Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: 3SuMZOLANu4Lc9I2zonqHhqZIPIl23kYCDPk2S71Xw8=
Subject key identifier: 2E:D2:84:96:B3:78:C7:58:72:E9:0D:79:9B:3F:FF:D9:AB:56:2D:95
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019D9CD174D27D04E506340688EC9996185A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 18D9
Signing time: Fri 17 Apr 2026 19:01:05 +0000
Manifest this update: Fri 17 Apr 2026 19:01:05 +0000
Manifest next update: Sat 18 Apr 2026 19:01:05 +0000
Files and hashes: 1: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: 5hJTN3kml+hgGr82MZZy60ltFSTaWAhjZdsGBQkAMaE=)
2: p4odwBPCjK_f_cbe3suhJpjfBd4.roa (hash: BbTKrvDIk3p4mxNlC+Mfbr4gEXADSPPB2996OHBG8d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:74:d2:7d:04:e5:06:34:06:88:ec:99:96:18:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Apr 17 19:01:05 2026 GMT
Not After : Apr 18 19:01:05 2026 GMT
Subject: CN=2ed28496b378c75872e90d799b3fffd9ab562d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:4e:b1:a2:a5:58:46:63:19:c4:15:0b:4f:
df:06:8a:d8:50:7a:09:d0:5a:d9:9b:64:1f:56:1d:
a4:d2:21:62:54:b0:30:aa:68:f1:57:25:5c:dc:b0:
3c:45:33:5b:35:1f:16:e6:7f:3a:02:20:e2:14:97:
39:2f:f8:c5:82:87:95:a4:3b:41:6c:fc:1b:42:90:
ff:62:de:8c:8d:0b:a5:33:db:59:3a:14:28:6f:42:
2f:a7:ba:8e:6e:1b:6c:dd:9a:07:52:60:37:f1:3c:
05:f3:6a:f9:d6:5f:7c:32:8a:ef:5b:ed:ca:de:27:
52:ac:11:79:4b:db:29:aa:54:f0:bb:db:85:74:63:
4b:b8:4b:07:e8:30:a9:da:f5:65:41:1b:9c:68:96:
e8:e2:fc:1d:db:8e:97:8f:8d:82:22:8e:a4:4a:98:
d8:a1:3c:f3:33:5c:1a:8b:b7:2a:1c:b0:53:78:2e:
21:78:3c:00:d4:08:5d:20:b0:be:eb:f6:70:e7:21:
4e:3a:67:c7:10:19:db:88:da:e7:10:df:da:01:38:
4b:3e:08:12:66:0d:8a:03:63:3f:7c:c8:32:1b:f7:
59:4f:da:fd:75:b0:f5:81:e4:f7:a7:ea:eb:d2:6f:
22:61:0f:02:f5:12:1d:c7:61:78:56:56:69:2a:33:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:84:96:B3:78:C7:58:72:E9:0D:79:9B:3F:FF:D9:AB:56:2D:95
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:40:b7:76:21:0d:f1:01:05:d0:9c:6e:4c:43:95:5c:49:0b:
ba:31:63:96:ac:63:fa:41:ad:58:ac:59:35:73:bf:07:c9:42:
1e:17:18:dd:52:16:96:da:62:d1:8b:b7:2e:72:53:03:a4:5c:
5d:2c:18:bd:2c:f4:56:93:dc:51:a7:0d:be:06:7a:d6:0d:16:
f3:5b:0f:ea:36:8d:82:b2:30:3c:ae:d1:47:37:5a:69:3e:e0:
4a:27:aa:59:b3:9b:33:82:b0:18:a5:9f:79:15:40:d0:e5:22:
39:af:2f:f4:d8:71:b5:37:ab:e0:f4:0b:66:6e:37:38:b3:90:
b2:39:ca:7a:4f:6d:f0:64:63:74:f2:9b:55:df:a4:dc:6e:65:
56:0b:8c:b1:4c:dc:47:0f:22:bf:ee:78:6e:44:ba:1d:3f:dc:
05:f0:ec:03:c2:5c:34:6e:0d:a8:ff:e2:45:b1:29:b5:12:3a:
56:ba:4a:7f:34:66:ed:50:93:81:e5:0e:56:9e:b6:0a:30:9a:
66:e7:e1:8a:34:a4:90:2e:46:24:90:13:90:d6:ec:e3:b2:eb:
59:8c:d0:6d:8d:c7:ad:9c:a3:3e:f0:e6:46:fe:f8:d1:82:10:
4d:7b:aa:6b:53:44:2c:02:26:b6:2f:67:66:86:09:8f:e6:29:
b9:86:37:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0XTSfQTlBjQGiOyZlhhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx
YTg2ODAwHhcNMjYwNDE3MTkwMTA1WhcNMjYwNDE4MTkwMTA1WjAzMTEwLwYDVQQD
EygyZWQyODQ5NmIzNzhjNzU4NzJlOTBkNzk5YjNmZmZkOWFiNTYyZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncNOsaKlWEZjGcQVC0/fBorYUHoJ
0FrZm2QfVh2k0iFiVLAwqmjxVyVc3LA8RTNbNR8W5n86AiDiFJc5L/jFgoeVpDtB
bPwbQpD/Yt6MjQulM9tZOhQob0Ivp7qObhts3ZoHUmA38TwF82r51l98MorvW+3K
3idSrBF5S9spqlTwu9uFdGNLuEsH6DCp2vVlQRucaJbo4vwd246Xj42CIo6kSpjY
oTzzM1wai7cqHLBTeC4heDwA1AhdILC+6/Zw5yFOOmfHEBnbiNrnEN/aAThLPggS
Zg2KA2M/fMgyG/dZT9r9dbD1geT3p+rr0m8iYQ8C9RIdx2F4VlZpKjOCTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7ShJazeMdYcukNeZs//9mrVi2VMB8GA1UdIwQY
MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt
MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz
LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0C3diEN
8QEF0JxuTEOVXEkLujFjlqxj+kGtWKxZNXO/B8lCHhcY3VIWltpi0Yu3LnJTA6Rc
XSwYvSz0VpPcUacNvgZ61g0W81sP6jaNgrIwPK7RRzdaaT7gSieqWbObM4KwGKWf
eRVA0OUiOa8v9NhxtTer4PQLZm43OLOQsjnKek9t8GRjdPKbVd+k3G5lVguMsUzc
Rw8iv+54bkS6HT/cBfDsA8JcNG4NqP/iRbEptRI6VrpKfzRm7VCTgeUOVp62CjCa
ZufhijSkkC5GJJATkNbs47LrWYzQbY3HrZyjPvDmRv740YIQTXuqa1NELAImti9n
ZoYJj+YpuYY3dA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:00 2026 by rpki-client