Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File: MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier: EOLxs6OjmT+qNNWevDCbya4AAMRbQcdp5fYH0V5Y7Hk=
Subject key identifier: DA:54:DF:51:27:C2:59:8D:48:1B:FD:EB:88:E9:43:DE:CF:D5:20:F9
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer: /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial: 019F86445F8CD724A5FD6D66628F466A2D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number: 1567
Signing time: Tue 21 Jul 2026 20:00:55 +0000
Manifest this update: Tue 21 Jul 2026 20:00:55 +0000
Manifest next update: Wed 22 Jul 2026 20:00:55 +0000
Files and hashes: 1: LxGPVJPyHWs5hHWhFZXK4a7O2-M.roa (hash: DEIc9UcHZJ6CJFEO4vc1601YJk4dflrb/oBYiYPKpTI=)
2: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: zZ8QjdDfZhUxyhG5cuB/pe5YsF2gPCc35zsvZVFeJeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:5f:8c:d7:24:a5:fd:6d:66:62:8f:46:6a:2d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
Validity
Not Before: Jul 21 20:00:55 2026 GMT
Not After : Jul 22 20:00:55 2026 GMT
Subject: CN=da54df5127c2598d481bfdeb88e943decfd520f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:9c:f8:14:6d:95:55:75:c6:59:14:4e:e3:
d1:f7:64:75:b0:9a:01:e6:eb:47:11:96:4b:c5:bc:
b4:eb:6c:52:7a:c5:8e:84:a1:78:b9:51:ca:0e:ce:
4a:4a:b0:ba:37:7d:93:c7:6d:a2:d3:1f:cc:49:ac:
3d:dc:8f:07:ca:be:f6:82:32:f0:e1:38:24:6f:e8:
99:e0:83:90:a4:26:53:7f:f0:74:82:4e:e4:a0:cd:
87:9f:9b:d1:6d:a4:f7:d2:8e:4b:cb:eb:7c:68:95:
32:47:8e:a9:3d:d3:51:6a:eb:50:c8:0f:e8:f2:6e:
3e:0b:dd:5a:25:f8:44:4f:f5:e5:21:92:13:d0:ca:
20:1d:73:1b:dd:13:83:2c:9b:3e:b5:39:aa:41:26:
b3:d9:2e:92:94:15:34:9b:a4:ff:57:6d:2d:a5:95:
32:61:1d:73:a3:e6:39:b3:7a:c4:19:a7:99:66:64:
e3:b1:97:94:e5:99:f5:ce:ae:4d:af:b8:67:a0:23:
dd:cf:fb:49:e1:7a:80:ca:b1:ad:2e:69:e6:1d:d1:
f0:53:43:a3:67:8c:e5:d8:29:61:1d:2b:51:a0:ff:
c7:3a:ac:ff:bd:17:3a:11:49:b5:a0:c2:77:b5:ee:
85:40:4a:a2:42:65:00:7b:91:3b:77:20:34:72:7d:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:DF:51:27:C2:59:8D:48:1B:FD:EB:88:E9:43:DE:CF:D5:20:F9
X509v3 Authority Key Identifier:
keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:85:f5:4d:86:25:08:14:0c:f1:5a:8f:5b:48:3c:e5:68:36:
ec:c6:97:e5:d2:30:13:5c:bc:ab:7b:3a:a3:62:ec:de:78:22:
f6:89:66:4f:d7:31:45:d2:74:01:ff:55:5d:db:06:f7:2b:21:
29:aa:d0:bd:f0:81:49:76:7e:86:9f:98:89:0a:f1:0f:b2:f8:
7d:20:27:2b:ac:b0:2c:f4:ee:bf:b6:f3:6e:67:74:25:de:4b:
24:3c:20:78:c8:77:9b:b1:a1:a2:78:7b:3c:48:9c:c5:e5:67:
55:57:93:11:18:ba:34:e7:2e:26:7c:95:a3:73:33:02:c6:30:
5d:e7:52:91:a3:de:cc:e9:c8:51:f2:fe:e9:e1:e3:73:9b:fb:
01:5b:a2:62:e7:dd:af:0c:4e:11:de:3a:e1:97:bd:79:20:a5:
78:ae:90:9c:b3:20:f8:63:30:72:fe:25:8c:e3:bb:43:0a:04:
06:5c:9f:4f:3c:d1:40:f7:0d:a2:b4:9c:1b:6f:e0:32:9d:f1:
03:cd:1b:25:88:2a:53:e0:34:1b:fd:c6:34:ce:c1:cb:24:83:
3a:18:42:1d:a8:c0:5d:85:5b:c0:8a:95:10:c5:bb:d9:76:2a:
80:6d:c3:e0:f8:52:25:ee:b8:0c:97:b7:80:3d:a6:9b:5a:01:
05:91:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:53 2026 by rpki-client