Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: 2Er612hZDfFa+802he8Bf3Gb7lYLM6Wd3aLYRUQpucc=
Subject key identifier: D3:AB:BE:57:AA:76:86:B6:B9:F5:AD:A9:2B:3C:09:0D:F8:84:2E:AB
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 019D9B50473C0648DABF8A8552F2B51E6CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0D0F
Signing time: Fri 17 Apr 2026 12:00:22 +0000
Manifest this update: Fri 17 Apr 2026 12:00:22 +0000
Manifest next update: Sat 18 Apr 2026 12:00:22 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: VIDrsXi/F2P0oNv5Y50XjgthiFt7Mz4DYP20W7p5Acc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:47:3c:06:48:da:bf:8a:85:52:f2:b5:1e:6c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Apr 17 12:00:22 2026 GMT
Not After : Apr 18 12:00:22 2026 GMT
Subject: CN=d3abbe57aa7686b6b9f5ada92b3c090df8842eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:de:24:ba:a4:99:dc:39:80:f1:97:c4:05:
91:27:ab:83:1d:38:f5:78:f7:17:c6:fa:5a:f0:90:
7e:1e:c5:0b:bc:60:60:eb:50:b6:4f:72:99:eb:73:
bc:20:0e:dd:dc:81:1a:c4:99:7e:fa:80:b5:be:9e:
ee:3c:61:65:72:0c:5d:76:f2:28:0e:06:6e:e5:d2:
66:f4:6a:93:0c:7e:62:5e:75:8f:a3:a6:c7:06:60:
eb:ac:96:07:5f:5a:c7:ec:ea:af:7f:9d:a2:d8:2c:
0e:da:9b:db:09:c3:24:bb:77:a2:96:db:87:85:a3:
d2:bb:13:e1:13:b5:a6:d7:90:4f:c1:99:f8:b6:82:
60:68:fd:9e:fd:14:4a:4f:95:12:07:88:46:4c:20:
f8:bb:9d:59:84:b3:13:1d:7f:e7:b0:53:e9:8c:1d:
b9:37:1e:cb:4d:0c:8c:21:0b:cb:a8:95:0b:b3:55:
00:92:7f:4b:02:02:0b:4c:d1:93:1b:75:b1:a6:8b:
c5:a4:be:57:c2:f0:60:00:c5:ac:31:ae:7b:3a:7d:
5a:e1:06:71:e1:77:17:f5:40:98:78:02:92:0c:0f:
6c:68:99:ec:0b:80:1c:bc:45:78:a0:22:84:ef:ab:
45:38:45:27:3e:7c:f8:45:a6:f4:95:74:61:80:44:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:BE:57:AA:76:86:B6:B9:F5:AD:A9:2B:3C:09:0D:F8:84:2E:AB
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:2b:bb:0b:7b:0d:2e:7d:d9:13:77:49:36:f7:d5:3f:73:
b8:fb:ee:6b:09:4d:26:dd:da:46:6c:ad:5d:63:4c:3e:71:c3:
47:7c:35:53:aa:64:79:56:92:ac:e5:3d:c0:61:08:20:9a:f6:
15:3e:be:42:9d:ce:71:eb:77:71:7d:6c:d7:8f:c7:96:bb:bf:
7f:44:8f:3b:67:bc:fc:5c:ca:79:36:7e:f6:4f:ca:a6:19:72:
d5:f4:31:3b:aa:17:82:55:f5:f3:6d:e8:30:fc:db:92:f5:2c:
73:0f:a3:e0:7d:76:96:65:d7:13:28:13:30:fe:62:90:d5:9a:
cd:74:8d:64:2d:56:dd:ec:e3:77:b4:80:80:cd:55:1d:93:69:
f1:d2:c0:82:88:40:55:ea:f5:91:22:8b:35:81:9c:b0:c2:a7:
4e:9b:87:d1:ed:30:bd:3f:f8:27:24:5d:b7:e8:5b:97:9e:5e:
c1:c8:88:ca:16:1f:77:a4:fe:0b:d1:8d:32:f2:2a:ec:91:a6:
54:ee:7f:9d:1e:5c:b0:8b:60:74:20:9f:8d:da:85:87:92:84:
d7:c0:64:00:8c:0e:bd:d4:0b:84:45:f7:85:54:f8:52:f0:55:
6d:9d:8c:5b:b4:69:07:23:18:07:d1:8d:23:59:0c:ca:61:96:
b6:03:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:24 2026 by rpki-client