68:a6:1e:3e:35:aa:
7c:e4:48:9f:3a:ae:05:d6:34:23:f9:98:67:6a:f1:30:c7:da:
ab:f5:83:eb:a7:30:6e:fb:97:1e:1e:17:80:27:2e:23:e6:39:
e1:be:9a:30:89:31:c1:3f:57:49:5b:05:73:d8:c4:80:23:0f:
24:f6:ac:9b:98:4f:f5:0d:e1:d6:a4:35:f5:ec:7b:a3:5e:bb:
6f:c4:3d:a5:ad:cb:c9:8b:bd:05:85:b7:2b:82:e2:b8:c6:2e:
6b:fb:c6:1b:4a:f4:d1:34:b1:f3:f7:0c:72:ac:a5:fa:4a:0c:
ae:4b:9f:10:de:fd:c0:a0:d1:50:cd:c9:8d:1a:1d:8d:3b:34:
a8:d9:25:cf:f7:ff:a7:e3:7e:4b:1f:0b:ed:8d:e9:ff:de:bf:
4b:9c:23:2c:81:d0:77:ce:11:ac:3c:be:9f:87:55:30:4e:4b:
f7:27:fc:c9:e6:6f:c8:4d:5e:a2:52:1d:9e:4a:59:f4:99:2a:
08:4e:78:bc:1a:3a:53:50:c5:8c:87:3d:8d:33:85:63:23:ff:
69:77:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:34 2026 by rpki-client