Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: tmUO/EIZLYXCpiWBTGQ9qS/fFfA0PjSB4Faytte724c=
Subject key identifier: EF:16:8A:9B:4C:22:E7:F4:54:A2:17:AB:33:E1:3F:A0:52:DC:59:2D
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019CABD9F509829A29D2B7650B1D08E64BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 141A
Signing time: Mon 02 Mar 2026 00:01:53 +0000
Manifest this update: Mon 02 Mar 2026 00:01:53 +0000
Manifest next update: Tue 03 Mar 2026 00:01:53 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: zMAJMElXgtzNSqlcZJERCKZOaaLSQHsVOZ0S79QkOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f5:09:82:9a:29:d2:b7:65:0b:1d:08:e6:4b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Mar 2 00:01:53 2026 GMT
Not After : Mar 3 00:01:53 2026 GMT
Subject: CN=ef168a9b4c22e7f454a217ab33e13fa052dc592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:33:74:b5:c3:c0:7e:32:f9:81:28:a2:95:
48:39:5c:06:d1:26:df:5a:6b:1b:66:fd:71:68:5f:
c9:0f:cb:27:40:3c:e0:97:09:c5:11:89:8e:9e:97:
f3:4a:15:e6:35:5e:5e:69:62:66:30:db:c4:9d:02:
a8:5c:b9:4b:ac:9c:c2:31:a5:40:4d:32:9d:76:70:
a2:a3:81:5a:33:27:85:f9:ea:3c:fd:e2:1c:2e:c5:
80:94:31:4b:3c:e6:f2:d8:60:7b:4a:c9:66:51:14:
05:61:fb:08:3f:d3:63:94:60:03:9b:7e:a8:33:01:
95:42:f3:57:78:e8:98:77:56:7a:f0:ef:d7:89:46:
03:b5:90:16:81:a8:56:40:58:02:8a:d0:e5:02:f6:
34:6d:3c:a7:1a:02:53:bb:55:df:fc:9e:d0:58:c7:
aa:21:73:68:cb:91:24:bf:7c:75:7b:53:31:6b:bc:
b8:94:85:e0:95:92:47:31:b2:3a:86:94:23:58:91:
06:91:1e:d7:4c:5a:85:3b:00:fb:cd:d2:05:0d:07:
b8:fc:6d:da:1b:6d:8c:0e:24:99:02:e5:e9:2a:a4:
51:dc:6e:93:c6:f0:a4:db:e0:ad:b3:76:58:f2:1d:
e9:d5:12:b1:7f:b5:41:25:5e:c8:f0:f0:b6:4e:6e:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:8A:9B:4C:22:E7:F4:54:A2:17:AB:33:E1:3F:A0:52:DC:59:2D
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:53:f9:48:a1:74:f3:57:82:2e:a3:6b:f8:28:d2:93:c7:
4b:1f:47:0a:d7:71:aa:1b:2a:4b:92:59:a3:ed:23:6e:3a:35:
69:a2:63:a5:38:df:96:c9:a5:46:02:1d:68:93:76:16:64:9c:
a2:58:3d:ed:12:ce:3a:8b:c8:d2:69:0c:13:eb:7f:cb:94:30:
58:56:03:a6:18:5e:4b:9e:9f:78:3e:cf:8a:2e:2c:03:59:ba:
61:b8:33:04:67:cf:59:d7:46:f3:c6:b7:82:60:fc:15:bf:a7:
2b:44:50:f5:2e:72:89:0a:98:0d:f1:e7:a0:5c:1b:87:7a:b2:
3c:85:80:2e:60:b4:e1:1f:c8:11:cf:71:72:14:6a:1c:ed:da:
09:89:a8:af:41:75:0e:45:15:68:48:bb:bc:18:37:a7:22:eb:
dd:0d:55:6d:5c:0a:74:4d:98:16:fa:c1:69:bb:2f:3b:61:22:
0e:4e:7b:4f:75:e2:ba:e2:55:a4:af:9e:61:d4:1b:34:9e:d2:
87:9c:5c:c5:d7:7f:0f:bd:56:f0:ca:35:14:fb:37:7a:49:95:
3c:24:43:9f:4c:ff:8b:23:95:79:ab:15:74:16:03:ce:61:7b:
34:6d:2e:81:62:ea:72:45:9b:a4:51:7b:fd:c2:e2:a2:c6:0b:
2d:52:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:54 2026 by rpki-client