Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: tjNr7MqWKy56R3UMvHTFipBnaE7c6DBw2/Gq5q2c26Y=
Subject key identifier: 27:5F:0A:5B:C2:49:05:01:6F:64:86:33:C6:A8:F6:7E:0F:31:5C:80
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 019CABA1CEE623935160F4FDC637EE35A988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 070D
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: GbIDNexACT6qeC7lZUEG8YLLY+fDRKsE8UFadm7dnfo=)
2: qqoPemYi4_pyOzOVoO62_Uat0so.roa (hash: Sdr4R7TpF1P6pqqGJyLye0mNOG4fczQyXXubw1Zcqyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ce:e6:23:93:51:60:f4:fd:c6:37:ee:35:a9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=275f0a5bc24905016f648633c6a8f67e0f315c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:24:ea:05:bc:67:bf:aa:93:12:ca:5c:15:
8e:9b:69:b4:70:74:0b:31:d4:a8:91:df:8c:87:1b:
2e:09:aa:6b:1f:6a:28:b4:87:c1:9f:d2:84:f6:6b:
6b:fc:2b:5e:07:fa:ac:af:1a:f5:cf:d3:32:8a:08:
72:5d:9d:11:56:81:a9:f1:23:14:11:0e:23:39:07:
6a:fd:c1:23:e5:aa:48:f2:01:f9:af:c7:56:55:09:
92:e7:4a:a9:8a:7d:4d:1a:c6:7f:30:d7:e8:09:a3:
50:10:27:8a:35:38:23:6a:76:bc:f1:cf:51:4b:40:
56:b4:d4:3e:14:1f:b5:35:07:9f:87:43:57:16:3d:
9d:95:47:e7:42:02:4f:b8:b5:ab:fa:23:a3:3f:78:
b2:fc:97:38:bb:aa:ec:26:70:94:a1:53:2c:e7:a8:
e0:50:3e:ee:65:a9:6d:6d:10:1a:a4:2b:64:b5:16:
90:83:bf:38:d2:d4:cf:4d:f8:20:c5:c1:9f:5a:21:
5b:21:b4:b5:cb:7f:98:c4:5e:60:53:54:36:9a:d9:
1f:cb:66:45:a3:d4:5b:f1:93:af:96:1a:23:a9:d7:
7c:b8:63:93:d7:60:85:c5:55:d2:6f:fb:af:3b:59:
d8:4a:e1:f5:4a:68:8b:09:38:6b:64:f3:2b:7c:47:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:0A:5B:C2:49:05:01:6F:64:86:33:C6:A8:F6:7E:0F:31:5C:80
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:f0:a5:b7:78:3f:61:4d:a6:22:c9:7d:48:cf:18:22:5a:
a3:a1:f7:1d:32:4b:16:72:c0:c4:3b:db:56:77:46:97:f3:a9:
e1:ab:c5:ed:02:2c:81:06:56:b4:a9:2d:02:ba:57:6a:e3:8d:
6d:86:9a:64:31:07:32:ad:28:19:6c:25:e1:97:f2:a2:bc:45:
9b:ba:06:7a:94:b7:ce:13:b3:f9:3e:2c:06:b7:38:5f:8a:2f:
b6:86:a6:84:bc:b2:be:ae:87:ae:ab:4a:0e:6e:fa:89:e2:5e:
e7:d0:c0:d8:04:ed:6a:a3:67:b3:8d:55:73:8f:f3:01:1b:69:
52:29:72:17:19:f0:94:16:a6:63:0d:88:ff:0b:4a:f6:c3:1c:
36:cb:f0:3f:9c:e3:58:dd:4e:03:bc:08:55:2e:15:ab:bd:ae:
fb:63:c2:d1:dc:1e:1b:0e:d0:6e:ac:57:06:7a:c7:80:f8:34:
fa:ab:7d:ef:48:3a:ba:6b:1f:2d:d0:92:c1:ab:86:56:6e:c8:
9a:3d:45:59:aa:ab:38:18:f4:b0:21:da:56:19:b8:3e:73:c0:
5f:d6:65:24:25:10:f5:0f:b1:54:42:10:db:f0:06:e5:a8:13:
fc:6d:ac:a8:13:df:12:1e:b5:ca:40:b1:5d:40:94:42:ba:1f:
9b:1d:ef:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroc7mI5NRYPT9xjfuNamIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjYwMzAxMjMwMDM0WhcNMjYwMzAyMjMwMDM0WjAzMTEwLwYDVQQD
EygyNzVmMGE1YmMyNDkwNTAxNmY2NDg2MzNjNmE4ZjY3ZTBmMzE1YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Ak6gW8Z7+qkxLKXBWOm2m0cHQL
MdSokd+MhxsuCaprH2ootIfBn9KE9mtr/CteB/qsrxr1z9MyighyXZ0RVoGp8SMU
EQ4jOQdq/cEj5apI8gH5r8dWVQmS50qpin1NGsZ/MNfoCaNQECeKNTgjana88c9R
S0BWtNQ+FB+1NQefh0NXFj2dlUfnQgJPuLWr+iOjP3iy/Jc4u6rsJnCUoVMs56jg
UD7uZaltbRAapCtktRaQg7840tTPTfggxcGfWiFbIbS1y3+YxF5gU1Q2mtkfy2ZF
o9Rb8ZOvlhojqdd8uGOT12CFxVXSb/uvO1nYSuH1SmiLCThrZPMrfEcYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdfClvCSQUBb2SGM8ao9n4PMVyAMB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxDwpbd4
P2FNpiLJfUjPGCJao6H3HTJLFnLAxDvbVndGl/Op4avF7QIsgQZWtKktArpXauON
bYaaZDEHMq0oGWwl4ZfyorxFm7oGepS3zhOz+T4sBrc4X4ovtoamhLyyvq6HrqtK
Dm76ieJe59DA2ATtaqNns41Vc4/zARtpUilyFxnwlBamYw2I/wtK9sMcNsvwP5zj
WN1OA7wIVS4Vq72u+2PC0dweGw7QbqxXBnrHgPg0+qt970g6umsfLdCSwauGVm7I
mj1FWaqrOBj0sCHaVhm4PnPAX9ZlJCUQ9Q+xVEIQ2/AG5agT/G2sqBPfEh61ykCx
XUCUQrofmx3vDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:51 2026 by rpki-client