Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: QkICaH6bLI3vQPd7FLUqhJThCFntrpmdh9Le6QYT5nE=
Subject key identifier: C8:59:F7:EA:A2:E4:98:98:64:3D:4A:47:FA:47:E3:3E:75:F5:0B:C7
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019D27A86A2C6EB68EF5D3203CDA4D95CD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 03DB
Signing time: Thu 26 Mar 2026 01:00:41 +0000
Manifest this update: Thu 26 Mar 2026 01:00:41 +0000
Manifest next update: Fri 27 Mar 2026 01:00:41 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: ZpBylOiRXBmeZWPyy67B2tfMJ0+EvazdlCXr4X4+4bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6a:2c:6e:b6:8e:f5:d3:20:3c:da:4d:95:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Mar 26 01:00:41 2026 GMT
Not After : Mar 27 01:00:41 2026 GMT
Subject: CN=c859f7eaa2e49898643d4a47fa47e33e75f50bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:e5:87:00:cb:e4:6f:93:1a:75:93:53:29:
9a:4d:50:bb:8b:09:c5:ce:14:64:c1:8d:d5:46:83:
05:ce:de:e6:98:16:d9:7a:6b:bb:c9:43:71:1a:41:
5a:3b:56:43:e6:1e:72:91:1e:8d:0e:b9:42:e6:41:
10:20:d5:56:46:de:58:56:2c:42:61:ab:c9:43:7a:
87:30:8b:8e:3e:c2:33:1c:b7:44:5a:dd:b7:02:99:
2b:0d:f9:40:13:50:54:96:4d:75:53:da:5a:8f:21:
e3:36:57:ca:d7:30:9c:30:90:d6:ef:fa:b0:88:10:
b0:f0:26:65:cf:08:f3:58:e3:e9:38:f9:70:ea:c2:
cb:3e:87:49:1c:e1:e2:8f:c8:48:82:83:ac:6d:bb:
f1:cc:76:8a:d1:5c:ed:a5:e7:ae:cf:bb:e2:9c:b8:
4b:ba:b8:fa:89:f2:45:48:91:4e:10:00:62:03:2b:
9c:e0:ee:f5:73:6b:00:9d:cc:b1:4d:6a:9f:45:df:
76:b6:b4:9b:96:09:f5:39:65:3c:34:f4:f1:5c:9b:
d8:f5:96:c9:ca:f1:ed:0f:4b:e6:7c:bb:a8:b1:32:
45:a5:c9:1f:3b:76:4e:59:18:cc:33:7f:97:b5:f5:
c9:31:15:4e:9b:3b:bd:89:2d:54:a3:61:ad:54:fd:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:F7:EA:A2:E4:98:98:64:3D:4A:47:FA:47:E3:3E:75:F5:0B:C7
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:f4:dc:a6:9a:b2:a5:6e:6b:90:6e:12:0e:ce:88:2f:0a:
bf:8a:19:ce:1a:e2:17:85:c9:ea:e8:6b:7d:00:93:fb:d0:c2:
63:62:bc:27:40:50:32:79:94:eb:ff:c0:df:b8:52:98:04:df:
bf:84:d0:f8:6a:fe:65:c8:e4:a9:3e:74:1d:b1:ae:02:23:77:
42:1a:81:b4:35:b4:51:d4:74:95:22:85:ae:2f:7e:da:e7:be:
59:16:0c:02:5f:a3:89:3f:3a:1d:3c:53:66:88:73:de:d9:e1:
6e:05:a8:52:b9:74:04:83:de:4c:30:8d:dc:d8:6d:0a:b6:58:
13:70:5b:38:25:cc:34:eb:24:25:5a:0d:07:d7:d4:b5:1c:7c:
6c:78:cb:6b:ca:20:af:9b:46:ba:1e:3a:39:aa:e2:1c:f9:49:
5f:ae:2a:0a:6f:2b:76:32:b8:a0:9d:b0:19:31:40:8f:11:04:
4a:ce:c9:76:af:d9:fa:6a:0b:4e:ed:46:e9:4c:75:0e:ca:95:
5f:43:5d:b3:fc:f2:6a:0f:b6:97:fc:03:2c:b1:61:c0:26:ab:
d0:62:47:0a:a0:e6:d0:d8:f6:90:4c:be:40:04:42:22:8b:73:
17:56:a9:0e:8a:34:a6:d8:27:1b:d2:58:13:60:05:1a:34:14:
4d:dc:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:37 2026 by rpki-client