Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: gGceO9eNUJioz134mmWS8Wgb9y93lyeF7TkJBAFVDe4=
Subject key identifier: D7:45:52:B4:53:2C:25:71:F9:98:26:D0:EB:D5:22:9C:2B:8C:C7:AB
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019CAAC71421377EF2E8E80C55344DD38703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: bJa30PDttajrIjE83JjSGlqIfvuciSW0G8OfmQ6AyNY=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:14:21:37:7e:f2:e8:e8:0c:55:34:4d:d3:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=d74552b4532c2571f99826d0ebd5229c2b8cc7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:14:5c:0b:1a:1a:89:5a:18:2c:e9:2b:dd:
99:47:26:1b:74:47:ed:55:aa:7c:8d:f0:ee:56:cc:
e4:d0:31:8f:88:db:41:5e:79:f9:2c:68:84:89:ed:
d8:7f:96:6b:c4:69:0f:08:a4:70:65:9c:b5:48:f3:
e3:1b:cb:ec:20:41:cb:1e:3a:93:69:64:b0:dc:c9:
ae:41:28:29:fe:b5:c0:f1:99:15:75:ad:53:dc:bf:
eb:c8:fa:a8:02:e4:11:50:e2:28:a4:f3:9d:7f:c6:
ea:15:40:6c:4f:e2:0f:f6:a8:5a:ed:d6:5b:6f:ec:
6c:03:03:fd:c5:87:b1:e6:95:a3:75:f7:a1:64:13:
0d:e2:53:5a:70:cf:e2:6f:cc:3d:d2:fc:ab:25:f3:
53:38:6e:65:91:ba:e4:8f:3e:ef:4b:18:aa:8a:0e:
a3:b7:3b:7e:a2:fc:f0:80:e0:c9:a3:27:be:10:b3:
df:bb:e3:2a:84:20:ff:74:8f:b1:40:ee:9a:4f:1e:
54:7a:d0:9b:5a:13:82:ce:23:a9:56:01:92:aa:0b:
06:a0:ba:18:5c:b8:9b:60:24:e2:45:cf:5b:57:fd:
4a:c2:22:1d:b6:98:9f:87:94:b9:6c:0d:10:97:f8:
9f:63:25:3e:db:a5:f0:98:ec:dc:86:87:5f:5a:7f:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:45:52:B4:53:2C:25:71:F9:98:26:D0:EB:D5:22:9C:2B:8C:C7:AB
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e3:11:ae:1c:f8:71:8b:77:dd:5b:46:50:1a:1e:49:c4:88:
4c:4f:9f:96:87:ea:96:35:37:c8:97:21:52:a0:dc:6b:f8:28:
c7:55:6d:fd:67:e3:1c:c7:a6:4d:86:c1:b3:0f:8a:14:43:1b:
69:8e:64:b3:dd:aa:c2:1e:e6:bd:72:57:99:cd:5f:50:26:98:
47:60:86:99:77:5e:31:21:27:72:19:07:24:b9:92:17:e6:12:
9e:5e:af:67:fa:0d:36:53:f6:3f:20:fd:0a:99:2a:81:77:6f:
6f:36:56:ec:7d:07:d5:ce:d6:dd:bd:24:6c:c1:56:65:12:a9:
33:63:0a:0c:03:54:b0:5b:c4:5c:4c:c0:c4:67:8a:b0:6f:b5:
6a:d4:6b:fb:a9:66:cf:4b:b5:00:fd:37:87:97:f1:ae:c5:43:
b3:80:39:7d:b0:20:eb:f9:b8:fa:3b:25:47:9d:f7:9c:85:4c:
85:ab:2b:c5:f8:b3:18:28:d3:82:b5:94:61:5b:83:57:73:b8:
2c:e5:1b:f0:c7:48:4d:d5:4e:4a:ba:04:07:c8:89:80:bc:34:
4a:d1:2f:0c:fb:84:08:b3:ba:a7:52:b3:1f:33:cf:71:18:cd:
fe:b0:7c:00:b9:62:0b:a1:df:4c:0d:bf:7f:f9:42:6f:57:39:
5f:9f:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:15 2026 by rpki-client