Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: 4cPRYVX2Z5PbGj9ySXzBrsC+Z4Z3YcpNUYGmC6qGktM=
Subject key identifier: 7C:DE:4B:61:9D:95:DE:65:D3:12:25:DD:84:3C:86:31:9C:64:96:15
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019D992B1634BDB51C88802E5275E4B6BF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: 1OtrASZu5grzrY6i8A/TDICSTwXSYP7e7gYhGISd7pg=)
2: yWKjIr-KiDyKL-TFC_YWyumNPFY.roa (hash: tGpo5HgtbRNbDfzJQyEVQHJI3m6rcZ2a1vQoza/IAIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:16:34:bd:b5:1c:88:80:2e:52:75:e4:b6:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=7cde4b619d95de65d31225dd843c86319c649615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:6a:74:4a:72:a7:2f:5f:04:a0:f7:ee:c2:
eb:11:ad:2b:53:00:9a:2c:08:68:1e:cb:28:75:f9:
3d:08:f9:e1:d5:cb:05:8c:46:fa:1b:e0:74:d2:6d:
45:5e:2b:5c:ad:a0:8e:b3:d8:45:9a:5c:15:18:6e:
b1:4b:24:4f:21:27:68:3d:ea:61:7c:02:7a:4b:a6:
00:11:d3:94:ff:23:24:14:23:6b:dc:a8:47:91:96:
10:7a:96:69:51:7d:a8:f2:04:ae:75:3d:90:be:d0:
5f:ee:7b:23:37:cc:7e:f8:7d:bd:27:10:05:13:1b:
01:d0:59:90:86:69:4f:6c:2a:9f:f5:1e:d5:cb:23:
b9:ae:4d:cf:6e:21:11:c1:0f:24:60:81:71:60:3f:
c0:c0:d7:33:82:ef:f2:be:e3:53:7b:25:5a:0a:f8:
c8:78:f2:14:73:95:b9:7d:d9:6c:7f:0e:93:1f:65:
58:aa:fe:cf:42:61:38:5c:fb:95:1c:37:2a:6d:b2:
23:86:2d:e0:08:c9:f5:c4:6d:a0:4a:8e:fe:63:4c:
fd:5f:12:12:9f:f9:1b:50:7d:34:cd:59:0e:32:6c:
89:41:e3:f6:01:f2:1b:9c:9d:d6:fc:f4:c1:e0:34:
8f:df:48:72:fd:87:f8:08:70:e0:fc:c3:24:17:16:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:4B:61:9D:95:DE:65:D3:12:25:DD:84:3C:86:31:9C:64:96:15
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:0d:3d:8b:27:f4:f0:19:ce:a7:d1:0e:a6:a7:58:6f:4c:
fd:15:d1:c6:ca:c0:dd:80:fb:5e:7b:ca:fc:bb:30:be:78:de:
1c:b4:13:ba:b0:7c:00:42:62:89:fa:b1:14:b8:88:e6:44:fd:
53:c1:4b:9b:25:f7:f1:12:9c:33:6c:72:fd:9d:c2:a7:03:10:
12:b4:70:38:4a:fa:11:d2:ea:d0:63:94:6c:42:04:fc:99:e4:
1d:83:86:e9:51:6a:23:e4:f2:46:42:66:57:a9:60:1c:c9:aa:
b7:85:63:62:bf:67:e3:7d:f2:76:53:98:f0:89:bc:9a:f2:c2:
67:5e:e2:b9:dd:f5:c3:b4:e4:c6:3b:97:1f:cf:16:d5:7c:2c:
9c:ab:9b:79:f1:b5:72:15:72:fb:d3:9f:ac:f5:15:fe:b8:7d:
8f:c6:3c:52:1e:36:11:24:d5:d8:50:eb:e2:63:3b:87:0f:37:
1b:d0:4d:1f:62:45:d6:63:9c:17:17:51:9d:ce:29:e9:42:a0:
6b:3b:44:dc:7f:5e:fb:ce:e0:ce:7e:da:52:c4:51:55:24:bb:
11:01:b5:1f:19:27:4a:ae:9e:94:98:91:96:e7:ac:9c:d0:a7:
5c:68:cd:43:a5:71:fc:05:77:3d:4c:ec:02:1a:f5:66:92:76:
9a:4b:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:52 2026 by rpki-client