
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: c+zMJuHqYYMeBoneL8A0HxzJ5x4KvEkaM5Tw/LY3+ak=
Subject key identifier: 6C:82:89:17:3C:7B:D1:48:73:6D:C7:E8:C2:5E:06:27:22:38:22:DA
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01A0BD9DCA2CF9F6FA12A6AC93CD4FA3F893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 07:00:29 +0000
Manifest this update: Sun 20 Sep 2026 07:00:29 +0000
Manifest next update: Mon 21 Sep 2026 07:00:29 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: 9NcUVpX6YMOYgS6VNqqaDwNXtP2Prh1OYYvJ7enK4RU=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:ca:2c:f9:f6:fa:12:a6:ac:93:cd:4f:a3:f8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Sep 20 07:00:29 2026 GMT
Not After : Sep 21 07:00:29 2026 GMT
Subject: CN=6c8289173c7bd148736dc7e8c25e0627223822da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:96:14:c4:e5:dd:b8:86:ba:03:f4:85:fe:
57:c6:f2:6d:7e:1d:08:70:07:c6:84:e8:6c:97:0c:
38:92:43:dd:e8:4f:d7:2a:0e:7c:ab:8f:8f:9a:0f:
11:08:79:b4:9b:1b:c5:01:9f:ea:08:1f:d6:4c:1b:
d3:13:8f:d8:5f:41:16:c7:2a:0e:7f:6e:35:bc:92:
9d:14:69:19:8a:17:12:32:f8:cc:3c:9d:53:a9:84:
7f:cc:c8:5f:c2:31:64:e4:9c:d2:bd:95:2d:e0:27:
f4:f3:89:a9:88:dc:d2:18:ab:87:41:e6:17:c5:9e:
f7:61:d3:95:94:0e:3f:13:47:30:78:d0:66:aa:c4:
d9:b4:60:04:c4:5a:7a:52:dd:6b:86:68:0c:5f:09:
91:c0:94:5d:90:50:bf:79:88:a5:c9:6c:47:ba:9e:
7d:6d:99:43:66:43:90:3c:34:fa:5b:19:7b:be:fc:
ed:48:e7:a1:b4:24:67:9e:db:4e:af:0c:97:a5:e9:
f7:76:ba:20:8b:33:25:a4:42:a2:a3:f7:66:c6:b0:
cf:97:aa:b4:4c:e0:d8:ba:1d:9d:f2:5e:91:39:9e:
6a:48:ee:b7:3c:d5:87:52:5a:38:df:ae:b5:26:f1:
9c:e8:f9:68:19:fd:67:90:4e:b4:ee:f5:fa:bd:79:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:89:17:3C:7B:D1:48:73:6D:C7:E8:C2:5E:06:27:22:38:22:DA
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:46:25:2e:aa:3d:e6:57:f3:6b:a1:31:e1:88:4b:8d:de:3a:
6a:49:8d:aa:d1:15:be:e9:9a:f6:38:f7:4d:e6:39:d4:28:9d:
f6:7f:51:8a:a6:b8:3a:da:9a:00:35:07:45:f1:4d:27:0c:7f:
f7:3a:35:41:30:df:30:ef:4b:74:b0:ed:09:86:e1:89:3e:eb:
ad:78:35:86:f6:e5:50:90:ca:2c:38:43:d3:b0:35:a3:84:ca:
91:22:85:5d:ed:da:9e:e0:28:0f:63:8b:18:1b:f8:f0:d0:19:
1b:4f:d3:a6:38:61:f1:a5:ff:76:8d:5f:61:0c:3f:9f:87:d9:
67:fe:fd:b3:84:a4:37:d8:c9:29:91:dd:24:3e:44:26:d1:47:
e6:17:e8:0a:0d:c0:4a:e9:1b:1a:5e:49:04:aa:3d:14:f4:11:
dc:12:3c:6f:5e:ac:5c:77:4e:2d:28:a1:e1:8b:af:68:8d:89:
b8:77:a4:09:19:55:31:bf:10:3f:51:f2:02:22:68:04:3e:5c:
e6:8d:0d:ab:a0:c2:61:70:82:43:99:1b:04:50:87:19:c1:57:
24:29:91:8e:a5:e3:6b:25:28:72:31:c7:d9:fc:cf:40:56:7e:
0f:1b:5f:83:40:38:cb:f0:52:f4:53:f7:b9:ce:1b:61:19:a0:
f2:cd:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:49 2026 by rpki-client