Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: 4YuMPARtl7PVs2Yn6UBTC2SIZapEk6vxCDqDxHhTZlQ=
Subject key identifier: 9A:D2:EF:34:E5:CD:79:73:57:1B:58:77:52:6D:67:A0:7A:EF:CB:97
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A1065C15AF6E07D357643F71115AF5F99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 05DC
Signing time: Sun 04 Oct 2026 10:01:00 +0000
Manifest this update: Sun 04 Oct 2026 10:01:00 +0000
Manifest next update: Mon 05 Oct 2026 10:01:00 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: IZru/Ao0t500ETatRd6kUSJcP6gEgzyl1ps1cEe7lR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:15:af:6e:07:d3:57:64:3f:71:11:5a:f5:f9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Oct 4 10:01:00 2026 GMT
Not After : Oct 5 10:01:00 2026 GMT
Subject: CN=9ad2ef34e5cd7973571b5877526d67a07aefcb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:19:5b:85:c8:dd:35:b2:7f:74:ca:3a:1a:
cc:8f:35:b4:e8:76:be:da:fa:41:c4:fa:72:95:ea:
92:90:89:bc:3e:ae:24:47:b1:db:12:fa:3e:13:c7:
13:9d:7d:7a:73:c5:29:ba:9e:b3:87:95:30:3a:b3:
ac:92:84:28:e8:e4:69:a4:d7:57:ad:f8:68:30:1a:
76:64:04:6e:b8:0e:74:eb:4e:91:66:f2:e0:11:4c:
6d:77:31:75:e5:07:01:83:44:74:b1:3b:36:2f:01:
a3:93:20:24:ac:3b:c8:be:53:87:b1:00:f3:4f:3d:
80:c2:89:95:33:f7:99:2b:cd:b2:b1:14:e5:2d:3d:
40:61:f9:02:b4:a9:ea:5b:e2:d6:90:29:d1:f7:8b:
94:46:35:f8:94:14:0c:a8:43:a4:6b:67:63:69:0d:
e1:26:40:11:37:c5:5e:be:dd:a5:f2:46:55:7e:8b:
f5:19:fe:9e:3a:16:d3:77:27:f2:eb:10:b7:fb:1f:
dd:01:18:81:17:6f:2e:f8:9f:ea:06:b0:67:58:43:
a2:dd:a8:80:48:46:9b:7d:ac:92:92:6b:26:11:b0:
4e:e4:65:41:4a:8b:65:ad:75:f4:51:a2:ec:b0:95:
82:5e:2d:2d:c6:99:e4:55:1b:80:66:d1:55:44:66:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:EF:34:E5:CD:79:73:57:1B:58:77:52:6D:67:A0:7A:EF:CB:97
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:2e:5b:5d:90:ae:7f:53:0c:d6:3e:ca:a1:52:ca:ad:0f:
47:89:d9:2a:cf:a2:05:ed:dd:a4:4f:a4:a5:f4:b1:81:7a:aa:
44:0c:6a:70:cb:6c:a8:6b:49:d5:a1:8a:a9:40:0c:52:b3:b6:
da:57:f5:08:84:79:f8:04:df:5c:86:af:2f:a4:e5:0a:24:f1:
54:2c:5c:4b:c1:cd:a5:36:5a:c9:32:50:c4:a3:84:dd:4f:6f:
d9:57:dc:d1:d4:dd:31:f8:e8:46:34:ee:7c:98:a5:f6:33:86:
29:b5:2e:d9:94:be:d2:ac:35:04:72:4d:8e:d7:52:c7:45:80:
9f:b2:d9:0e:95:31:05:04:3b:a0:77:27:9b:5f:e8:4b:3c:19:
5e:5c:7d:2f:94:f1:96:53:8b:43:0c:d7:92:bd:5f:27:91:5e:
fb:8a:f7:b0:0c:cb:ad:05:a2:28:cc:8f:07:c4:f9:f7:8e:67:
3d:27:02:de:47:45:90:13:eb:c7:89:a4:c2:83:d5:64:7a:4d:
b2:55:14:61:96:94:d7:a1:fc:6c:6f:e1:82:a5:56:40:4e:ef:
96:33:86:dc:88:a4:72:f5:37:de:55:f9:d1:81:59:b7:73:25:
1c:ec:10:2a:37:e7:e5:dc:31:7d:80:f9:69:ac:f4:31:45:c7:
97:20:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:42:37 2026 by rpki-client