Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: zWI2nXWbfoO9eG774dp1hJ+NP1D3AjVd1m8aoSOQebs=
Subject key identifier: 44:38:B5:0F:A6:A7:56:23:62:DC:FB:57:92:2D:40:67:8D:E5:EA:E5
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019D2AA92C4352308B0B1028EEAFB428C0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 15:00:23 +0000
Manifest this update: Thu 26 Mar 2026 15:00:23 +0000
Manifest next update: Fri 27 Mar 2026 15:00:23 +0000
Files and hashes: 1: lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa (hash: HoHhq099O+Q5npgf30dRiAWZ2csPL4g8k9fpkhuGo9w=)
2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: S4f8Nc10VcP6O6ui2xIEQHbEWJTJGTRlZvEpL+uu3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:2c:43:52:30:8b:0b:10:28:ee:af:b4:28:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Mar 26 15:00:23 2026 GMT
Not After : Mar 27 15:00:23 2026 GMT
Subject: CN=4438b50fa6a7562362dcfb57922d40678de5eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:0a:0c:86:b1:76:15:c5:e3:f5:b1:e4:8c:
6f:c3:3b:84:d0:1a:b7:33:62:fe:08:02:0a:fe:f4:
64:02:57:2b:05:4c:a0:56:4d:95:fc:92:40:7b:41:
96:df:5d:d3:9e:41:db:b0:73:91:14:3e:58:bd:dc:
0e:d3:5d:cd:93:91:d4:5c:dd:c9:30:44:9a:d6:f1:
da:bc:99:c5:4d:72:c5:12:65:30:fa:78:36:fc:51:
62:5f:5f:cf:f1:84:9b:5c:83:ed:30:dd:05:86:b0:
d5:d7:63:83:8b:20:da:1d:77:da:d5:02:4a:7d:2d:
99:0a:e5:55:7a:f0:7c:4d:ef:a3:3d:3e:f8:32:84:
90:9e:e1:4d:db:cc:bd:23:31:38:e7:ad:52:78:0d:
b3:24:ba:49:79:2c:d1:77:23:8d:3f:8b:2f:7c:03:
20:90:1e:b3:f1:56:f9:5a:e7:1e:cd:c7:66:6a:c1:
ff:80:db:9c:af:35:ee:73:df:db:69:46:c0:ba:c5:
d2:64:17:b8:7c:72:48:d6:2b:f8:69:a1:86:f9:82:
6a:c3:6f:7b:86:55:a3:3e:f9:c7:03:e9:d8:04:30:
38:38:3f:1b:70:69:9e:f3:56:00:71:af:75:b1:76:
c2:fc:95:e6:08:47:34:3c:9b:10:48:70:98:fa:34:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:B5:0F:A6:A7:56:23:62:DC:FB:57:92:2D:40:67:8D:E5:EA:E5
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:a5:9c:94:3d:71:8b:1b:0c:f1:50:b0:74:5d:1c:a2:d2:
6b:c6:ba:e4:05:2f:a6:1c:87:b5:5e:4f:2c:88:c1:3e:c5:8d:
fb:73:28:5c:82:88:b0:a2:e6:90:e8:23:2f:00:b8:ca:64:d7:
02:66:1a:14:af:74:91:7e:53:cc:10:3f:f2:50:70:09:f6:ec:
f7:fe:ca:4c:b9:8d:b0:b9:c8:87:3f:32:33:90:b4:01:1a:28:
99:5e:e2:bf:7f:e5:e1:37:2b:5a:31:3d:c7:3d:d8:8b:57:60:
e8:90:56:aa:c4:15:1c:5b:ae:d2:0e:5f:0f:82:02:71:5c:15:
71:dc:9d:45:fd:5f:d3:cd:f9:ce:76:b7:52:43:a4:4d:04:29:
33:f3:34:73:3d:39:12:b3:e0:1c:c9:0d:ea:6e:87:78:66:6b:
84:f6:d6:9d:b2:c8:ad:69:f7:a0:03:bb:44:5e:df:88:fe:57:
ac:a9:49:6e:64:6b:cb:2e:39:fe:78:30:c5:7c:fa:fe:72:ab:
c4:60:8a:ce:00:8d:c3:a5:10:d4:b8:76:c3:c1:0a:25:28:71:
19:a9:40:cc:90:f5:a8:47:a7:61:1f:09:ec:1a:b5:0c:e9:a5:
e2:65:ea:0b:6e:f7:8b:43:28:b3:bc:cd:58:ad:67:b1:28:c7:
8a:d1:cb:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqSxDUjCLCxAo7q+0KMCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliM2YyOWZmOWVhNzFiM2MzZGMxZjVhZjA1NGI0MTY0N2M5
MWFmOTgwHhcNMjYwMzI2MTUwMDIzWhcNMjYwMzI3MTUwMDIzWjAzMTEwLwYDVQQD
Eyg0NDM4YjUwZmE2YTc1NjIzNjJkY2ZiNTc5MjJkNDA2NzhkZTVlYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaQKDIaxdhXF4/Wx5IxvwzuE0Bq3
M2L+CAIK/vRkAlcrBUygVk2V/JJAe0GW313TnkHbsHORFD5YvdwO013Nk5HUXN3J
MESa1vHavJnFTXLFEmUw+ng2/FFiX1/P8YSbXIPtMN0FhrDV12ODiyDaHXfa1QJK
fS2ZCuVVevB8Te+jPT74MoSQnuFN28y9IzE4561SeA2zJLpJeSzRdyONP4svfAMg
kB6z8Vb5WucezcdmasH/gNucrzXuc9/baUbAusXSZBe4fHJI1iv4aaGG+YJqw297
hlWjPvnHA+nYBDA4OD8bcGme81YAca91sXbC/JXmCEc0PJsQSHCY+jS9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ4tQ+mp1YjYtz7V5ItQGeN5erlMB8GA1UdIwQY
MBaAFJs/Kf+epxs8PcH1rwVLQWR8ka+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTct
ZjQ2MjI0YjBkMTYxLzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTctZjQ2MjI0YjBkMTYx
LzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp82lnJQ9
cYsbDPFQsHRdHKLSa8a65AUvphyHtV5PLIjBPsWN+3MoXIKIsKLmkOgjLwC4ymTX
AmYaFK90kX5TzBA/8lBwCfbs9/7KTLmNsLnIhz8yM5C0ARoomV7iv3/l4TcrWjE9
xz3Yi1dg6JBWqsQVHFuu0g5fD4ICcVwVcdydRf1f0835zna3UkOkTQQpM/M0cz05
ErPgHMkN6m6HeGZrhPbWnbLIrWn3oAO7RF7fiP5XrKlJbmRryy45/ngwxXz6/nKr
xGCKzgCNw6UQ1Lh2w8EKJShxGalAzJD1qEenYR8J7Bq1DOml4mXqC273i0Mos7zN
WK1nsSjHitHLnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:42 2026 by rpki-client