Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: s6iRjRLJDJCJOUPkpCynHegAcy/oRqDhyXnjk8SWa6w=
Subject key identifier: 8E:26:C0:78:9C:9F:C1:74:DB:96:4F:BF:54:9B:54:34:F5:FE:03:43
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 019CAB6B248684D5E5456907215A88EA4B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: A6WMD2C+F3CHHgp/fOX05UpnATOg2tctyhSiT9zlYvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:24:86:84:d5:e5:45:69:07:21:5a:88:ea:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=8e26c0789c9fc174db964fbf549b5434f5fe0343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:55:7b:b6:95:76:a3:ff:54:31:e5:22:fb:
63:de:b9:cd:9d:f2:2a:85:01:24:53:48:fc:fb:04:
ba:75:6c:ad:c0:f1:f3:d3:44:e2:2b:9d:1c:ca:6d:
3f:a3:1b:d2:9f:94:cd:f4:7c:d0:09:d1:cb:6d:64:
a8:1e:bb:61:b2:bc:3c:68:7d:2d:a1:60:00:63:9a:
70:37:2d:31:21:0d:d6:3c:ce:c4:2c:f2:4c:78:6f:
52:bc:85:3d:a8:75:f5:a8:5f:cc:eb:a7:12:86:f8:
6f:d2:12:fa:96:98:32:58:b1:90:4d:ac:62:7d:c6:
74:10:2f:86:08:c0:29:be:36:c9:e3:02:0c:03:ae:
56:3c:55:bb:28:fc:af:dd:bf:6c:b1:9c:b0:e1:00:
5c:61:48:08:80:fe:20:14:02:e5:ef:3c:b4:de:3a:
0f:16:b4:f7:8b:8a:aa:df:4b:68:2e:0b:1f:f9:ac:
66:a9:37:bb:74:c8:77:e9:1f:12:17:f9:6d:4d:0f:
aa:fd:58:30:ae:05:ce:12:12:fa:a5:48:db:a0:08:
cd:f0:10:2f:7b:cf:fc:de:c5:6d:33:98:ec:7b:cc:
14:e2:6e:73:56:9e:ed:f3:b2:eb:c3:df:41:a8:7e:
26:72:52:d9:b6:7b:8e:01:16:9a:95:0c:87:48:eb:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:26:C0:78:9C:9F:C1:74:DB:96:4F:BF:54:9B:54:34:F5:FE:03:43
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3d:6d:e4:eb:53:5e:2c:56:de:ad:fb:6c:ad:08:d7:1d:7a:
cd:08:a5:94:ef:73:5f:24:cf:7c:d0:eb:4e:c8:68:0a:70:4a:
20:f1:28:ba:05:94:c8:9e:9f:7c:2e:68:6a:7c:68:ec:b5:40:
94:97:27:a4:20:a1:6e:24:8a:35:5e:4d:2d:06:d9:92:99:dd:
30:79:cf:2d:f1:a5:88:2e:90:f0:1f:ee:79:45:e3:1c:1f:04:
b1:0e:dd:67:59:3a:43:bb:65:67:67:56:d9:2c:b9:8b:8d:b3:
90:f0:bc:be:e0:c4:e4:a3:fc:97:e8:4f:cf:fc:7d:ee:4d:5e:
1e:02:7a:13:48:bd:7a:c4:10:3b:81:f7:3f:b2:c2:78:88:62:
67:01:c0:31:94:26:59:ee:72:17:a9:8a:3b:ca:36:b3:93:a0:
13:7c:c7:59:75:a9:0d:d7:39:55:b7:2d:51:94:d1:60:f1:92:
1c:56:4a:c4:94:20:ea:46:bd:b7:97:36:a4:7a:a5:32:27:7e:
00:96:b1:a9:22:55:c7:2d:ff:99:bf:32:19:28:df:ff:25:c3:
11:f9:b6:7a:2b:ef:07:7a:a9:9f:90:a7:6b:52:95:3b:0f:bb:
38:fb:1e:e4:53:d2:f3:5e:ea:00:49:13:96:b6:f2:70:c5:cb:
39:d8:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:41 2026 by rpki-client