Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: GYceyDEy6MRrV0EMszRP8pKu+dCb/GAwHxFYkJyW9hU=
Subject key identifier: 18:9B:CA:13:F4:F5:39:7D:11:67:5D:18:D1:6E:2F:26:28:C0:95:47
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019EC148764B7294369A628BF01B76EF3055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 14:00:11 +0000
Manifest this update: Sat 13 Jun 2026 14:00:11 +0000
Manifest next update: Sun 14 Jun 2026 14:00:11 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: j/GuFE3u+5ER28r0/3KZSt3EW06uZ6iOq25fUphUkKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:76:4b:72:94:36:9a:62:8b:f0:1b:76:ef:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jun 13 14:00:11 2026 GMT
Not After : Jun 14 14:00:11 2026 GMT
Subject: CN=189bca13f4f5397d11675d18d16e2f2628c09547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:36:4b:42:1b:a6:88:6b:42:e5:4e:46:fa:
5c:ee:1d:27:68:46:d9:b3:6c:48:8c:52:22:17:f0:
d8:a1:7c:f5:98:0f:58:91:b7:06:71:ee:fa:32:0f:
cb:ed:91:79:2c:7d:9d:fa:0d:ad:80:63:ee:81:46:
59:05:8c:39:64:d5:f6:39:b6:c1:5c:71:1d:8b:15:
02:70:63:50:6a:7a:a9:31:bc:f6:9e:da:43:d8:0a:
b5:3b:5f:c4:02:b8:3d:80:c8:6c:98:3e:d2:f0:65:
70:8e:15:41:e9:cc:9e:72:26:a7:52:bb:38:f6:fc:
ba:89:e1:be:7a:c6:ce:dd:75:70:30:61:84:45:12:
ae:de:a9:d7:11:93:01:7f:4f:0d:93:89:89:8c:41:
bb:51:1a:64:a5:75:ad:ef:fc:57:f7:98:f5:d8:64:
1c:cd:5d:6b:36:aa:1f:c1:fb:84:6d:84:34:c7:8e:
fe:0c:a0:fc:2e:2d:75:d4:76:0c:1c:aa:10:1a:a5:
cf:8b:9b:62:e4:56:6c:aa:3c:4f:eb:91:63:ec:34:
33:d9:f7:e9:cf:e5:35:12:39:46:05:bb:ae:90:ad:
e0:99:61:bb:50:c5:4e:50:bf:f6:b5:42:c3:92:f3:
36:3b:f6:41:a7:e9:12:c8:84:e3:c7:06:c4:64:8c:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:CA:13:F4:F5:39:7D:11:67:5D:18:D1:6E:2F:26:28:C0:95:47
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:4c:64:a9:5b:c3:cc:f8:3d:da:bb:90:a3:d8:d1:56:3e:
af:bf:3b:5a:5a:a9:d4:27:e3:c1:86:c6:41:c9:16:03:37:ac:
41:8b:3c:73:6d:91:02:12:ab:3f:32:45:57:17:95:15:9b:59:
87:eb:2c:28:0b:5c:0b:4f:6b:35:95:b3:a0:ba:5d:ce:d9:ef:
e2:61:b1:4b:1e:20:a3:dc:1a:87:ca:e8:ba:1f:ce:75:db:c1:
0a:df:b6:06:bc:07:6e:db:2b:0b:81:a8:0e:36:09:8f:ce:f5:
9a:18:1b:91:c7:5c:7c:4d:12:7d:f9:cd:b7:13:4f:1b:50:c6:
75:6a:64:7d:de:77:44:65:6e:80:08:ea:02:02:ec:1f:d6:36:
1e:45:6b:e5:0b:0c:15:7c:ca:7b:13:21:e0:fd:7f:d6:03:1d:
d6:b1:2f:ef:dd:05:8c:7f:0b:82:31:cc:7b:39:17:f7:1e:c2:
77:70:f2:7c:0a:70:46:96:22:0a:ed:67:2d:97:54:0f:82:9e:
41:57:12:e8:70:d4:75:4b:40:8a:0b:12:07:87:a6:a1:fa:87:
eb:a6:53:99:3f:7a:8d:80:ff:12:fa:e2:d4:95:ab:6f:52:56:
8f:5a:ab:9d:9b:8d:b7:3e:85:4c:60:88:28:b5:54:6f:35:11:
b7:89:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:43 2026 by rpki-client