
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File: mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier: 8gB7l+vM/zEwxLQ+EOh+s6o0J0t7JHb9VQ1mzc4psSc=
Subject key identifier: CE:B3:E3:DB:EC:FE:9F:C8:E8:90:F2:CD:49:42:A7:52:E4:BB:63:C7
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019D2704D8965D747D278D15C4EEFD8F5C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number: 76
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: 6zb9CnsiaqJZ/eRFGELLc2IfmLRYXcvwx5MIdvFWIjA=)
2: vQIQ0hujisLLaE0FdKyN-US-jgc.roa (hash: HcBf/lSh/0W+uCeeNUF1qjopHzD07ezacPSk6j+nXRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d8:96:5d:74:7d:27:8d:15:c4:ee:fd:8f:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=ceb3e3dbecfe9fc8e890f2cd4942a752e4bb63c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:0f:72:53:f6:82:09:1c:4a:1e:29:48:80:
6b:24:23:4e:2f:43:8e:1a:fb:86:f4:2f:b7:4d:8f:
91:6a:1d:41:ac:38:68:4b:2b:06:23:14:de:35:4b:
1a:e6:79:41:02:9c:a5:3e:41:cc:68:4c:3f:e4:95:
7e:d7:db:a8:0c:91:35:d4:da:ad:38:49:f2:d0:67:
79:1d:52:d1:c7:ab:52:f5:e2:72:b7:c6:8f:d7:39:
34:f5:b2:dc:e6:d1:9e:d9:f7:a9:75:91:62:51:4b:
30:cb:9a:37:ee:b9:89:3a:f5:3e:54:2f:5d:aa:ad:
33:0a:35:2e:a5:73:d6:04:a6:b4:48:2e:e0:6d:3f:
b6:92:c5:72:66:3e:e3:a2:7b:e5:6a:05:8c:cb:6e:
aa:d5:c5:38:c6:27:7f:06:3e:45:21:7a:d6:a7:59:
45:8f:43:cd:7c:11:ae:df:09:2f:91:61:f4:dd:f0:
0f:67:5b:91:23:6b:fc:07:49:02:19:25:8f:cb:ec:
09:6a:b3:ae:b5:42:88:46:c9:f1:ff:d5:cc:db:e6:
48:90:a0:e2:51:21:db:a9:60:2f:91:ac:ca:d7:ed:
6d:9e:b6:38:52:6b:1e:08:26:64:8a:dc:bf:72:7a:
53:93:f3:42:25:1e:cc:e2:60:7c:76:25:f1:d7:f6:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:E3:DB:EC:FE:9F:C8:E8:90:F2:CD:49:42:A7:52:E4:BB:63:C7
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:da:71:65:c8:9b:a8:bf:bf:7b:64:a0:e3:c4:c0:ce:2c:e2:
f8:c5:d0:3d:b8:6c:79:8f:ab:27:aa:5a:15:f4:8d:e2:1a:5a:
db:c9:30:77:3a:69:75:d6:14:c9:9d:cd:5d:88:ad:19:05:3c:
39:b1:d3:59:07:42:bf:02:8f:99:03:63:92:57:66:f5:c9:3c:
4d:b8:da:ba:3f:66:aa:3b:dd:d0:88:00:0e:7f:1d:6f:27:11:
1a:33:21:88:ee:8c:e3:b6:bb:42:ac:88:1a:fa:12:f4:3c:97:
b6:83:c9:2c:8e:76:3b:a1:73:00:7a:11:85:ce:ee:fc:d3:46:
16:0d:4f:ca:a7:9a:0e:01:9d:f6:92:33:6f:95:56:03:91:4a:
29:b6:e2:13:99:1a:ca:85:51:f3:c1:50:4e:2c:db:09:10:a5:
d2:a0:ca:4a:89:bf:26:d5:97:bb:7e:a2:2e:a5:b8:47:86:67:
01:92:3f:a0:d3:e7:25:d3:2b:b5:b9:3e:93:7e:9d:18:51:d5:
04:52:ae:62:d4:aa:39:f3:c7:9c:ed:20:dd:94:b1:16:d2:bc:
2c:0a:26:22:94:43:25:e0:d1:db:b7:0b:66:03:92:28:4e:26:
25:c7:b5:34:83:de:2c:b3:96:93:70:c9:25:58:10:a6:67:8a:
6d:45:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:21:55 2026 by rpki-client