Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: yEjyB+pEjOhX9q2t2Y1+u3Zfw0jxzHtmmudqLSrA+9A=
Subject key identifier: B5:A7:83:0F:8C:EE:C1:FD:97:E0:CB:CA:02:D2:9E:93:72:10:BD:D6
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 01A18F42E33430719FFC8DB658E697A585BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 16A2
Signing time: Sat 31 Oct 2026 00:01:27 +0000
Manifest this update: Sat 31 Oct 2026 00:01:27 +0000
Manifest next update: Sun 01 Nov 2026 00:01:27 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: AgQKzQNXcHyReowTvIizHAz5+oXDhLEIlfxb1uaLytU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:e3:34:30:71:9f:fc:8d:b6:58:e6:97:a5:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Oct 31 00:01:27 2026 GMT
Not After : Nov 1 00:01:27 2026 GMT
Subject: CN=b5a7830f8ceec1fd97e0cbca02d29e937210bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:79:a1:4c:77:4c:a5:1f:bc:d9:53:1b:d1:
3a:57:b2:91:68:0a:f3:a5:70:19:a4:2d:79:7f:29:
3e:a0:79:2d:16:e1:e0:59:4b:29:f5:54:ed:8c:43:
34:e4:08:23:44:26:df:b1:14:45:ef:67:f6:82:f5:
95:25:a5:cd:a9:9b:39:01:9e:4f:1e:d9:e9:8e:0e:
04:a1:68:3e:96:ad:66:08:30:6f:79:a8:db:65:9f:
aa:b3:a6:0f:e7:0f:22:ad:ab:39:7a:bf:80:7f:21:
84:a2:1b:91:f7:a3:a1:1d:b1:fc:f4:7f:01:16:85:
7a:19:ba:82:07:94:e5:0a:39:3e:ad:e0:2d:e2:63:
fa:f8:23:d3:ce:1a:c6:e8:b3:55:1f:06:5e:c7:d9:
f3:46:2d:74:44:eb:f0:74:a0:c0:ac:0a:13:94:77:
19:48:38:ae:df:dc:1d:c6:0d:b2:20:f6:a3:22:5e:
b6:fb:85:47:2e:94:e4:2a:a1:37:66:a2:e3:b6:e8:
77:ca:25:83:87:d6:f5:d3:29:36:bf:23:dc:b4:a3:
3e:9b:c9:65:96:a6:5f:70:89:73:5c:7c:fc:4f:16:
2f:dd:74:b8:a4:82:91:9a:a3:f4:70:c4:d3:4d:71:
00:44:12:55:1a:ad:55:7a:63:b2:aa:f2:9d:8c:ca:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:83:0F:8C:EE:C1:FD:97:E0:CB:CA:02:D2:9E:93:72:10:BD:D6
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ce:c7:e8:d9:20:b6:be:e9:7a:43:5c:a0:60:ee:65:1e:2f:
eb:ff:40:1c:fd:53:63:2a:a7:6b:4a:af:5d:df:0f:64:58:24:
e2:f3:22:19:12:d8:91:39:e3:4c:8a:dc:ae:cf:c4:d2:3f:5b:
1d:21:56:6f:41:8c:6e:c9:ac:79:90:4a:ab:9f:4b:3d:ca:13:
7d:70:f7:21:58:1d:e5:0c:63:ae:88:80:bd:0f:ad:ed:06:ef:
30:d6:3a:e9:4c:a5:c8:2b:83:75:b6:93:1a:dd:a1:a5:43:62:
a8:3a:d1:0d:6d:8a:4e:38:4a:0d:d8:b5:44:a9:01:3c:f7:18:
a7:24:44:2e:99:f5:26:b1:7c:54:d4:5a:f5:81:73:d6:38:8c:
7c:1d:a3:ad:bb:af:3d:79:9f:ec:6f:86:a0:66:88:bd:74:d5:
c4:6c:4a:26:bf:17:a1:c8:1a:eb:30:a8:23:94:14:01:c8:0f:
ed:ed:55:e8:92:e7:57:a5:70:de:e7:98:0c:3a:1d:c5:02:5e:
23:21:72:e3:99:bf:77:90:f5:5f:53:86:6b:9a:e4:1b:8f:d4:
ec:f6:b9:56:d0:e3:b5:68:6e:7a:d6:6f:03:98:a2:8d:ca:fe:
22:7f:30:da:67:28:23:64:fc:b3:b5:b6:18:b8:fb:6c:c9:8d:
fa:1d:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:43:04 2026 by rpki-client