Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: 5dtd3oiAbxOoz71QSBwTgqqfparMtNoU3olFVdCqpcc=
Subject key identifier: BB:EB:7D:A0:50:0D:80:1E:16:E5:54:AC:EA:CE:2B:AD:FF:53:51:DB
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 019D9850B4EC1B8D8CE62A58F9330CE764E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: IWjwsY1bgLSJyFmigfatosgU_Vg.roa (hash: 8dY5ihKfXw7w5x8t/2Vfg5q46ZrOCREowiMp97eEXuE=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: gFhygBDQvj9+KD56XZij+BNS9kGcFCV0cFwn3pD9D5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b4:ec:1b:8d:8c:e6:2a:58:f9:33:0c:e7:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=bbeb7da0500d801e16e554aceace2badff5351db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:6f:4a:45:50:89:ea:b3:85:ec:f5:4e:44:
d1:c2:1a:19:c9:1e:9a:c9:4c:94:85:8a:11:25:e8:
e9:3c:12:0d:13:c5:d3:f6:c3:ce:c9:d0:0d:19:e7:
0b:31:f5:4f:49:82:6f:b5:ce:63:02:b5:b5:ae:ef:
5f:72:95:ee:ea:5d:b8:75:bf:e5:97:e3:e6:f4:65:
ed:61:55:3a:2c:d1:9e:36:d4:db:23:ef:fb:1f:1d:
16:e0:99:c2:77:2f:24:d6:bf:13:9b:d6:ad:e1:5c:
f4:ce:ea:fb:d9:1d:2d:56:9a:ec:14:2b:15:f8:d2:
86:c2:d0:c2:0c:5b:f1:c6:33:d6:f6:62:88:9e:6f:
d1:da:f9:1c:bd:c1:81:f5:fc:5c:e6:7a:53:58:2c:
39:29:8a:cc:9c:0d:b9:81:f0:95:f8:57:fa:8b:7a:
ed:31:ef:74:a9:f7:1f:36:0c:57:97:1b:5d:37:1e:
f2:7d:7b:22:71:ed:2c:27:64:a9:7a:02:2f:3b:3b:
90:7b:88:26:a7:e9:ac:90:ff:e5:f7:f5:05:13:aa:
0a:71:7f:dc:ca:0b:4f:e8:e9:b0:e4:98:02:4c:74:
13:c5:73:14:8a:a7:94:2b:3c:f2:6b:5d:91:8c:37:
f1:b3:e8:08:f5:e8:1a:7a:1f:a0:f7:42:dd:65:f6:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:7D:A0:50:0D:80:1E:16:E5:54:AC:EA:CE:2B:AD:FF:53:51:DB
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b8:41:ca:6f:be:d0:91:dd:c8:9a:de:11:14:b4:96:fe:c5:
5d:75:75:3d:7e:57:aa:0b:70:93:04:76:4e:a7:cc:5f:41:8e:
47:95:37:10:c1:f0:03:f1:4a:d1:84:28:5e:3c:25:44:d8:4d:
a6:cd:bd:cd:8c:8d:03:71:b9:58:7b:7c:86:9d:6a:4e:05:1a:
dd:55:c0:90:18:c8:6d:d7:16:1b:4e:62:e8:c5:78:55:08:91:
4f:38:8c:83:55:f8:7a:ba:1d:f1:3b:32:53:c5:b3:41:b6:60:
b4:cd:07:f0:fa:7c:15:5b:d4:a7:6b:20:ff:c8:c5:45:bc:8d:
40:b1:e6:ef:e5:5f:15:88:71:ac:06:0c:5b:47:53:70:9f:ce:
fa:a6:51:2a:ee:b2:ff:61:35:46:29:5a:76:69:c6:1d:ec:10:
37:ee:16:59:7b:63:65:42:2f:ec:9a:87:da:a8:c7:df:08:46:
9d:21:b1:24:01:dc:da:01:7a:77:3a:28:30:45:6a:7d:45:af:
5c:06:d8:7a:c5:8d:d7:a0:7c:e0:c0:42:8a:48:7d:72:3a:fb:
6c:af:26:21:f5:41:ac:31:9c:1a:83:33:84:dc:70:24:2b:66:
9b:ea:5a:eb:58:f2:b0:9b:09:cd:37:54:0d:4c:2e:ab:a3:5d:
da:c6:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:51 2026 by rpki-client