Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: 7/UOJ3+/Gn38XFN2nNoCg0iXoj+huYouUKQrfZnBFA8=
Subject key identifier: B3:F9:EA:3B:D1:FC:15:D9:D5:CA:10:CE:16:BE:83:54:2E:3A:8C:94
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 01A0D192F1378BA9F242A57E57D1B1BFDF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1A84
Signing time: Thu 24 Sep 2026 04:01:02 +0000
Manifest this update: Thu 24 Sep 2026 04:01:02 +0000
Manifest next update: Fri 25 Sep 2026 04:01:02 +0000
Files and hashes: 1: 1p0RiyBFchvE7NhFhbA51Ectb08.roa (hash: 2borQweYI7IpHIVDCEmYv8l+r/XVIWh005RBqdpqevc=)
2: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
3: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: 4PS/nvK94KcSCZibZCb23jok1bf+X/F8V2DhnZsKk5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:f1:37:8b:a9:f2:42:a5:7e:57:d1:b1:bf:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Sep 24 04:01:02 2026 GMT
Not After : Sep 25 04:01:02 2026 GMT
Subject: CN=b3f9ea3bd1fc15d9d5ca10ce16be83542e3a8c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:e4:a7:de:1c:0d:64:46:ad:e7:12:6b:96:
19:c5:88:b5:2d:7d:8d:ad:20:fd:ce:8e:c9:80:5e:
5f:27:e7:2b:52:3f:9a:25:30:65:64:3c:a2:d9:21:
fe:45:55:42:77:9d:47:86:72:6c:db:48:d0:9b:b6:
25:ac:4b:c1:1d:1f:e5:7f:a0:9b:a8:9f:f6:9f:89:
1c:1e:d1:65:f3:17:cc:2f:e7:cf:36:4b:9f:93:67:
80:f5:a6:4a:f3:1a:d4:ad:19:6e:e8:fc:8e:e2:f7:
e0:35:eb:3b:13:c8:b9:e7:a7:1a:3e:08:55:93:f2:
4c:07:5c:63:82:e9:bd:4e:ec:2a:43:e5:d8:52:f1:
f2:bf:19:2e:a6:14:73:2b:c4:f7:4a:1f:61:04:72:
0b:6a:19:90:39:23:6e:52:8d:81:8a:48:65:fd:20:
e8:07:ef:1d:9f:57:5f:3e:7a:22:dc:76:3d:de:ab:
c7:0e:b4:e2:fb:d8:0e:2e:55:40:7e:4d:ec:0d:ee:
42:64:50:59:39:c3:99:4c:c3:83:c0:b8:27:03:b2:
96:5c:fe:99:7f:07:06:d8:7d:6c:f1:21:78:fe:b0:
74:49:2b:cc:ee:d5:b7:3b:0b:b6:47:2b:72:6f:dc:
8c:a5:2f:70:6d:11:7d:03:ab:87:ac:6e:f3:6e:d6:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:EA:3B:D1:FC:15:D9:D5:CA:10:CE:16:BE:83:54:2E:3A:8C:94
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e2:dd:da:35:db:ce:82:3b:53:7c:c4:af:7c:0c:0c:22:83:
b8:0d:08:db:fb:fb:c4:0a:67:8e:9d:fc:fe:79:25:62:f8:5b:
3d:17:9c:00:12:de:9c:41:58:cd:37:b1:0a:ae:e4:63:eb:84:
c5:56:f3:ed:50:a6:04:76:46:59:3c:b3:a7:a6:6c:21:4e:8a:
99:30:50:47:dd:c3:54:70:b9:eb:ab:f4:8f:f2:f8:f4:b0:f1:
c1:8c:e7:02:92:0b:a5:e8:9d:1c:f3:6b:02:cd:35:c5:bf:6f:
e0:d5:f7:d8:4e:9a:7f:70:9a:8a:bd:6f:05:07:a9:75:68:f1:
a7:fe:97:c2:62:fd:05:fd:65:3b:97:8e:8b:b4:c2:77:15:a3:
ea:1d:eb:b6:1e:e7:c2:0d:3e:ae:75:a8:d9:70:ed:7f:5f:e4:
b9:73:be:7f:53:75:b3:9b:b9:d8:7f:ad:00:20:13:72:71:14:
e9:12:8a:6b:e5:26:dd:87:69:63:87:97:aa:2f:b2:70:a5:d3:
58:a8:1c:47:ad:bc:fa:16:8a:ac:ad:d6:b0:fa:f7:e2:d1:98:
70:ce:43:d3:76:97:a9:3f:a7:9d:a8:36:c0:3e:f6:e7:19:92:
f0:37:fc:fb:5f:76:85:98:20:51:41:0f:4b:73:22:2f:2e:71:
84:ef:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:50:56 2026 by rpki-client