Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: lJIg1PtH4v2iWgUhy4djsax8nc+QPC8oBcVPvOqll8M=
Subject key identifier: 99:BD:E5:57:51:03:67:76:49:FD:C1:E6:15:1F:2C:AC:D7:BB:16:57
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019CAA591F5E856000557A74DAAB85970733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:01:33 +0000
Manifest this update: Sun 01 Mar 2026 17:01:33 +0000
Manifest next update: Mon 02 Mar 2026 17:01:33 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: bKZNS4m7Zhco2+Vh5ZO570Aah+i8S+0qUGoj+fb/fCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1f:5e:85:60:00:55:7a:74:da:ab:85:97:07:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Mar 1 17:01:33 2026 GMT
Not After : Mar 2 17:01:33 2026 GMT
Subject: CN=99bde5575103677649fdc1e6151f2cacd7bb1657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:51:36:72:b9:bd:22:09:ab:e3:7e:22:42:
9f:bc:d8:80:43:b1:30:45:87:0a:fa:05:20:2a:c3:
6b:65:ba:7a:1c:c7:72:dc:ab:24:70:80:97:f5:07:
b1:30:ff:37:84:a0:53:80:eb:b9:12:1e:86:48:22:
59:19:90:dc:e5:09:b1:2b:5b:c8:28:4b:91:32:1e:
84:73:bc:c3:bb:7a:fe:a6:57:9c:8d:2f:d6:6a:b4:
26:37:94:60:b8:1e:e9:44:c0:11:09:68:5d:5a:65:
1d:68:a5:57:e0:bf:fa:91:5c:27:5f:51:50:6d:0c:
b6:ec:1b:b3:f5:2c:1e:a0:c1:66:d9:b8:ad:84:c3:
bf:25:ac:81:e7:55:f7:84:96:3b:e8:b7:4a:44:81:
bf:fc:a8:20:e9:5b:c3:9d:af:43:27:01:79:40:56:
01:ca:5a:a9:74:81:0b:4e:d1:78:f2:d1:6e:9f:ec:
59:95:19:c2:1c:35:c9:8d:97:e1:a1:ea:3d:00:95:
4b:36:93:4a:4f:30:01:12:55:d9:0e:d8:a4:83:42:
c8:aa:cd:ca:89:51:33:3f:32:84:d7:5e:75:37:b2:
2d:64:ef:f2:1a:e2:21:aa:2d:49:02:5b:ed:33:a5:
ac:96:5d:ba:d1:a8:cc:98:f7:9c:9f:04:1d:bd:1a:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:E5:57:51:03:67:76:49:FD:C1:E6:15:1F:2C:AC:D7:BB:16:57
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cc:40:00:b1:f0:56:c1:16:47:e9:6e:6e:93:f2:d1:6b:05:
8f:97:61:de:59:f7:b4:30:c2:c2:ac:f6:6c:60:e6:30:04:41:
25:f3:78:70:46:fd:af:da:6c:b8:b0:ea:4c:31:03:f1:73:a1:
0a:7b:0b:08:47:b0:03:0e:b9:4d:d4:23:03:b1:16:a3:b6:0f:
09:c8:c1:68:e4:48:26:37:1c:d8:1c:3d:97:eb:62:e2:bf:97:
4c:fc:59:53:9a:82:5b:09:2f:fc:bd:4e:2c:8a:40:7f:b0:99:
17:43:27:43:04:b6:77:97:b2:44:70:f5:58:8f:ed:2b:38:c2:
d2:bf:6f:94:a8:45:26:9c:bb:20:3c:ca:44:37:db:e9:88:9c:
fe:9f:0e:9c:cb:1b:d6:52:d3:39:63:ca:21:a7:a1:a8:23:48:
b3:10:f9:fb:15:88:7a:99:eb:11:7d:c2:44:ff:be:7f:90:2d:
ae:73:a5:a3:98:e1:f1:a7:f3:37:fa:92:48:f5:c4:e4:ff:7a:
c0:af:e0:b8:fe:4a:43:68:57:82:65:23:b6:be:3a:ec:19:10:
1d:2c:c2:53:72:16:7b:39:c8:35:b4:cb:36:8f:6e:23:90:39:
ca:d5:80:94:b9:77:ef:ac:97:ca:36:74:fb:bf:f5:96:80:4a:
60:62:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:09 2026 by rpki-client