Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: TjTgVqKctBgjUId8+oOMLuUatI9K9EYPbt9oPjeGa1A=
Subject key identifier: 75:87:12:34:97:E6:93:C5:6D:E6:38:F9:47:FC:0F:32:B3:A4:E7:D6
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019D2704009BB706A872933B7006AC2038A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 189C
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: XXesH3OEePBgPMmb0la2n/HFuehk3ZDw74ummAk9Lrc=)
2: p4odwBPCjK_f_cbe3suhJpjfBd4.roa (hash: BbTKrvDIk3p4mxNlC+Mfbr4gEXADSPPB2996OHBG8d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:00:9b:b7:06:a8:72:93:3b:70:06:ac:20:38:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=7587123497e693c56de638f947fc0f32b3a4e7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:8c:f3:69:df:4f:f2:0b:ef:62:09:61:e8:
d8:89:1b:0c:e0:82:6e:4f:03:4d:d7:1f:0f:56:88:
40:43:6a:76:be:72:9a:c9:2a:56:3a:f5:a6:a9:47:
26:16:da:73:b5:1b:0b:9a:2c:09:ea:d6:f4:9d:82:
21:da:e8:be:12:d9:3e:26:e8:4e:7e:94:91:a2:c5:
5e:d7:79:e1:69:2e:4e:b1:b1:0f:ca:ee:36:b8:f4:
20:1a:f0:91:05:89:c9:61:c2:4c:df:55:da:e0:d4:
cd:0d:97:fa:0c:a9:c0:78:2d:50:f2:8e:b9:43:19:
d9:1c:4c:a2:d4:c8:47:35:d7:49:38:a2:6a:af:80:
9f:98:76:2e:63:53:d6:2e:88:1c:9a:a1:0b:98:39:
b7:4a:b3:35:02:4e:d3:fb:de:ce:ed:04:09:3c:04:
df:47:e4:7c:ad:3d:69:51:03:6d:99:2e:d7:51:7d:
be:0c:78:08:cb:b3:52:9a:15:65:9e:ad:5a:94:d0:
17:5f:88:35:5c:91:92:e3:40:60:00:a4:e7:a3:87:
ab:53:d9:fd:01:e2:2c:61:07:4f:39:90:be:94:f7:
1b:66:a9:a1:fa:2e:41:0e:86:3f:ee:51:87:1f:d3:
c4:62:40:46:ff:0e:50:3a:2f:01:87:7e:b6:55:79:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:12:34:97:E6:93:C5:6D:E6:38:F9:47:FC:0F:32:B3:A4:E7:D6
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1b:2f:f5:f1:79:31:ea:f0:ab:21:d6:e3:91:79:63:1e:32:
d8:93:06:63:e2:22:91:98:d1:60:e6:eb:59:d9:c0:83:b7:2c:
3c:6e:fb:51:47:e2:e9:02:5f:b0:fd:9a:b7:1a:e6:ad:12:87:
eb:c5:76:48:12:e9:7d:4f:92:4c:0e:37:28:04:34:1d:be:b0:
4e:a9:34:66:a0:c8:92:c9:a8:c4:b0:be:ac:f8:4f:49:66:a7:
5f:4d:4a:4b:08:41:6c:c0:dd:ee:38:7e:5f:90:64:34:6d:b1:
c8:da:f7:99:ed:30:39:b7:80:a0:9e:0b:c5:32:a9:54:98:dc:
d4:09:e6:2d:a6:19:a6:6b:7f:ce:9e:68:2f:83:e3:a6:fc:f9:
b9:63:45:6f:ed:81:c6:76:c3:fb:84:5e:16:17:8b:dc:12:c3:
cc:6e:60:34:75:c7:ed:40:10:31:8a:4f:b8:a0:95:1b:7a:ab:
bd:3c:d6:d8:db:04:fc:9b:77:c0:83:0a:05:e7:04:60:ac:b5:
9d:4b:9f:10:72:b5:5f:97:fb:2e:00:7e:08:ec:dc:4c:95:76:
d5:c4:70:2d:58:07:5b:01:d8:98:45:32:bf:36:32:75:58:53:
97:a1:36:47:2d:37:01:b3:30:fb:a7:b0:5f:50:2c:d5:1a:7f:
02:ef:da:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBACbtwaocpM7cAasIDiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx
YTg2ODAwHhcNMjYwMzI1MjIwMTA2WhcNMjYwMzI2MjIwMTA2WjAzMTEwLwYDVQQD
Eyg3NTg3MTIzNDk3ZTY5M2M1NmRlNjM4Zjk0N2ZjMGYzMmIzYTRlN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdWM82nfT/IL72IJYejYiRsM4IJu
TwNN1x8PVohAQ2p2vnKaySpWOvWmqUcmFtpztRsLmiwJ6tb0nYIh2ui+Etk+JuhO
fpSRosVe13nhaS5OsbEPyu42uPQgGvCRBYnJYcJM31Xa4NTNDZf6DKnAeC1Q8o65
QxnZHEyi1MhHNddJOKJqr4CfmHYuY1PWLogcmqELmDm3SrM1Ak7T+97O7QQJPATf
R+R8rT1pUQNtmS7XUX2+DHgIy7NSmhVlnq1alNAXX4g1XJGS40BgAKTno4erU9n9
AeIsYQdPOZC+lPcbZqmh+i5BDoY/7lGHH9PEYkBG/w5QOi8Bh362VXkQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWHEjSX5pPFbeY4+Uf8DzKzpOfWMB8GA1UdIwQY
MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt
MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz
LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRsv9fF5
MerwqyHW45F5Yx4y2JMGY+IikZjRYObrWdnAg7csPG77UUfi6QJfsP2atxrmrRKH
68V2SBLpfU+STA43KAQ0Hb6wTqk0ZqDIksmoxLC+rPhPSWanX01KSwhBbMDd7jh+
X5BkNG2xyNr3me0wObeAoJ4LxTKpVJjc1AnmLaYZpmt/zp5oL4Pjpvz5uWNFb+2B
xnbD+4ReFheL3BLDzG5gNHXH7UAQMYpPuKCVG3qrvTzW2NsE/Jt3wIMKBecEYKy1
nUufEHK1X5f7LgB+COzcTJV21cRwLVgHWwHYmEUyvzYydVhTl6E2Ry03AbMw+6ew
X1As1Rp/Au/awQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:15 2026 by rpki-client