Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: +hxImQio1e0DjlkbxFZCjwjIVCfox20Hz80jaj1Eu68=
Subject key identifier: 7C:4F:8F:65:18:94:8A:D2:0F:85:8B:F1:A9:48:18:DE:84:F0:22:C9
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019E1EDA44A4F6E520E42FADE01460A7DB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 045B
Signing time: Wed 13 May 2026 01:01:21 +0000
Manifest this update: Wed 13 May 2026 01:01:21 +0000
Manifest next update: Thu 14 May 2026 01:01:21 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: q7TToZ3jHo5ttWwkLf7chetQvqUVTQXrDzIz4Bch8Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:44:a4:f6:e5:20:e4:2f:ad:e0:14:60:a7:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: May 13 01:01:21 2026 GMT
Not After : May 14 01:01:21 2026 GMT
Subject: CN=7c4f8f6518948ad20f858bf1a94818de84f022c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:1f:32:d3:0a:67:a0:ee:43:08:9b:54:7d:
28:4a:48:7f:fb:1f:33:16:b9:1d:fa:b4:0d:16:98:
8f:d8:73:03:64:e6:2a:ed:e5:a5:8a:9d:00:49:23:
05:6d:65:b2:68:6f:01:d6:6d:8b:a0:51:58:99:93:
e1:4c:08:83:ba:a0:1c:4b:76:3d:80:55:11:4b:e9:
1b:01:4c:59:95:83:d5:e9:a3:08:45:52:39:22:21:
a5:03:b2:ea:07:8e:58:be:f4:d8:46:7b:d3:52:27:
41:28:ec:0f:3d:1b:37:51:b0:a0:61:aa:62:fb:a6:
42:9f:50:8b:b3:68:f3:65:22:e1:87:29:32:2a:3d:
1e:ac:01:bb:fd:e8:f8:1a:e3:42:5c:53:21:27:1b:
79:f8:bc:7c:07:15:cf:e4:4c:f5:99:6a:d8:62:ba:
0d:c8:a3:11:69:4f:f9:12:ba:99:8f:2b:5f:1b:a7:
5f:a4:91:cc:36:6c:82:5b:94:f1:65:9b:cb:6a:7d:
da:44:52:e9:dd:7a:ce:09:8c:ed:28:e5:33:7c:ea:
08:ff:f7:2d:cd:96:cd:bd:8e:07:fd:53:be:14:04:
e5:13:3a:0b:77:ae:cf:b7:58:45:5b:c1:ec:84:3c:
90:ec:df:f2:e9:09:0e:f7:73:5b:64:a4:31:cb:22:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:8F:65:18:94:8A:D2:0F:85:8B:F1:A9:48:18:DE:84:F0:22:C9
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:73:68:49:ce:b4:27:d7:e6:39:ac:66:c4:a6:ff:7e:91:fe:
72:57:ef:39:b1:20:aa:df:a4:e2:1e:66:50:a2:0e:ae:a2:ea:
c0:6b:c4:82:01:f0:54:4c:1d:9a:e6:17:7e:75:3a:53:2d:e2:
65:42:3b:b4:a2:9f:28:26:ca:9c:b8:8f:c9:77:1b:e5:90:6a:
27:b1:1f:c5:e1:78:f3:71:77:c5:5f:40:bb:df:be:f5:fc:dc:
0e:cb:a9:76:91:65:94:91:0f:85:6b:5f:78:ff:9b:1b:20:61:
1a:4f:40:f4:1e:a0:a5:0e:ca:a3:d0:da:8b:4d:60:70:3e:f5:
4b:c5:fc:a0:84:3f:de:10:69:c9:a6:7b:5d:cf:a9:b7:2c:c9:
ad:42:00:6b:11:fc:db:4c:91:af:86:ff:55:28:5f:d7:e6:21:
64:ce:9b:7e:d5:99:7a:f7:37:ce:79:8a:d4:85:0f:d2:c2:54:
d6:c2:87:b9:8c:b6:5c:28:3d:b0:69:cc:8b:45:a5:51:a8:5e:
03:2e:67:6e:3b:50:94:1d:6b:ad:39:f7:4f:fe:de:e7:7a:99:
12:2e:ac:67:96:a2:79:bd:69:5b:d8:9f:4c:1c:ba:1b:1a:4a:
2d:6a:7e:99:42:49:1a:ce:f0:25:30:38:31:e3:50:46:5d:92:
54:1a:78:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2kSk9uUg5C+t4BRgp9uTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4
MWQyZmQwHhcNMjYwNTEzMDEwMTIxWhcNMjYwNTE0MDEwMTIxWjAzMTEwLwYDVQQD
Eyg3YzRmOGY2NTE4OTQ4YWQyMGY4NThiZjFhOTQ4MThkZTg0ZjAyMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArskfMtMKZ6DuQwibVH0oSkh/+x8z
Frkd+rQNFpiP2HMDZOYq7eWlip0ASSMFbWWyaG8B1m2LoFFYmZPhTAiDuqAcS3Y9
gFURS+kbAUxZlYPV6aMIRVI5IiGlA7LqB45YvvTYRnvTUidBKOwPPRs3UbCgYapi
+6ZCn1CLs2jzZSLhhykyKj0erAG7/ej4GuNCXFMhJxt5+Lx8BxXP5Ez1mWrYYroN
yKMRaU/5ErqZjytfG6dfpJHMNmyCW5TxZZvLan3aRFLp3XrOCYztKOUzfOoI//ct
zZbNvY4H/VO+FATlEzoLd67Pt1hFW8HshDyQ7N/y6QkO93NbZKQxyyLr9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxPj2UYlIrSD4WL8alIGN6E8CLJMB8GA1UdIwQY
MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt
NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2
LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXNoSc60
J9fmOaxmxKb/fpH+clfvObEgqt+k4h5mUKIOrqLqwGvEggHwVEwdmuYXfnU6Uy3i
ZUI7tKKfKCbKnLiPyXcb5ZBqJ7EfxeF483F3xV9Au9++9fzcDsupdpFllJEPhWtf
eP+bGyBhGk9A9B6gpQ7Ko9Dai01gcD71S8X8oIQ/3hBpyaZ7Xc+ptyzJrUIAaxH8
20yRr4b/VShf1+YhZM6bftWZevc3znmK1IUP0sJU1sKHuYy2XCg9sGnMi0WlUahe
Ay5nbjtQlB1rrTn3T/7e53qZEi6sZ5aieb1pW9ifTBy6GxpKLWp+mUJJGs7wJTA4
MeNQRl2SVBp4tA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:04:03 2026 by rpki-client