Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: ZxfHExL3oQtjNTM4PjJz+67ql3jr+VxTEFyfgudGgQw=
Subject key identifier: 86:C0:96:CB:55:CD:8D:5C:A5:A0:3C:1B:7D:11:84:29:4A:F7:06:C1
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019CAB6BD72FC028293185BD501AAC092C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 046A
Signing time: Sun 01 Mar 2026 22:01:37 +0000
Manifest this update: Sun 01 Mar 2026 22:01:37 +0000
Manifest next update: Mon 02 Mar 2026 22:01:37 +0000
Files and hashes: 1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: uNuuuszLBpfziPUVTnkDvCxT53ee7DLB2x0b5exFMv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d7:2f:c0:28:29:31:85:bd:50:1a:ac:09:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Mar 1 22:01:37 2026 GMT
Not After : Mar 2 22:01:37 2026 GMT
Subject: CN=86c096cb55cd8d5ca5a03c1b7d1184294af706c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:5d:bb:f8:cc:76:05:b7:dd:f0:e3:8d:8d:
22:b9:23:93:f8:c6:f8:e8:b8:2b:51:f3:71:cd:01:
7d:82:e8:68:11:fd:40:4f:31:9e:92:91:35:62:51:
a2:63:d9:22:9f:9d:62:3f:76:5d:f3:bd:44:ff:7d:
18:6b:bf:95:99:99:93:7a:1b:21:cd:57:45:d4:7c:
f2:48:3f:32:bb:a2:52:a8:bc:bd:26:b6:1d:72:13:
c2:83:73:05:0f:af:00:d4:e8:c5:32:31:c5:dc:15:
54:ba:7d:aa:28:49:73:da:09:87:c8:04:28:ff:93:
26:08:02:00:61:8c:db:11:44:d0:f0:a2:d2:9a:e1:
ec:c1:b4:90:5a:6b:0f:b5:87:8d:69:3d:74:6b:6b:
92:7a:89:61:1f:5b:93:e2:8c:fe:0b:d5:1d:2f:ec:
ff:17:39:5a:91:60:b0:73:7a:62:de:bb:16:dd:d1:
af:86:89:aa:62:57:74:1d:f6:a6:cc:5c:5e:0e:26:
68:98:ed:32:7f:88:9d:be:c4:ec:36:56:b9:35:e8:
95:05:5b:03:a5:20:b0:ec:ba:71:49:e9:36:92:30:
af:2b:c7:6c:9f:55:fa:c7:5e:a3:ba:ac:dd:8c:48:
20:dd:3e:34:9e:12:be:80:45:52:4c:58:c5:b6:9d:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:96:CB:55:CD:8D:5C:A5:A0:3C:1B:7D:11:84:29:4A:F7:06:C1
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9d:c4:83:f7:31:d2:4e:f8:77:55:b4:6f:b2:3d:ab:0d:85:
32:18:a2:94:81:10:39:ed:5e:75:ae:ef:c0:04:0a:cb:54:0f:
4b:97:ed:01:73:15:fb:c7:1c:7a:92:5b:ae:0e:c8:da:56:1a:
27:39:c0:d6:9d:30:56:fd:51:ff:f9:1f:3d:6a:58:ef:a9:de:
43:d0:47:07:a3:96:71:17:49:0c:94:ea:73:74:12:6c:a2:d8:
fc:f5:75:6d:0f:19:b9:7f:34:26:8e:66:a9:d1:6f:73:ca:ed:
6e:92:f7:65:30:21:d9:cb:b8:ee:0e:ca:29:e7:66:2c:51:0d:
8d:2a:4a:61:bc:06:af:b0:1c:88:07:d0:3e:db:50:fd:8d:01:
26:53:b5:74:3f:1c:72:4a:76:40:f3:f8:75:16:53:4e:65:ae:
48:3f:0e:39:74:57:40:3f:e0:aa:3f:49:13:7f:e6:e5:69:bc:
17:2c:a3:dc:bb:43:6a:f4:7c:5f:f5:e0:f7:57:a0:a5:d1:2c:
e2:89:8d:31:28:18:ee:74:fd:89:95:d6:ce:8c:d0:fd:ac:77:
6f:bd:a1:58:06:41:fd:e5:a4:69:e1:a3:38:23:f0:22:de:cc:
a0:5f:45:bf:25:8b:61:1f:07:0d:33:1e:ec:45:5f:86:16:bc:
49:a5:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:23 2026 by rpki-client