Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: TSsJ/lMZTLLTYtzMc7wi/qeqmKCYQ7BQnhsLQCYhsEQ=
Subject key identifier: FB:6B:45:B8:0E:90:1E:FF:C0:78:26:45:21:A1:9A:6B:8D:DF:13:69
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019FAB633F552EE852E1837A7AC89DD41BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:00:35 +0000
Manifest this update: Wed 29 Jul 2026 01:00:35 +0000
Manifest next update: Thu 30 Jul 2026 01:00:35 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: nhQ+du6Wng/P3/enobUO3ssiXFeNoZIIX0Ag+QoPszc=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:3f:55:2e:e8:52:e1:83:7a:7a:c8:9d:d4:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jul 29 01:00:35 2026 GMT
Not After : Jul 30 01:00:35 2026 GMT
Subject: CN=fb6b45b80e901effc078264521a19a6b8ddf1369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:c1:7c:51:76:cc:7d:ac:d2:47:22:3b:56:
1d:e5:b4:a6:53:d7:d1:3d:8b:d2:e7:b8:47:ed:35:
35:66:06:50:f2:5a:da:2d:2a:45:b2:98:12:ab:57:
54:33:e4:fb:a8:a0:cc:40:89:43:8d:9f:e9:90:9a:
6e:4c:af:a1:7c:f4:63:83:3f:f8:a2:91:be:9a:96:
2d:7c:15:65:1f:dc:f7:b5:5e:40:7a:58:53:68:00:
b4:0d:da:e4:e2:74:39:15:8e:13:a4:c1:f0:51:5a:
42:19:f9:8a:69:dd:5f:42:7b:c7:95:2e:ae:1b:c9:
ca:62:e5:b7:c0:fb:d5:09:0a:a4:47:8e:81:a9:cc:
92:a1:35:08:c2:79:02:32:e3:d3:8e:47:3f:da:ff:
44:d7:40:af:ae:40:7c:69:48:7d:9c:53:6f:5e:1c:
12:90:b1:7d:60:b9:4f:6d:9f:ca:22:18:76:75:be:
f3:b1:bf:f5:e9:32:e1:c6:70:66:4f:1b:a4:49:f8:
f2:b8:87:ba:7d:68:61:66:09:9a:9b:22:f6:0e:59:
80:12:75:5e:f7:db:1b:35:a9:90:3a:3c:6e:cd:ae:
c1:41:c3:11:fd:4d:3a:a3:f1:b8:7e:c5:f2:82:d8:
11:31:7f:ed:24:9d:54:dd:78:eb:87:11:f3:0a:df:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:45:B8:0E:90:1E:FF:C0:78:26:45:21:A1:9A:6B:8D:DF:13:69
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:42:4b:26:4d:24:1c:1a:9d:79:07:b7:6b:79:d4:e2:2d:
5d:b2:8a:b2:3b:8d:fe:69:72:4d:66:3d:bb:f2:f7:ac:11:e3:
5f:e4:ae:3a:70:1a:62:2f:c2:32:73:ed:c4:4d:35:85:aa:99:
01:82:2c:52:87:39:fa:2b:9b:9b:c3:e4:37:8f:9a:16:96:73:
61:bb:f7:bf:86:56:c8:de:0f:44:59:66:b0:aa:f6:df:3b:28:
e9:8b:9d:f0:e4:d1:9f:19:ae:74:0c:d4:f8:ca:d5:50:29:f1:
f3:b8:4b:ba:9c:88:b4:f7:d5:b7:8d:bb:e3:f2:8f:85:fe:5d:
f7:89:ed:15:c7:15:5b:5f:43:a4:f1:30:24:ee:7a:47:4c:b1:
fe:30:b3:09:24:d7:a6:91:3d:df:b4:59:98:0a:0a:ea:5c:42:
5d:ed:33:ad:2b:14:12:73:7c:ce:cc:c6:12:be:34:15:b1:e8:
26:cb:6e:51:0b:e0:75:43:10:df:e1:a4:75:ff:55:24:63:aa:
c6:a7:81:db:e3:76:a4:27:73:fd:92:f4:f8:b3:e0:18:27:60:
1a:1c:31:b6:34:56:a2:aa:c0:e3:58:76:35:d9:00:98:6c:dc:
0b:68:04:3b:06:06:89:2a:84:ac:a9:0f:1f:2a:b9:d9:4d:c4:
e3:fb:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:49 2026 by rpki-client