Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier: hS4XAMc9uzEBb8KfNHbGZg6o56Yy+epEyVEFSfMP3GQ=
Subject key identifier: CD:C6:FC:38:6D:9A:13:41:68:52:BA:7E:78:17:13:39:05:FC:91:1E
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial: 019FAB9A48860931125CA4FA0D72481DF20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number: 0267
Signing time: Wed 29 Jul 2026 02:00:42 +0000
Manifest this update: Wed 29 Jul 2026 02:00:42 +0000
Manifest next update: Thu 30 Jul 2026 02:00:42 +0000
Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: 2GML8mQQbko6iofZfvvohL6h3ZGJ2Msf41R9IdSUmAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:48:86:09:31:12:5c:a4:fa:0d:72:48:1d:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Validity
Not Before: Jul 29 02:00:42 2026 GMT
Not After : Jul 30 02:00:42 2026 GMT
Subject: CN=cdc6fc386d9a13416852ba7e7817133905fc911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:1b:d8:66:cd:e7:92:08:bc:84:5d:d6:7b:
b8:bf:e9:2d:c2:85:4c:ed:4c:5c:5a:1b:2d:7d:30:
37:53:11:7c:7f:f9:03:30:83:ca:48:29:8c:57:e0:
40:6e:a6:e3:97:4d:bd:fa:a8:8c:49:a5:65:e2:63:
1e:ba:a4:d7:a0:5f:77:30:93:96:de:f5:d3:e1:13:
a1:ed:b8:2f:b4:48:2b:a3:5d:ec:96:38:dc:74:ba:
47:71:7a:9c:e0:65:ef:ac:ec:84:ab:80:94:ba:55:
02:ed:01:d4:34:79:39:6b:b4:d1:07:2c:0d:63:66:
ac:56:f6:19:40:f1:35:b1:91:86:a6:6e:22:9a:2b:
94:53:af:b5:a5:d4:a9:a3:0a:d7:b3:af:df:82:7e:
e1:3b:98:35:80:3b:ed:1b:d1:1d:71:e6:30:02:cf:
5f:c0:86:1c:99:07:72:28:86:14:6c:e1:84:7a:04:
c8:10:33:55:e3:0b:a6:eb:49:c5:81:82:3d:c5:9f:
d9:78:12:4a:b0:77:5e:1e:e2:2e:69:db:01:a5:a1:
a1:d3:7e:2c:e0:78:2d:b3:9e:66:05:b3:23:81:49:
59:c1:ec:ad:d5:8d:94:58:c0:87:2a:e3:b3:bd:b7:
d8:cb:3f:50:8e:0e:4e:b4:bd:3d:60:6e:e9:8f:a7:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:FC:38:6D:9A:13:41:68:52:BA:7E:78:17:13:39:05:FC:91:1E
X509v3 Authority Key Identifier:
keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:87:76:12:49:a6:87:fe:96:32:e7:45:3c:d2:91:61:7a:e9:
df:1d:1c:70:11:42:77:0b:46:a6:b9:b5:32:7d:26:ca:e7:84:
b7:50:f2:6f:94:7a:e6:cf:46:be:ab:db:bc:55:52:86:bb:03:
b7:55:dd:b1:3b:42:23:2f:fb:8e:b5:b5:31:8c:8f:f2:8c:7e:
81:ae:85:7e:18:2a:58:a8:5c:e4:9a:8e:20:93:f3:a9:45:6d:
31:17:a0:44:ef:78:40:ee:c3:a0:d3:0b:16:fd:eb:c0:be:41:
c8:7d:d8:44:3b:59:b0:a7:a0:bc:7d:cd:e6:de:86:7e:a9:63:
6b:2a:8d:93:11:de:b8:53:12:77:99:45:fe:3d:d9:18:2b:12:
a7:bf:cc:99:5e:f0:f2:3e:c6:a0:8e:ce:8c:7b:f2:22:e8:94:
53:3a:30:a6:3a:3c:25:46:30:41:9e:87:81:a1:d4:5a:b8:ee:
01:83:66:0c:b5:2a:05:b9:d7:31:66:1c:5b:76:1e:22:82:6c:
ae:0e:cb:9e:8c:0f:0f:b5:d5:bd:5a:20:a3:e6:bb:33:cf:df:
e2:47:2b:46:f4:3b:19:dd:14:6c:fc:d6:e4:a6:61:05:d6:37:
e6:89:7e:a7:78:e6:43:11:a0:8c:d5:7e:e7:d9:94:06:2a:28:
f3:7d:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:33 2026 by rpki-client