Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: yhxUJAM7xtEzhhZHQnacosHT5WwXh3B/u+a7pSMs7gk=
Subject key identifier: 71:24:5F:10:34:9B:07:D4:B3:C5:34:3E:1A:9C:A8:1B:DC:43:A0:07
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01A0D2A67C306583CD5BF5CE54F11C5F16F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 19C2
Signing time: Thu 24 Sep 2026 09:02:01 +0000
Manifest this update: Thu 24 Sep 2026 09:02:01 +0000
Manifest next update: Fri 25 Sep 2026 09:02:01 +0000
Files and hashes: 1: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: jVm9zIRga3BZ4KPzWPI4Gzc40jqr6NGGi4U8LYLIJik=)
2: niPFA17j7uRHpaTYenf6Cly67RI.roa (hash: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:7c:30:65:83:cd:5b:f5:ce:54:f1:1c:5f:16:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Sep 24 09:02:01 2026 GMT
Not After : Sep 25 09:02:01 2026 GMT
Subject: CN=71245f10349b07d4b3c5343e1a9ca81bdc43a007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:51:f6:55:58:37:e3:fa:76:21:58:a2:3e:
b0:0f:a7:ce:77:29:df:5c:63:64:bd:db:a1:79:a8:
c6:35:76:50:5f:2b:3b:a5:9c:1d:46:da:d8:c0:50:
41:be:4f:07:17:99:0c:95:cc:aa:12:16:72:3a:d9:
88:c0:d4:c9:c9:c6:60:b2:15:b5:cd:9b:3e:22:01:
e5:e5:09:9c:b5:ec:f3:f2:99:ff:d1:1d:90:ac:00:
a5:64:8e:81:5f:92:51:39:b2:f7:2f:28:f3:44:ed:
63:41:a1:5a:a4:ac:9d:8c:df:fb:b1:6d:ab:8a:92:
a2:0b:33:e0:fb:42:52:ee:0a:f6:e0:a4:6d:f2:73:
e9:35:90:8d:2a:36:07:74:10:b3:63:95:d1:48:66:
e7:01:7b:7a:4d:b7:15:5f:f5:95:48:c6:ed:56:b7:
9d:15:a7:21:9e:f0:85:d0:9a:35:3a:f1:e6:54:e0:
6c:5e:02:08:c7:13:15:5c:f4:03:05:44:60:b4:b6:
ca:04:3c:12:b6:99:81:26:48:fe:f8:70:02:fb:7f:
aa:34:d8:76:1d:ec:45:13:32:7a:52:02:4a:00:dd:
a6:62:73:4d:30:c4:32:7a:bf:5e:42:19:af:d5:c0:
e8:e8:a8:cb:61:38:32:98:7c:dd:84:16:5f:b9:f4:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:5F:10:34:9B:07:D4:B3:C5:34:3E:1A:9C:A8:1B:DC:43:A0:07
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:15:78:4a:2a:33:30:72:32:9f:79:99:ad:f3:db:97:03:86:
26:ca:9f:8c:34:19:2e:cc:8e:10:d3:0f:38:70:12:b8:74:f5:
d0:b9:9b:79:eb:fa:15:ce:6c:82:55:4e:aa:05:24:cf:1a:b9:
2f:18:68:1e:e2:0e:ef:33:84:d1:30:02:48:66:83:42:5d:10:
7a:71:c0:fb:dd:2f:39:5e:0a:8e:21:60:a3:a6:7e:9c:aa:82:
52:2d:d1:cb:c1:cb:e7:e7:0a:cc:b0:f1:3a:9f:ca:b6:c1:4d:
51:16:00:e7:7b:3b:ee:bf:59:7e:67:bc:fb:69:d3:8d:77:d9:
7d:8e:f9:7a:7f:30:1e:38:6a:20:0d:b1:19:2f:ff:96:9c:9b:
8b:43:6e:7d:d8:41:bf:9a:b2:3f:c8:fa:c3:f1:30:41:f9:2a:
7f:e3:46:34:45:47:dd:0b:b2:45:7c:63:fd:2d:56:c0:04:1b:
b5:3f:39:db:94:20:9c:29:50:29:38:c8:46:51:16:c3:f4:e0:
ca:0e:d1:1a:fb:8d:70:9e:48:93:4f:fb:64:2b:b6:ea:d1:0c:
ff:8e:5d:51:1c:e1:b2:8b:fe:a8:05:1c:ff:7e:21:62:17:a1:
ec:b0:fc:53:f6:ec:0a:b2:77:d2:fa:50:c7:e4:9c:01:2f:0b:
32:0b:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:01:38 2026 by rpki-client