Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier: J0WzLiYy9nwe5oGpo/auMI2ORlEr9xTqPhmBT/ptlKU=
Subject key identifier: E2:ED:00:10:60:15:C4:1F:59:D8:5D:CC:58:53:E0:27:54:ED:DE:3F
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial: 019D3909D9CD0CA5228889E27F17CC1A9AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number: 0835
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: H2UHdxs--mUhysff_fZAcgdRx8M.roa (hash: +4m/DoxWlWwqGWh1EfHl8rJsWNMtyllJ1qewG1BywTo=)
2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: yU34mui2IoWZ1jijSxsqO0Do32b9jkqhysQjT5K0aag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d9:cd:0c:a5:22:88:89:e2:7f:17:cc:1a:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=e2ed00106015c41f59d85dcc5853e02754edde3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:3e:61:5b:3a:8a:c7:70:4c:be:70:5e:77:
3d:b0:71:25:2b:53:e8:d7:d9:35:b1:96:54:d9:98:
84:60:55:5a:4f:f3:0f:0b:27:68:b4:70:f3:20:67:
1c:a1:f3:6b:12:f3:10:20:cb:51:f3:f0:9b:5b:45:
45:f3:ce:d6:0b:d0:bf:45:07:7f:3e:a8:7f:66:86:
b7:59:18:bb:4d:23:30:74:17:b1:43:5c:7f:4f:74:
00:a0:c6:e9:6e:f9:5c:54:cc:60:34:1e:a9:ad:11:
3b:46:56:63:52:b2:b2:8e:58:a0:5e:33:91:ea:7e:
1b:32:15:d2:af:59:b6:51:0c:33:5a:64:17:51:7d:
6d:df:bf:d1:1d:bd:69:cd:d8:9b:8e:07:cc:a8:ff:
ec:ab:3f:dc:6f:49:2a:0f:02:2c:d7:9f:ef:c3:65:
71:43:0a:36:9e:2b:b1:92:54:6e:79:82:1c:a1:a5:
61:62:89:51:49:1c:1d:4b:d3:81:66:f5:1a:20:97:
4d:09:5f:65:be:d0:3e:66:04:d3:02:78:53:c2:c8:
9f:23:b9:e9:bc:a4:8f:91:c5:f3:da:7a:95:9a:8e:
ca:50:3c:71:82:c1:ef:c1:66:a4:66:12:c4:ab:b9:
22:a4:2d:f3:ee:f8:dd:71:29:3f:85:c1:3f:48:92:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:00:10:60:15:C4:1F:59:D8:5D:CC:58:53:E0:27:54:ED:DE:3F
X509v3 Authority Key Identifier:
keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:18:61:68:67:d8:fa:69:a8:b0:5c:9b:ee:99:54:2d:3f:5d:
46:48:d9:43:30:1f:b5:a5:77:d3:1f:0f:68:89:dd:7b:2a:1f:
62:b8:29:01:7d:05:71:47:9c:a0:bf:54:b8:4a:d2:ef:bf:eb:
15:c7:37:57:bb:fb:08:72:84:eb:35:ac:63:bd:e4:d9:65:80:
09:46:5a:15:13:a7:53:e1:67:3c:b9:f7:ca:49:56:5c:c9:95:
a7:34:63:4b:52:22:c4:7d:46:f2:0d:0c:43:3d:ef:01:9b:11:
37:c2:c2:a9:f4:bd:06:22:00:c5:ea:2e:41:44:4f:26:de:b6:
d2:ca:41:6c:95:58:d7:a9:ee:f6:73:bc:ab:4d:52:f7:9c:9a:
73:72:52:8d:ef:c9:65:20:1e:1c:7d:0e:79:3c:d8:e8:64:44:
74:ce:24:2f:76:28:14:7a:77:d4:73:74:fc:6f:70:07:17:03:
1f:e4:de:8a:df:1b:41:b4:6d:e7:51:0e:5c:2c:a8:f0:e8:06:
fb:ce:a8:9c:4c:13:63:7e:d1:9d:41:77:4f:c8:58:26:cd:9f:
64:8d:fa:2a:0f:b1:4f:79:b8:a8:63:01:1a:89:3e:b8:46:7a:
0f:3f:ad:fd:e0:58:6c:0b:e7:3e:37:f5:6a:b6:78:a2:bb:db:
57:f2:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:30 2026 by rpki-client