Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: 5Wx6fjuehZ3luPP7y1LbMqmCZPfR5k0GU/8Zkqn70+A=
Subject key identifier: 2D:D7:0F:23:85:81:0C:49:75:7B:65:A2:29:C9:89:3F:18:3E:F3:CE
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 019CADC770734168E2180BC2E7677547A81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0C94
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: A+cniHK1HhCx/j2z8A0v3BrXyv2K6f14io5Ni9bDFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:70:73:41:68:e2:18:0b:c2:e7:67:75:47:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=2dd70f2385810c49757b65a229c9893f183ef3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:53:ec:d2:64:a4:aa:9c:83:0b:a9:76:a8:
36:0c:21:11:13:c2:89:3e:0d:7e:a2:8c:90:69:45:
0f:50:4a:69:09:06:93:01:41:79:6f:53:59:ed:0f:
6b:c0:1f:5f:04:07:0b:74:ba:9b:32:1e:9c:d7:2d:
61:ff:b8:c4:ad:24:69:63:e8:3f:20:6c:db:76:1a:
dd:75:5d:da:9a:87:30:e5:47:b1:8c:49:b5:b4:e2:
08:7a:c4:2e:ad:bf:a9:4d:d4:58:b6:2d:e7:54:9e:
59:6b:8e:e4:13:7e:fb:64:54:88:a2:e1:24:cb:42:
36:6f:2c:19:9e:7b:9f:ac:32:47:35:0d:02:b9:4d:
8a:07:39:d1:8c:38:b4:d9:bc:da:ee:14:1d:47:c2:
3e:5f:1d:46:0f:ff:f1:f4:85:c8:8d:37:78:24:c9:
29:32:ca:0d:fd:e9:a0:7c:02:a5:85:2f:ce:15:c6:
fa:3c:22:f6:be:3f:14:79:f2:3c:7a:15:db:3f:c1:
ce:d9:72:1d:e2:64:00:60:79:05:4d:81:29:6c:d3:
b3:80:cb:bc:82:66:51:03:c9:f7:0e:78:13:aa:d6:
f8:ef:2d:93:a5:2a:4b:2e:45:be:0c:6e:ac:2b:7a:
ce:4f:56:7b:79:ce:dd:8c:ea:06:10:4d:c0:ae:a3:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:0F:23:85:81:0C:49:75:7B:65:A2:29:C9:89:3F:18:3E:F3:CE
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e3:d6:d1:17:28:66:d4:b6:a6:76:3c:fd:01:39:df:fa:3a:
27:c1:d2:53:7f:a8:e6:db:8a:c8:f0:4e:a2:d7:5c:dd:8c:c5:
1b:4a:19:42:5e:65:83:f7:e1:f6:0f:a1:e7:b9:ee:fa:21:d9:
d7:50:1d:62:4e:b6:c7:70:1e:c6:05:6b:6e:8c:67:04:70:62:
0c:96:cd:02:62:cc:f1:48:8c:b9:df:20:12:6f:27:22:e2:fd:
63:7a:cb:04:64:fa:8e:e3:e5:02:ce:a4:e1:97:ac:9a:70:f4:
b9:1f:62:be:02:41:6f:3c:31:b5:4f:d3:72:d8:99:56:6d:dc:
cb:fe:de:59:0f:9b:42:c8:9a:ee:1c:11:10:6f:1e:dc:d9:6a:
c1:fc:6a:d3:e7:42:76:c2:37:44:69:82:67:ea:be:ad:62:91:
17:73:bc:23:0d:2d:39:b5:f4:a5:bd:41:40:a8:31:da:04:1f:
9e:08:cf:2c:ec:97:68:02:20:6f:0b:d0:80:92:14:b1:e4:2b:
af:ce:29:4e:de:aa:d4:fd:12:bd:dc:11:84:88:db:93:61:94:
30:7f:14:79:b1:8f:9a:f3:85:0b:7e:dd:c0:0f:61:68:07:06:
08:ed:ac:87:96:c0:18:d1:d7:5a:47:9d:6a:c9:d8:5c:57:da:
8f:17:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:11 2026 by rpki-client