Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: o/mpMlevjEjITY6tM/9/S64L1UpVssuWnFIjfdI7peI=
Subject key identifier: 87:BD:45:81:82:95:AC:86:45:19:6A:E2:8E:EA:91:5F:CE:B7:06:5A
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019F93923186A4E304E9C1262BAA1CB777A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 051C
Signing time: Fri 24 Jul 2026 10:00:59 +0000
Manifest this update: Fri 24 Jul 2026 10:00:59 +0000
Manifest next update: Sat 25 Jul 2026 10:00:59 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: BW+zEaeaiwxg1RfWQ5gDnhnpUafYVOMt12SZZfVmXz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:31:86:a4:e3:04:e9:c1:26:2b:aa:1c:b7:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Jul 24 10:00:59 2026 GMT
Not After : Jul 25 10:00:59 2026 GMT
Subject: CN=87bd45818295ac8645196ae28eea915fceb7065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:6a:b3:cd:44:5b:2e:9f:19:19:e7:10:6f:
0b:f9:a8:0f:cb:55:51:67:0a:d0:f6:96:7f:18:46:
37:05:41:ed:17:42:76:8d:f0:07:96:d1:d0:11:76:
45:ca:8e:f3:3e:ee:f6:6c:1e:c0:ec:02:22:24:76:
9f:e5:21:da:a1:01:30:2b:86:f9:cf:33:82:4a:56:
c6:63:de:75:80:6f:9e:3c:cc:e1:e4:75:cf:f8:75:
d6:2e:98:a6:25:7c:1c:41:9e:c7:71:f4:cb:e4:fa:
6d:33:aa:3f:93:f7:d0:c7:26:3c:0a:2d:e1:11:c3:
16:4b:ab:e2:39:a5:73:62:f8:92:3c:6d:3c:79:31:
b3:97:6d:a0:b3:10:1e:ec:e7:f3:eb:cf:da:e9:36:
c1:82:65:76:3e:22:14:1e:9f:22:b6:21:42:8e:58:
40:c9:2b:0d:ba:74:65:5a:69:2c:d5:f0:83:c8:fc:
46:a5:62:32:51:72:eb:16:25:5a:10:6e:7a:fc:08:
1f:e8:99:98:87:a7:eb:2a:55:35:b5:48:a3:f6:bf:
f6:2b:06:53:17:55:d0:4b:7c:d6:2e:90:ba:de:51:
10:38:52:2c:95:d3:de:79:3c:ca:60:8d:97:34:c7:
c3:7a:dc:0f:9b:be:42:ac:93:13:a5:11:10:25:5e:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:45:81:82:95:AC:86:45:19:6A:E2:8E:EA:91:5F:CE:B7:06:5A
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ee:2b:e7:43:22:f6:5f:ef:95:a1:1a:9b:44:42:7a:c5:76:
54:db:10:2b:90:ea:d5:db:e0:22:0d:7a:26:a8:17:09:34:d7:
a3:98:c6:e9:3f:03:04:45:46:16:1f:8b:e9:64:18:74:fb:5a:
45:f0:ee:2e:2f:fd:94:e2:4f:e4:15:52:03:fc:f7:f9:48:85:
ef:d5:0a:6b:77:9e:dd:cd:7b:aa:38:68:36:82:f7:dd:a2:48:
de:aa:ea:21:85:fd:0c:c7:97:71:a3:e7:ac:d5:16:de:30:1f:
1e:cf:ba:97:ba:e4:54:80:bd:56:a3:92:ef:c1:32:77:28:2e:
5f:d5:91:98:98:8e:3c:5d:27:cc:5d:b2:30:1f:c9:b2:d5:85:
94:60:b3:b6:fe:e6:a1:e3:eb:b4:a3:07:62:dc:2a:ee:a1:29:
7b:eb:ea:de:29:b4:7d:1c:7a:6e:2c:59:e0:cd:78:5a:76:6d:
59:18:7d:61:23:ce:14:8c:d9:5a:6a:ac:1f:77:ee:a3:56:02:
1d:66:9a:f4:88:1e:50:4b:20:3b:f5:4c:7b:ed:5f:6f:fd:bb:
72:eb:5a:1a:86:b5:72:46:e6:d1:de:6a:55:df:57:3e:4f:4b:
a8:36:00:4d:76:23:79:83:65:cd:36:00:f5:84:97:9a:6a:cb:
7a:5c:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:20 2026 by rpki-client