Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: CD4a54lZQLRm4f/kHsgt4ET3Ykfh/Jl6mKxo9BdNrjs=
Subject key identifier: F8:69:97:F4:30:79:FF:C1:48:21:DC:FD:73:45:96:C5:04:6A:1B:FC
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019CAA5857D2B0A1E52D23F9EF630EE526CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: YsTIc/KeLMM3O6Yv2qJFOKioog2WFPpgSET3mLYzU74=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:57:d2:b0:a1:e5:2d:23:f9:ef:63:0e:e5:26:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=f86997f43079ffc14821dcfd734596c5046a1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:d8:f9:06:4c:51:b9:7e:58:00:4b:cb:17:
21:c0:7d:a6:ea:de:be:c1:f3:65:64:11:a1:57:6d:
f0:31:58:13:b5:55:63:75:72:09:7e:d1:26:6c:17:
ce:c6:7d:e4:f3:22:55:8e:8f:e2:4f:89:6f:da:5e:
d3:c5:d7:e7:d5:49:19:c3:a4:0b:5a:0a:72:f1:e3:
4e:f8:f4:bc:29:71:f9:5b:6c:03:f5:36:e2:1f:5d:
e2:ea:12:4f:b7:1d:9d:52:db:fb:5c:49:a1:d5:15:
6e:f8:b4:2c:47:c4:e2:ba:c9:c1:2d:48:58:2a:c0:
82:c9:63:dc:bd:61:ae:88:58:7f:60:cc:ab:f1:b8:
70:67:de:f8:39:8c:86:0d:9c:fc:fa:8c:f7:4b:40:
b9:a6:28:8b:f5:df:37:c1:b2:69:39:f0:71:ae:ca:
b4:99:67:47:82:38:28:b2:d8:6f:9f:c3:69:34:26:
50:1e:20:41:5f:43:e7:e1:57:e6:e6:a3:b3:99:3a:
c9:75:7f:ac:d1:1e:58:56:76:5d:60:a4:ec:63:73:
e8:0d:7d:fd:a0:f9:fe:1d:e1:0d:29:21:19:8b:c6:
c1:9b:51:b7:62:ec:d8:5e:2a:92:6a:9a:49:83:c2:
25:73:70:51:35:17:d4:c7:b1:a9:0b:43:54:cd:ae:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:97:F4:30:79:FF:C1:48:21:DC:FD:73:45:96:C5:04:6A:1B:FC
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:91:1b:f0:8f:f0:f8:a7:f6:57:57:4c:e3:0a:87:d6:da:e6:
65:34:d3:ae:3e:8c:47:fb:71:8d:28:9a:6f:a8:5f:9a:3e:55:
f8:cd:0a:59:2a:1a:b9:d1:bf:c1:c2:93:e4:c1:36:44:99:41:
41:d9:77:41:3f:85:dd:a6:1d:d1:bd:db:77:cd:a6:c7:74:2d:
49:40:61:d8:68:d8:86:58:ba:4e:36:dc:30:03:f4:e0:4e:b4:
08:26:be:37:4f:6a:f3:0d:37:e0:cf:ce:51:ce:c3:e3:4b:e5:
f9:c5:bf:4f:05:c5:5d:32:d9:b8:2a:d6:3f:c0:20:19:2a:11:
e0:9e:7a:a0:4e:74:c5:65:1e:c2:7b:75:ed:d4:cb:5e:1b:25:
05:76:5d:d6:49:38:15:f2:90:ef:12:ce:a4:65:fd:dc:52:39:
db:11:da:f8:c5:6e:33:d2:13:a4:54:64:ac:7c:05:e9:11:af:
67:aa:a3:24:8a:ae:20:64:01:ca:0a:00:c7:38:20:fa:ce:a8:
e5:2c:e0:5e:ca:95:47:c8:06:28:bd:f7:fd:62:2a:56:9e:a8:
d4:5b:2a:be:0c:ba:d0:a7:e1:28:3e:33:16:78:6a:2d:36:ef:
87:69:8f:d5:8f:07:cc:af:c8:4f:af:12:d2:e7:26:be:d3:f7:
45:59:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:39 2026 by rpki-client