Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: UHXWRkqYMx3YfxVobqaec+W+NVUbFpW8Gpb+o9Tkhm4=
Subject key identifier: DA:BF:95:86:D5:3D:A7:58:25:EA:8E:BB:92:F5:5F:BC:B9:33:34:F5
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 01A0BC54580CCCFC4328ABDD1671C071FA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 1A64
Signing time: Sun 20 Sep 2026 01:00:39 +0000
Manifest this update: Sun 20 Sep 2026 01:00:39 +0000
Manifest next update: Mon 21 Sep 2026 01:00:39 +0000
Files and hashes: 1: bY0US8PQsJwgwk4sBH5OxzcNIwA.roa (hash: J/0CXCG1xKhKkenaNTif5Fbq2gKs6zO5wkvBXdQkbs8=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: lxqunn2a3NF1ZCEtjK8QpBtcLfKQdTjydp/gy8ZZ8Qc=)
3: wMMwxntmfG9n-J-6LL-v_AMs0TQ.asa (hash: lYdgJ7RBc0yUK0B4uDb9sHh7jptaek0nvYlwaOYxRcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:54:58:0c:cc:fc:43:28:ab:dd:16:71:c0:71:fa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Sep 20 01:00:39 2026 GMT
Not After : Sep 21 01:00:39 2026 GMT
Subject: CN=dabf9586d53da75825ea8ebb92f55fbcb93334f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:da:86:90:ca:55:47:5c:b9:5a:38:1b:f2:
c1:a3:7a:eb:2a:00:2d:ce:65:c7:81:a1:c5:f8:56:
8a:bf:ea:b1:52:aa:35:fa:8a:0f:3c:8c:a4:7a:a8:
2b:f8:02:9a:f2:3f:d5:70:49:be:61:73:7e:28:54:
65:11:b4:27:4c:68:2a:9f:a9:9a:f0:8e:f4:bb:99:
c6:89:70:99:aa:c8:0e:43:58:9c:55:b2:51:81:f0:
d0:e2:49:93:ac:db:a0:7d:f7:e9:cc:97:7f:9a:63:
0a:8d:8e:a9:97:91:07:88:81:df:fd:b5:11:67:5e:
e7:15:3f:19:1a:a4:e0:57:28:ed:b4:be:30:67:63:
45:49:b3:02:90:e1:17:ec:03:fd:6b:8a:a1:4d:cf:
7e:97:40:3c:0f:d8:f2:16:9b:07:c3:db:19:a1:cd:
fd:2c:dd:ca:c0:33:71:8a:c4:3f:a3:82:4e:c9:30:
bd:69:c0:64:a4:6d:50:60:b9:ca:37:0c:d9:d9:74:
bd:c0:33:02:9c:92:48:15:f3:31:b6:ac:76:b5:e2:
96:a2:57:b8:31:48:b1:e3:6c:75:25:1e:08:d9:6b:
9f:24:11:04:97:ae:55:25:82:a8:9a:ed:11:4e:9a:
a7:10:b6:e7:5e:96:75:02:0f:ac:e4:9e:f9:57:34:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:95:86:D5:3D:A7:58:25:EA:8E:BB:92:F5:5F:BC:B9:33:34:F5
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:f3:27:7a:38:07:49:c0:04:81:bb:dc:6e:39:a6:7b:34:
c9:4e:49:00:0d:72:df:6f:10:4d:c0:33:55:0b:57:30:9a:ba:
22:d7:6e:73:72:c9:1a:65:9e:44:05:43:fa:ec:c5:a2:02:91:
08:fb:3f:54:70:32:08:a0:c1:aa:03:a4:06:c0:0f:0e:bf:b9:
a9:12:16:ae:c3:6d:e1:70:b9:bd:69:0d:56:e1:76:cb:99:68:
a0:b7:a5:08:de:97:d3:63:3d:dd:8b:51:71:e0:7a:e8:a6:07:
5f:28:ab:12:f7:1d:eb:5b:b3:67:1e:66:29:49:54:26:35:39:
d9:86:d6:e4:da:42:3d:41:65:4b:06:4c:a8:ec:bd:e7:35:b1:
e5:ca:f2:8d:aa:54:96:ef:c7:3c:f2:87:cc:e9:da:87:5a:e0:
19:0d:aa:0b:99:c1:45:94:1a:67:35:e3:ff:11:96:82:51:0c:
5e:a2:50:14:44:1e:64:4d:9d:e5:87:d6:ac:21:23:62:f1:9a:
fe:16:f8:9c:9a:36:65:82:5d:72:98:6c:15:58:b7:90:b6:a8:
ff:c8:0c:21:3a:a7:ca:6e:ba:b7:66:11:50:8a:f6:f2:a4:1b:
9b:ec:ee:cb:45:58:e4:f8:6d:3b:50:11:94:3c:eb:09:60:19:
38:2e:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:00 2026 by rpki-client