Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: F6nDfVmuqt+tjo3CTUqH2Md/UKHgwrvgCouWZXzrctE=
Subject key identifier: 91:FC:10:F4:EF:E7:E1:90:82:FF:98:89:81:3C:54:DF:30:C9:4E:4D
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019D99CFBDF6923C20720C17D2E9E5117AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:21 +0000
Manifest this update: Fri 17 Apr 2026 05:00:21 +0000
Manifest next update: Sat 18 Apr 2026 05:00:21 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: aKR0lUqjuJBcKHcAmkPBeCcF2CtIoQDosqjCZyBRe60=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:bd:f6:92:3c:20:72:0c:17:d2:e9:e5:11:7a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Apr 17 05:00:21 2026 GMT
Not After : Apr 18 05:00:21 2026 GMT
Subject: CN=91fc10f4efe7e19082ff9889813c54df30c94e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:13:5b:8d:55:3a:42:2b:c4:96:b3:96:94:
c0:d3:b8:2d:cc:19:06:f3:20:aa:b9:b2:4a:c5:6f:
01:5e:bb:0b:a2:56:2b:02:6f:6e:12:3f:d1:63:ed:
5d:65:7c:cc:b9:66:92:7b:a8:30:75:6c:8e:93:b5:
2b:9c:f9:22:ec:77:4f:22:27:b5:21:e4:00:94:0f:
dd:85:4f:b8:4c:9e:a2:5a:84:05:54:78:b0:c7:48:
12:3a:12:f0:94:d3:82:6c:18:00:11:12:63:6e:78:
1a:55:47:c5:08:b7:d9:b5:7d:e4:0c:14:a9:3c:e7:
36:05:bc:6d:31:f7:d2:97:a3:d6:7d:26:38:af:16:
4d:52:6c:06:c8:60:0a:20:06:9b:1f:45:98:1c:bd:
18:f0:c5:90:26:6e:01:3e:c7:72:94:94:40:50:64:
f0:ca:95:85:c3:f2:7c:3b:0c:3f:a6:2c:c8:e8:c1:
e8:24:00:dd:d7:e4:38:16:22:52:f2:b9:f3:34:4b:
be:bc:e5:09:ff:82:02:d3:e7:e0:ff:df:66:51:50:
03:b7:d9:ba:6a:7b:7f:c6:27:2e:f1:6b:bf:6b:2f:
c3:ae:be:28:9e:ff:67:8e:60:56:6c:1c:a4:71:5f:
33:25:86:fa:54:99:48:d1:93:c4:48:0b:2a:d5:e5:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:10:F4:EF:E7:E1:90:82:FF:98:89:81:3C:54:DF:30:C9:4E:4D
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:3d:0c:61:5e:da:67:2e:7b:b6:c8:a0:8d:f3:88:fc:a4:
ec:4d:fd:ab:18:9f:5c:e9:c2:38:80:f9:9e:5a:ca:29:f2:e2:
29:77:27:11:90:7b:2f:5e:ce:d4:49:77:b1:bc:f2:7c:a7:b6:
d8:fd:1e:e8:87:8f:5a:f1:4d:7d:cd:78:0c:1c:3f:92:41:d4:
b1:14:b3:4b:f8:f4:fc:b0:6e:88:3a:17:eb:ce:82:39:48:0c:
af:8c:2c:83:bc:3c:f2:e0:5c:a1:4a:58:ea:94:8f:54:1d:88:
08:09:82:9d:e7:cd:c5:4d:c9:18:e2:f3:ea:a5:3a:ea:98:58:
5f:cc:c7:ad:c1:33:c3:aa:42:13:ed:a2:05:35:34:67:46:67:
23:a6:87:85:68:66:94:26:29:c7:77:dd:41:23:15:56:e2:14:
f5:23:29:51:c8:5c:15:67:01:12:b4:b0:3f:74:c6:ff:34:b2:
d7:77:c0:84:02:9c:46:da:30:dd:0d:ec:fe:3f:95:18:a3:ec:
73:73:7c:41:97:16:26:72:5e:0f:e2:74:b5:69:46:a3:23:58:
40:6e:7f:96:fa:03:1d:8c:a5:c1:fd:64:f2:ab:4b:73:28:cb:
09:94:2b:6f:ff:ff:e6:dd:74:71:93:fd:5e:78:ee:5f:d0:62:
ca:c2:f8:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz732kjwgcgwX0unlEXruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhM2NlNWM1YTczMGNkOGUyZmYxZjU1ZDE4MGYxYTgxYjMw
MDBjYzgwHhcNMjYwNDE3MDUwMDIxWhcNMjYwNDE4MDUwMDIxWjAzMTEwLwYDVQQD
Eyg5MWZjMTBmNGVmZTdlMTkwODJmZjk4ODk4MTNjNTRkZjMwYzk0ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQTW41VOkIrxJazlpTA07gtzBkG
8yCqubJKxW8BXrsLolYrAm9uEj/RY+1dZXzMuWaSe6gwdWyOk7UrnPki7HdPIie1
IeQAlA/dhU+4TJ6iWoQFVHiwx0gSOhLwlNOCbBgAERJjbngaVUfFCLfZtX3kDBSp
POc2BbxtMffSl6PWfSY4rxZNUmwGyGAKIAabH0WYHL0Y8MWQJm4BPsdylJRAUGTw
ypWFw/J8Oww/pizI6MHoJADd1+Q4FiJS8rnzNEu+vOUJ/4IC0+fg/99mUVADt9m6
ant/xicu8Wu/ay/Drr4onv9njmBWbBykcV8zJYb6VJlI0ZPESAsq1eVRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH8EPTv5+GQgv+YiYE8VN8wyU5NMB8GA1UdIwQY
MBaAFJo85cWnMM2OL/H1XRgPGoGzAAzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWp6bHhhY3d6WTR2OGZWZEdBOGFnYk1BRE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTgwYjItZjZhNC00ZGU2LTkxMDMt
YTAxZDcyOWIwYTIxLzEvbWp6bHhhY3d6WTR2OGZWZEdBOGFnYk1BRE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNTgwYjItZjZhNC00ZGU2LTkxMDMtYTAxZDcyOWIwYTIx
LzEvbWp6bHhhY3d6WTR2OGZWZEdBOGFnYk1BRE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA809DGFe
2mcue7bIoI3ziPyk7E39qxifXOnCOID5nlrKKfLiKXcnEZB7L17O1El3sbzyfKe2
2P0e6IePWvFNfc14DBw/kkHUsRSzS/j0/LBuiDoX686COUgMr4wsg7w88uBcoUpY
6pSPVB2ICAmCnefNxU3JGOLz6qU66phYX8zHrcEzw6pCE+2iBTU0Z0ZnI6aHhWhm
lCYpx3fdQSMVVuIU9SMpUchcFWcBErSwP3TG/zSy13fAhAKcRtow3Q3s/j+VGKPs
c3N8QZcWJnJeD+J0tWlGoyNYQG5/lvoDHYylwf1k8qtLcyjLCZQrb///5t10cZP9
XnjuX9BiysL4ZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:08 2026 by rpki-client