Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: mkAYeykJwIYzYv7d6lILwCwrmSlteAP7wD6PGgfvpbE=
Subject key identifier: 1F:A0:02:9C:63:B0:C1:50:45:E4:D9:C5:83:F4:F8:4C:EA:A8:E2:9C
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019FAC088B9C1A5120C7FF965CF9F43D01CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 19EC
Signing time: Wed 29 Jul 2026 04:01:08 +0000
Manifest this update: Wed 29 Jul 2026 04:01:08 +0000
Manifest next update: Thu 30 Jul 2026 04:01:08 +0000
Files and hashes: 1: 1p0RiyBFchvE7NhFhbA51Ectb08.roa (hash: 2borQweYI7IpHIVDCEmYv8l+r/XVIWh005RBqdpqevc=)
2: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
3: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: Ysx1tWSi7hZTctBdgjNWc5iZDRlr0wakiRTZNBU0xbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:8b:9c:1a:51:20:c7:ff:96:5c:f9:f4:3d:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jul 29 04:01:08 2026 GMT
Not After : Jul 30 04:01:08 2026 GMT
Subject: CN=1fa0029c63b0c15045e4d9c583f4f84ceaa8e29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:8b:ba:eb:fc:5f:83:e5:d4:fb:10:67:62:
b7:9b:f2:fa:fe:74:6a:f8:a1:f2:91:6c:82:d8:13:
d4:1f:29:84:c3:ad:fa:8d:80:c0:2f:eb:82:9e:1a:
2e:ee:1b:2d:6d:fc:82:0c:f9:ec:5b:6a:1a:a0:8c:
fd:6b:4f:2e:8c:3f:35:59:4f:e7:bf:da:de:3a:26:
aa:4e:be:27:64:6f:4d:9f:e6:99:0b:5d:01:e7:06:
a6:62:a4:c5:b2:8e:aa:48:a1:20:5e:9c:8b:2a:54:
d0:20:b4:1a:c4:4f:43:58:8e:f9:83:7e:ea:bf:80:
3a:5d:1d:8d:29:68:74:2d:a4:8a:5c:02:72:b9:5d:
4d:be:9c:84:69:ba:4f:c2:21:72:bb:b8:e8:ab:81:
a9:80:ed:f9:fa:c3:a3:1f:8d:38:c7:8f:59:25:70:
36:2d:2a:4d:92:73:c4:27:91:7f:15:b7:b9:92:8e:
4d:32:3f:14:67:eb:96:ed:d8:ba:f6:a9:4d:dd:fa:
ce:df:63:75:35:0d:2a:2c:3a:1e:a7:02:3a:11:55:
8c:e6:bc:e4:90:2c:df:43:94:1f:dc:9f:d4:1f:1f:
55:b6:8d:c6:cf:c7:4f:b7:c6:1f:24:26:32:4c:e7:
a1:4d:3c:c3:f4:89:cc:45:73:d8:9a:87:f1:df:99:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:02:9C:63:B0:C1:50:45:E4:D9:C5:83:F4:F8:4C:EA:A8:E2:9C
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:85:e1:6f:57:64:4d:bb:67:05:8d:f7:fe:b6:31:62:52:
21:f2:81:7b:7d:e1:be:32:ea:88:f0:66:45:73:a8:bf:5d:dd:
69:bb:fa:0e:ef:cf:9e:8c:be:55:2a:18:5a:0b:96:f9:1b:b3:
08:f5:93:ca:35:28:6e:b7:13:43:45:58:b0:48:50:80:3f:18:
9c:27:5b:43:74:53:c0:e3:9b:be:ae:57:4d:77:d0:45:7b:80:
42:74:d1:3b:0d:48:b9:2a:8d:36:75:4b:58:48:bb:bf:6e:c5:
0d:7a:8a:2d:ce:c1:0c:24:fa:c5:a3:35:fe:28:4e:f6:a2:75:
0c:34:a3:f6:6c:17:ae:18:8c:be:4e:dd:ac:0e:b2:eb:69:ae:
35:b4:3e:b9:5f:11:98:0b:48:d7:35:97:d0:a2:d1:9b:05:ed:
6e:42:4d:e2:76:f3:9c:72:cc:e1:8c:67:f0:79:f4:53:91:b9:
8f:53:b1:25:fa:55:fc:a0:c6:38:65:25:4d:d6:f4:e0:75:e9:
29:f8:ea:7c:7b:66:8c:1c:e1:93:00:a4:af:e9:ee:20:6d:85:
0f:91:36:21:14:83:66:6e:1c:0c:44:b7:43:cc:59:72:7a:71:
7c:82:a8:be:c7:48:b0:a1:b7:ec:80:56:7a:06:fe:24:89:d7:
3e:89:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:06 2026 by rpki-client