Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: u8/yGR6NOz9z/IBq2RywJe0aOkA5xvd+xWRP5e06ByE=
Subject key identifier: B0:AC:17:0D:74:78:3F:53:D4:AA:39:DD:C0:3B:89:3B:58:B1:7F:B2
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019D9BF5B27CC6B8D6EF3F99F197E0364EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0C2A
Signing time: Fri 17 Apr 2026 15:01:03 +0000
Manifest this update: Fri 17 Apr 2026 15:01:03 +0000
Manifest next update: Sat 18 Apr 2026 15:01:03 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: 1v1OM5p3mh/pidTkdrZeHGZWfKwIkEu/MQcREuTLb+Y=)
2: lWJEJ38LG2xnxFB2fT73IqXyIEA.roa (hash: KHwos3EmOZKUtMcSQbvFbuttFTsD5TBtKXWrJtoYgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:b2:7c:c6:b8:d6:ef:3f:99:f1:97:e0:36:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Apr 17 15:01:03 2026 GMT
Not After : Apr 18 15:01:03 2026 GMT
Subject: CN=b0ac170d74783f53d4aa39ddc03b893b58b17fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:ef:9b:02:11:25:9f:db:97:79:5d:cb:84:
03:6d:7e:ba:86:a9:64:cb:44:aa:28:ea:b4:92:7b:
76:ed:ca:95:68:5c:b6:e6:0d:70:01:35:68:49:de:
87:bc:4f:43:6a:49:b8:25:55:1d:fa:34:32:db:c6:
d6:c3:d2:70:0e:5c:19:8b:78:86:40:d3:65:bc:42:
ef:7f:75:40:33:86:bb:e0:58:28:2d:ea:64:12:fe:
a1:4a:d8:39:19:fb:ef:b4:4d:50:76:45:d2:f4:2c:
34:38:7a:90:49:80:15:b3:ed:89:1e:76:5a:be:72:
4a:07:ed:1c:1d:03:b0:0a:a2:f9:1c:2c:b4:81:c8:
f6:d0:e1:5e:e3:ce:63:03:83:d0:a2:b4:68:cb:ee:
38:4b:78:4c:b1:c4:b8:52:04:ee:28:55:b7:a1:b3:
10:64:68:67:b2:36:41:bc:3b:ca:c0:65:f1:17:01:
fe:02:e9:3e:b6:cd:f2:f7:71:94:72:85:52:db:d3:
1e:71:e0:4d:29:e8:14:93:bf:09:a3:28:5e:21:df:
3a:8a:22:bd:f8:e4:05:57:21:22:ff:35:9a:ee:1c:
15:9e:a7:56:73:ca:f7:57:83:55:cd:da:93:43:04:
23:71:12:69:99:0d:28:c9:52:ff:91:39:47:fe:1d:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:17:0D:74:78:3F:53:D4:AA:39:DD:C0:3B:89:3B:58:B1:7F:B2
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:80:84:e7:6c:da:4c:f5:5a:93:85:77:cb:bf:31:b4:28:
cd:b7:91:e7:67:84:58:4a:f5:55:e4:71:b6:27:b0:65:cc:54:
d2:bb:b9:25:6d:a8:84:4c:3f:9c:47:50:ba:3e:c1:99:1c:7c:
a8:91:03:e3:6d:bc:ab:c5:60:d3:1f:f1:3f:10:6b:c3:2b:91:
79:ea:8f:d5:4d:3e:50:ba:23:88:dc:04:7f:f5:e2:cd:5b:71:
e0:55:45:06:f2:fa:f7:a2:2d:2a:59:41:ac:40:7b:f6:cf:fa:
d0:81:4f:25:4e:a5:8c:34:28:ba:e5:6d:da:c0:4d:ed:22:5e:
03:f7:d2:d4:ef:de:2c:c7:26:38:78:4f:a0:43:1b:f4:da:46:
c2:f7:b6:48:81:15:17:06:29:6c:24:4e:74:3f:04:d9:19:a4:
0b:a8:d3:de:bc:38:8c:0d:76:49:1f:a6:58:5b:1f:1f:ce:4d:
7f:d1:f1:3b:53:c9:aa:97:80:0d:e2:07:77:5c:d4:93:78:3b:
bb:0a:bd:1d:e0:ed:fe:ab:ca:1d:82:cc:ae:83:02:3e:32:08:
94:72:93:24:7e:94:b9:0d:fc:2d:da:88:64:83:c4:6a:ef:e3:
2e:d6:07:74:b9:3d:05:cb:6f:19:d8:21:40:d0:d6:0a:d8:02:
25:32:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:48 2026 by rpki-client