Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: ByWUKCHzrIfvgpaSQZWZoz1RDauFDi6przbSG0qkXeU=
Subject key identifier: 36:48:EC:DF:47:F7:9D:68:CA:DA:F7:B4:F7:94:23:10:4C:DF:BB:DC
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019FAAF5CDB1AAFB8A3BC3409ACBD9404F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:01:03 +0000
Manifest this update: Tue 28 Jul 2026 23:01:03 +0000
Manifest next update: Wed 29 Jul 2026 23:01:03 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: zAuEY4DX9B8txXPjUNjxH9F7kP2qR4w7Zsm2nUqpImM=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:cd:b1:aa:fb:8a:3b:c3:40:9a:cb:d9:40:4f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Jul 28 23:01:03 2026 GMT
Not After : Jul 29 23:01:03 2026 GMT
Subject: CN=3648ecdf47f79d68cadaf7b4f79423104cdfbbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:c8:89:06:00:f9:16:8b:02:4b:8c:8a:32:
8b:1e:2a:57:b5:e5:4f:63:27:98:85:4c:88:75:cd:
a1:33:36:74:c9:aa:8a:5d:c1:c4:ae:09:e0:d8:4e:
7f:ae:25:b0:7d:ff:70:f0:26:3a:c7:f9:a7:39:39:
e7:08:cd:36:61:40:26:69:57:cd:95:a4:71:76:f9:
4f:4b:bc:45:f6:bb:38:b4:45:b0:7a:7e:82:b7:46:
ca:4f:ae:8f:54:13:51:99:9f:a0:65:63:4a:a4:cc:
96:f0:a2:a7:2b:bc:79:11:44:fc:95:be:78:fe:0f:
a4:26:ad:97:44:68:8b:90:dd:5d:78:06:1a:b1:8c:
c4:85:45:75:46:06:f7:16:b9:ab:05:00:b2:72:e8:
dd:54:01:ab:31:81:1d:9e:e5:2b:e4:a3:6f:bf:72:
6c:a8:0b:36:9f:e2:5d:71:55:89:4b:88:a8:b3:30:
00:37:70:01:4e:cd:e3:4f:6d:5b:54:67:d8:f4:23:
3c:dc:bb:0a:8e:cc:3c:87:96:73:b1:e6:ad:58:02:
f5:e5:bb:73:df:75:3d:6d:70:6c:ae:ce:ae:95:0e:
87:93:a3:1f:49:92:7d:37:5e:ba:01:cf:df:65:cf:
ac:6f:05:bd:6d:6f:44:dc:42:a5:d2:30:83:5d:0e:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:EC:DF:47:F7:9D:68:CA:DA:F7:B4:F7:94:23:10:4C:DF:BB:DC
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:df:73:4d:0f:9c:2e:a2:8a:0c:e1:b9:2e:90:59:b3:74:47:
ac:05:b3:cd:d2:c8:d9:10:ff:6b:b6:e6:17:39:30:77:9b:9b:
a4:d9:56:a4:d8:1c:c6:2d:4d:3b:9c:81:3d:eb:b6:06:d1:de:
43:2c:6e:f5:4d:b9:41:f3:f2:ef:af:70:6f:f0:d6:9f:b5:27:
30:0c:da:80:46:02:b7:ba:50:2a:2e:bc:4c:a5:16:b5:e2:32:
7f:5b:80:56:32:4d:c1:52:2b:19:d5:f4:bb:5a:f8:0e:0f:99:
16:bd:7b:01:7e:ce:3c:ef:d0:e3:35:27:05:f0:71:bd:2b:02:
18:5f:b9:5a:7a:f1:92:c1:2a:f5:8c:ac:5c:48:0e:ab:e0:89:
49:c4:63:45:8f:e3:d3:e0:65:60:6d:ab:43:7a:d3:a3:c2:04:
be:e6:5f:75:64:85:2f:6c:f8:f4:bd:21:18:93:67:3b:19:e9:
ff:ef:bc:e5:0f:a4:b4:bb:41:23:f2:c0:6c:bb:8e:92:28:77:
52:b1:b7:45:a3:2a:f6:ce:b1:36:ee:ab:66:56:09:14:c6:b2:
d7:28:3a:be:c0:91:b1:76:64:bf:03:4e:a7:0e:f9:6f:d2:44:
0d:6a:d8:b3:36:c3:9d:31:18:cd:a4:e9:87:a4:92:a3:65:a2:
5c:70:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:47 2026 by rpki-client