Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: lb29yHNP8KplbuHCvAGxxb+TMEkmJTs1o/KVobD4560=
Subject key identifier: 0B:48:85:CE:E5:17:6C:B8:36:F7:8E:D5:C3:17:A2:B7:20:A3:30:96
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019CAC7DDDAC3C8F36B7D40D1287B80E5043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0BAE
Signing time: Mon 02 Mar 2026 03:00:55 +0000
Manifest this update: Mon 02 Mar 2026 03:00:55 +0000
Manifest next update: Tue 03 Mar 2026 03:00:55 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: 2JywGyD6NxbZtsAXBU8YIPf4U5lmsm0rUqxbO6vBDQw=)
2: lWJEJ38LG2xnxFB2fT73IqXyIEA.roa (hash: KHwos3EmOZKUtMcSQbvFbuttFTsD5TBtKXWrJtoYgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:dd:ac:3c:8f:36:b7:d4:0d:12:87:b8:0e:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Mar 2 03:00:55 2026 GMT
Not After : Mar 3 03:00:55 2026 GMT
Subject: CN=0b4885cee5176cb836f78ed5c317a2b720a33096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:ce:46:96:16:0f:3d:88:f4:16:9a:61:fe:
5b:e2:16:ff:a8:f1:7b:26:4b:bc:16:e3:91:69:e8:
e1:d2:fd:3c:f0:b1:9b:d2:6d:75:67:82:eb:1e:cf:
6f:38:bf:f2:37:5f:54:11:c0:62:87:aa:b2:2c:d9:
dd:c0:d7:e5:03:a4:f6:88:09:ee:3a:8f:23:09:bb:
a4:eb:f1:bc:89:ee:a3:ad:10:02:88:88:80:89:34:
80:65:b5:ae:45:66:ad:5a:b0:31:7a:dd:fe:e3:50:
26:cd:c4:9e:f1:32:6c:b7:50:99:de:d0:1e:0f:00:
01:df:72:99:17:f0:41:33:0d:e5:de:ea:69:30:df:
1a:f5:bc:d1:1f:9d:b6:19:dc:eb:ae:f4:06:e1:24:
43:94:1d:23:00:5d:8c:33:a5:4f:c0:21:d0:68:16:
37:14:f4:27:80:74:58:32:a1:3b:3c:c4:8c:90:c6:
77:92:8f:29:ca:18:ca:7f:f3:95:a2:9b:90:9d:2e:
64:d6:fb:97:40:10:24:cd:9d:6c:d5:dd:b0:9a:c7:
88:5c:98:4f:a2:3e:14:8e:ba:e6:64:39:92:ab:bb:
f3:f7:b6:8d:20:d7:7a:4f:4c:bd:c2:d3:90:a3:df:
43:04:c7:40:51:a9:95:52:00:c1:39:4c:65:08:cb:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:85:CE:E5:17:6C:B8:36:F7:8E:D5:C3:17:A2:B7:20:A3:30:96
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:77:c8:d0:69:bd:42:2a:d2:2d:b9:90:33:ba:80:45:da:fa:
8d:b0:41:9d:7f:87:10:ba:80:ce:00:46:c7:04:ee:bd:e0:71:
f3:7c:49:ae:e3:1c:7b:01:35:78:a0:df:a1:47:12:f1:62:d4:
60:d3:05:ec:9b:cf:ee:d4:13:da:72:2b:c1:b8:59:7c:10:3b:
33:96:7f:e1:f3:5c:ac:b6:f7:db:98:70:57:0e:e8:25:81:9f:
78:94:5d:f5:0c:b0:ed:2d:89:33:1e:93:d5:2d:a2:80:85:fd:
1d:12:06:24:c5:07:fe:70:ab:5e:47:e1:4c:87:49:b0:be:dc:
72:d8:2f:2e:ca:cd:3a:fc:5f:aa:b6:26:66:e5:88:a1:5e:fb:
66:ae:81:06:37:24:1b:bd:11:25:18:68:34:a8:d1:47:ea:68:
7a:30:3f:28:43:13:58:da:7d:f8:2c:10:e7:70:63:d9:d2:bf:
36:8b:f7:25:3e:41:24:b9:04:c8:fd:93:3f:98:f0:24:ea:ef:
00:c6:60:c3:44:5c:7d:e1:af:69:e7:7b:e8:2f:38:14:cd:25:
f7:09:f9:5a:ed:b3:cb:01:d7:c6:db:a0:11:c8:e2:58:9a:75:
39:ae:60:21:5c:60:19:86:5c:5a:81:66:db:20:7c:ce:cc:2a:
26:f4:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:02 2026 by rpki-client