Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: 9aJxOQJpss75BNvHo1DCtyQo+cHFwMzy6zxDtt804Fs=
Subject key identifier: FB:2F:7D:51:D1:45:DB:14:15:DA:88:59:81:6B:27:84:FF:9B:3B:8C
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A0EF2F7D0FBB5212B67E0DA5966B636B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 05D0
Signing time: Tue 29 Sep 2026 22:01:01 +0000
Manifest this update: Tue 29 Sep 2026 22:01:01 +0000
Manifest next update: Wed 30 Sep 2026 22:01:01 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: zjEz0q6d8pKVfodP0BXmAZ+CwPexZJM4t+mlFT7edrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:7d:0f:bb:52:12:b6:7e:0d:a5:96:6b:63:6b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Sep 29 22:01:01 2026 GMT
Not After : Sep 30 22:01:01 2026 GMT
Subject: CN=fb2f7d51d145db1415da8859816b2784ff9b3b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:c9:8f:af:3b:1c:0d:a4:1e:93:34:3e:9c:
f3:76:06:bf:0b:07:3b:73:4f:ce:89:f5:b8:b5:08:
6a:7c:32:ca:0b:d3:e9:30:e1:94:e7:2b:0b:36:85:
9f:d5:9e:e1:c0:58:ed:5c:68:1f:ce:d7:15:c7:70:
6c:7c:90:0a:74:a2:5e:81:f8:da:83:fb:c4:1f:9c:
1d:03:f1:27:ed:51:ff:b3:da:9d:44:e0:c1:0d:ce:
f4:91:8f:8d:8d:45:53:ab:af:e4:28:72:0f:52:8d:
4c:8b:47:f5:78:bb:35:40:62:a9:e1:fc:7b:7a:fc:
a0:cf:9d:02:be:a7:d8:16:c6:51:16:64:7d:fd:85:
81:99:b7:f4:50:06:89:38:a2:45:23:6d:34:f2:9b:
3d:71:a3:56:a0:f1:65:a2:34:34:d8:64:7c:94:de:
c7:fa:7b:91:33:e8:16:b6:89:14:88:e1:a4:21:7f:
fd:8e:a5:14:2f:25:46:9f:c0:af:85:1f:f6:5d:d0:
80:c5:57:50:f0:a2:f4:b1:6a:e9:13:fa:2d:6e:f6:
61:76:8d:aa:9c:5d:b4:97:4e:b1:2a:b1:73:fd:ab:
28:b5:93:3e:2c:58:f6:5e:33:40:31:3c:bb:3f:83:
98:38:e1:47:93:e6:be:4f:a1:f1:e1:af:8d:8b:24:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:7D:51:D1:45:DB:14:15:DA:88:59:81:6B:27:84:FF:9B:3B:8C
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a0:ea:ea:ed:68:3a:64:d7:36:80:3f:eb:cf:ea:04:8a:35:
4c:ef:4b:a6:df:f7:de:7c:ef:42:59:c5:b7:b6:4a:60:c5:48:
10:48:7e:0d:5f:fd:46:85:69:60:67:5b:4a:10:cd:f3:1f:72:
99:4e:02:2a:4d:7a:91:cd:9f:7a:b4:36:98:ff:f6:69:2a:3a:
ab:fe:91:27:a6:01:77:37:12:97:4f:ca:0f:10:84:65:c5:aa:
94:88:b2:78:ec:b1:63:e3:fb:e5:6a:5d:e0:7a:97:ef:ef:eb:
b6:b9:e6:d7:4f:c8:24:30:6f:5f:99:78:c7:4f:9e:e2:41:3a:
88:e8:59:d3:06:3c:b7:5d:17:23:5f:d4:f3:ae:dc:d0:52:cb:
ca:1f:d8:42:6f:e1:c5:a0:5c:2c:67:dc:e0:e4:4a:bb:9a:a9:
ed:0a:83:54:c5:5d:c5:37:d4:22:fc:22:db:12:93:aa:ac:5b:
75:7f:1f:28:7b:ad:8a:3c:d1:bf:78:2f:cc:64:70:e5:62:d7:
be:ee:3d:0b:fe:6e:79:fa:b0:40:8e:ea:af:7a:44:be:3e:77:
6b:d0:50:ac:52:62:8f:4f:7f:f3:32:dc:2e:50:8b:12:93:95:
45:e9:e9:3e:99:0f:fc:e5:09:1f:e3:00:4a:6d:b0:ef:78:ac:
f4:07:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:41:38 2026 by rpki-client