Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: asTgs+FTdQpBp0IC4vjWkARDcH5FYKXDrsS9Cmx+6BA=
Subject key identifier: 2E:3D:B1:8A:F9:2F:DD:B1:3C:AD:09:EE:62:FA:14:51:4F:02:02:8C
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 019D296157DF13F005DF988A15BBF57BAE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 0491
Signing time: Thu 26 Mar 2026 09:02:18 +0000
Manifest this update: Thu 26 Mar 2026 09:02:18 +0000
Manifest next update: Fri 27 Mar 2026 09:02:18 +0000
Files and hashes: 1: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: znNWFCn666PWZIXOKM0SGQD/pz0dX78TDXeg5XFVzHg=)
2: zSAvFjTGIZNZQugEHveBHELdn1Y.roa (hash: CXzOAflbazRPSskBL/AIymp/SWQ3K3xlxPcN85lCvzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:57:df:13:f0:05:df:98:8a:15:bb:f5:7b:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Mar 26 09:02:18 2026 GMT
Not After : Mar 27 09:02:18 2026 GMT
Subject: CN=2e3db18af92fddb13cad09ee62fa14514f02028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:79:fe:19:f6:62:03:10:0d:25:04:24:22:
cc:94:65:73:a9:2b:9d:5b:ac:87:84:83:29:0b:ab:
33:35:f7:1b:92:5d:8b:e2:9b:09:30:c9:91:3c:dd:
b1:3e:7c:82:9d:18:84:f6:ea:0c:c6:72:7c:10:00:
e1:4a:22:a4:74:2f:a1:c1:44:20:f9:cc:87:46:29:
c9:15:e4:fb:df:0f:68:e8:09:d1:91:15:78:3d:05:
d2:c3:b7:f5:bb:bf:40:ec:2b:2a:da:3a:f2:5c:e4:
56:57:cf:28:f5:ea:9c:db:ad:fe:62:1a:18:1e:0e:
94:b3:aa:0a:f5:c9:49:f6:c4:ed:8f:09:9c:df:65:
db:40:14:d7:32:95:35:05:7b:25:f0:5b:5c:e0:30:
59:74:a4:3c:1c:54:34:fd:bf:f5:2c:ef:99:54:9a:
65:70:f1:67:6a:85:4b:54:5d:cb:da:8e:16:2f:22:
97:b1:a1:28:1e:1c:0c:d1:21:4b:aa:14:8c:c7:23:
8e:2a:a4:6b:4a:e1:21:b9:02:53:31:7d:aa:58:c2:
7e:35:f3:2b:51:9c:3e:6f:d4:b5:1f:24:56:84:68:
5b:81:c6:d5:56:95:c6:8b:c3:12:26:fd:50:dc:9e:
69:41:5e:10:33:e1:7f:f2:99:9d:4f:9b:18:ea:c3:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3D:B1:8A:F9:2F:DD:B1:3C:AD:09:EE:62:FA:14:51:4F:02:02:8C
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:87:e9:b1:f0:ee:39:3b:5b:e1:29:57:26:36:4b:ad:f4:46:
fb:6f:4a:13:bc:ff:65:dc:df:bc:05:5b:50:d8:0d:f1:13:da:
bc:a6:99:94:7c:3c:ed:85:1f:28:a2:72:78:89:ce:b7:c2:69:
1c:3d:96:3c:19:06:36:19:9a:9e:1b:2e:50:b1:c6:45:14:d7:
1e:b7:96:92:a3:eb:39:f0:37:4e:84:33:8c:b0:9f:de:40:be:
c4:d2:4c:68:aa:a9:cb:93:67:0d:9a:90:ff:30:56:05:e3:6c:
67:94:0d:40:69:14:00:c8:a7:b9:dd:1e:74:e6:87:45:80:60:
5e:39:e3:ab:8d:aa:98:63:0d:97:2f:28:0d:20:aa:c3:e8:ff:
9b:e7:1b:a2:c0:fa:bd:e5:7f:da:b5:2d:e6:50:b0:73:5e:18:
7a:46:e2:1a:43:4a:a0:86:8e:11:05:46:ca:f0:49:d8:78:f8:
ec:b8:17:b2:e5:5b:4f:50:a2:1e:46:6a:8d:88:b8:1f:a4:d1:
c1:ef:1d:f5:ca:31:99:8a:a3:f3:78:f1:26:fb:3e:3f:04:74:
c4:6e:e5:7e:51:02:64:a5:2c:b6:fc:98:40:fa:99:fd:d2:bf:
1a:da:0f:7b:51:3c:d2:79:ff:a0:5f:8c:d5:d5:2e:c1:72:91:
67:93:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:48 2026 by rpki-client