Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: DgNF7wRx/kdeFe1DCpCcrD3QDua7eImAQ6N8n+h1N7c=
Subject key identifier: A3:BF:E3:5A:78:49:3A:BD:E3:35:63:24:3B:F9:C6:EF:B5:43:9D:46
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019DA3788D0A8C96ECFA240D565ACC1090EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 02:01:19 +0000
Manifest this update: Sun 19 Apr 2026 02:01:19 +0000
Manifest next update: Mon 20 Apr 2026 02:01:19 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: TegeRtZc8CpeTYWmasvNl93aI7IHb2+MajmVeIJ40MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:8d:0a:8c:96:ec:fa:24:0d:56:5a:cc:10:90:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Apr 19 02:01:19 2026 GMT
Not After : Apr 20 02:01:19 2026 GMT
Subject: CN=a3bfe35a78493abde33563243bf9c6efb5439d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:f5:82:58:96:02:e5:45:30:c5:f5:7a:e9:
a2:a3:29:29:f1:6e:53:b7:68:0a:fe:cc:6d:92:09:
63:86:57:29:8d:35:8b:c4:a7:8f:bc:31:0f:3b:0c:
2a:5f:33:3f:dd:06:97:8e:0d:e6:24:71:7a:71:59:
e9:03:ab:36:fe:82:00:89:56:71:cc:14:73:06:66:
2c:01:cf:6b:57:3a:29:e7:4a:45:d2:68:be:29:47:
f4:8f:50:b4:d5:0c:a8:e8:f8:c6:6b:eb:1b:b5:46:
d7:fa:21:33:a3:d8:ab:ff:2d:a3:a6:32:7b:3e:57:
42:e6:5a:1e:b8:6d:24:22:c1:32:ef:80:f7:af:83:
6f:37:fb:b1:48:40:43:43:37:c1:14:74:78:3f:b5:
be:41:c7:35:f4:2f:e5:93:88:f2:a3:cb:ab:d7:6a:
76:86:90:8b:7b:95:3f:ca:ec:8c:8b:7a:86:cf:98:
a7:45:1f:8e:a5:c0:9d:83:d9:86:4d:be:78:fe:19:
22:fa:73:de:ed:48:70:d6:6d:f0:5c:dc:bc:3f:5b:
0e:f3:fe:a0:45:20:cd:6e:2d:cf:d1:1e:f4:a7:fc:
d9:b3:bc:5f:20:e3:06:08:74:4b:9c:84:3a:45:2c:
9f:b4:85:40:c9:5f:5a:1a:f7:19:7c:30:31:1f:21:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:E3:5A:78:49:3A:BD:E3:35:63:24:3B:F9:C6:EF:B5:43:9D:46
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e4:73:6e:db:4b:8b:6c:af:01:9b:7b:80:28:c3:37:85:a6:
c4:3b:d0:11:08:19:c4:6d:39:1d:50:5f:f5:ed:89:a0:69:c3:
5d:60:f7:39:ba:17:56:d2:15:70:55:6d:09:b2:d5:24:fe:05:
aa:3b:0b:31:f2:07:f9:fd:df:94:fa:fe:25:f1:79:99:9f:95:
4f:22:2a:21:c6:a3:81:9c:98:52:33:15:e5:20:83:67:a2:eb:
88:0e:2a:0d:58:20:ae:9e:6c:4d:39:94:a2:b8:7c:ff:d5:9e:
7e:3f:eb:b7:05:4c:2f:0e:b2:5b:e9:95:0a:1a:5d:0d:b8:3c:
a8:db:13:a3:58:51:b1:d9:9a:68:e3:a7:2b:fb:8e:34:c4:93:
6f:a2:bd:b2:d9:26:53:ed:13:3f:47:2b:70:a2:21:35:4f:06:
67:25:95:3e:5f:65:cc:4e:aa:4f:3d:bf:18:6a:03:7e:af:98:
29:31:81:72:3d:c5:6c:ea:5b:c4:a4:83:65:67:fe:f8:38:80:
f1:2f:12:84:07:9d:5b:4b:e7:e0:dc:30:ed:02:8d:39:bf:b8:
a5:25:fd:29:60:dd:bc:f0:a6:47:08:67:14:57:e3:ac:45:f4:
d4:a1:4b:0d:f5:4c:89:4f:45:c0:b1:50:b5:d4:81:e0:df:61:
58:96:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:02 2026 by rpki-client