Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
File: MzXvvdFv37A3meob4nnPMzTRuLE.mft (raw, json)
Hash identifier: DFwzgncK4m2Im/v97odRpmnp8zi5rUybSWhlBmbsgF4=
Subject key identifier: 10:93:4E:81:88:30:AE:98:03:F9:CB:2B:82:B0:41:B0:62:96:7E:C8
Authority key identifier: 33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
Certificate issuer: /CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Certificate serial: 01A0CD7EEEC6DEA788C16B06AF67321FB32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
Manifest number: 82
Signing time: Wed 23 Sep 2026 09:00:42 +0000
Manifest this update: Wed 23 Sep 2026 09:00:42 +0000
Manifest next update: Thu 24 Sep 2026 09:00:42 +0000
Files and hashes: 1: MzXvvdFv37A3meob4nnPMzTRuLE.crl (hash: G92qXDO0koUaghCO8VLnJW+6YVZRo2Hv6nxz3QeeghA=)
2: g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa (hash: TOrWaXuO5cnSwfcfdr4weZtfskD6uoAqK0dRobZ2NQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:ee:c6:de:a7:88:c1:6b:06:af:67:32:1f:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Validity
Not Before: Sep 23 09:00:42 2026 GMT
Not After : Sep 24 09:00:42 2026 GMT
Subject: CN=10934e818830ae9803f9cb2b82b041b062967ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:dc:b2:5c:e6:fe:cb:f0:0d:66:f5:f3:4f:
91:a5:6c:35:fc:8d:85:dd:79:19:06:01:5b:3a:da:
f8:e2:b9:19:74:0a:e7:94:c6:28:0e:89:cb:53:33:
af:0c:3d:5d:d7:53:6f:3a:ac:9c:47:d9:12:b6:4d:
61:3b:ed:a4:58:61:d7:37:68:2a:a8:d5:f8:63:28:
82:75:66:21:d6:f3:ea:f5:2f:fb:a2:ce:b9:62:8c:
7f:6c:58:27:a9:8a:4c:cc:38:cc:34:43:ad:61:f1:
96:9d:ca:db:af:90:be:18:ef:84:f1:c2:49:59:de:
01:a6:59:55:f4:e0:17:b7:62:b3:ba:c5:19:c4:77:
c3:08:cc:df:3e:f2:1d:50:53:94:8f:bf:b7:bf:ac:
2a:40:7b:c3:e7:f5:fd:58:62:3c:ff:6d:cb:8b:a7:
3a:a1:64:34:be:27:c4:5e:69:b7:ef:33:4a:c7:f3:
07:a2:9d:ed:be:d5:c1:42:30:0d:b2:52:87:22:7e:
23:47:41:7b:a8:02:ea:90:71:8f:1b:87:8d:94:b6:
34:f3:6f:25:cd:fc:e6:ea:5e:c2:67:8a:5d:50:e9:
aa:2e:67:ad:07:77:b7:09:d3:1f:b1:c7:16:bf:c4:
91:4c:1c:3c:5a:af:4c:82:cb:2e:b4:48:17:b8:a3:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:4E:81:88:30:AE:98:03:F9:CB:2B:82:B0:41:B0:62:96:7E:C8
X509v3 Authority Key Identifier:
keyid:33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:83:2c:b3:9b:34:9d:3d:49:e3:3f:a7:4d:d2:d9:e9:df:
6c:48:f8:cd:f0:7d:8f:b4:49:7f:55:ec:ff:ed:f1:cc:fa:16:
da:11:d0:1c:c6:43:0e:c9:0c:22:dd:61:0f:7c:51:65:e1:92:
36:1d:76:7c:38:34:c3:16:fb:c8:5b:52:32:52:05:d7:38:65:
43:5c:53:fa:4a:15:9b:f8:6b:f3:d1:b9:35:7c:0f:b8:04:0d:
77:f0:c7:31:d8:bf:3f:7f:ca:df:a8:db:4c:48:e8:5a:c4:39:
d2:88:7f:a2:4a:15:60:13:9b:65:73:ab:d9:f6:30:4b:fa:61:
e0:a0:ea:c4:9f:2e:5f:14:46:b7:00:f6:3d:f5:3b:ea:48:ea:
b7:00:53:0c:70:57:01:ab:d4:4f:a1:34:ed:fc:b9:fe:b1:d9:
18:51:7f:08:a9:49:a3:5d:b2:f0:61:a8:98:b7:87:1c:9f:77:
a1:47:a5:f4:53:e4:6d:a6:01:19:e2:f3:bc:68:d9:88:46:fc:
22:58:f9:f2:89:6b:41:c1:8a:bb:80:0e:4a:77:86:51:3f:ca:
c7:e7:fa:0c:ec:2f:bd:49:cb:97:fb:aa:36:54:19:15:f6:06:
b0:34:c5:d3:1f:c9:e8:7f:aa:46:e9:d8:0b:e5:58:7f:6b:6b:
84:fa:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:17:09 2026 by rpki-client