Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: j3oxvcTVQhIIBsttIHwo4q/XO+Cn47ctVImvEo1NYgY=
Subject key identifier: 21:57:80:7E:81:7C:9A:47:5F:75:4C:13:E5:7F:BC:A0:7E:C0:8F:72
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01A14C501500D4B7132B6BA27F4A6C5ED228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 1A01
Signing time: Sun 18 Oct 2026 00:01:18 +0000
Manifest this update: Sun 18 Oct 2026 00:01:18 +0000
Manifest next update: Mon 19 Oct 2026 00:01:18 +0000
Files and hashes: 1: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: sHZKZ103wpABUXlCf5QLB6o+RbLmua75zzx11zIt89A=)
2: niPFA17j7uRHpaTYenf6Cly67RI.roa (hash: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:50:15:00:d4:b7:13:2b:6b:a2:7f:4a:6c:5e:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Oct 18 00:01:18 2026 GMT
Not After : Oct 19 00:01:18 2026 GMT
Subject: CN=2157807e817c9a475f754c13e57fbca07ec08f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:7a:91:37:82:c7:1a:de:b5:e0:7d:ec:3d:
44:25:6b:65:55:a5:5b:96:28:df:3d:ce:75:6f:81:
f4:98:2d:16:27:11:1e:43:23:d0:db:1a:c1:27:9c:
96:75:84:b9:f6:8b:a3:77:87:1c:a2:e8:66:c7:ce:
ea:2a:11:61:4d:aa:c7:4e:12:1e:84:7a:1d:e7:d8:
ea:a6:f5:ac:8a:7b:32:c0:15:e3:3d:49:3f:d3:75:
86:52:18:13:f8:2e:68:73:c1:9b:ed:96:25:2c:4d:
74:5f:a8:79:3f:09:6c:2f:84:4f:6c:17:4a:d1:74:
ef:fb:77:26:32:3e:96:25:b8:90:d8:62:2f:11:d9:
16:2a:2a:f4:a6:80:7a:30:17:53:13:b0:6a:d3:2b:
42:9a:fe:8f:d0:88:5e:c5:1a:ab:2e:ee:a4:f1:ec:
5b:41:ae:b4:fd:7b:06:73:f3:88:d5:8d:d2:15:a6:
3f:fa:af:87:9a:7d:fc:ca:fe:bc:3e:5b:33:54:f2:
cf:c6:ad:eb:23:0b:c1:50:aa:ae:28:4a:e1:7b:59:
7d:52:03:07:e3:46:a3:14:65:61:c0:29:c1:64:b5:
a7:eb:15:d2:7c:e1:c7:ad:5e:0f:e0:89:cc:dc:3b:
f3:43:1f:2f:2c:34:68:2b:86:3e:1a:91:8b:7c:aa:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:80:7E:81:7C:9A:47:5F:75:4C:13:E5:7F:BC:A0:7E:C0:8F:72
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b1:df:44:f5:b6:c5:1e:68:00:e0:e1:c7:c1:db:17:a6:58:
c0:3f:ed:ce:1d:d3:ad:a9:1b:b5:73:45:3b:e9:09:c6:9c:d5:
30:85:65:6c:53:df:29:92:e7:5c:49:8e:78:d9:71:5a:c0:8b:
41:e3:87:e5:09:17:8f:f1:ae:ba:01:37:c2:97:b4:6e:8d:ad:
92:86:1e:1a:b6:f4:bd:78:a0:ef:45:9a:29:ea:c5:79:29:42:
2e:0d:80:d7:7f:27:20:79:7e:32:e7:42:d1:96:08:b4:f6:52:
8d:b5:a5:d7:d3:c2:15:70:9e:74:51:8f:44:5f:ae:72:1e:73:
bf:08:dc:03:5f:60:1e:ac:e6:26:c3:92:f3:f8:f3:a9:43:e1:
a8:6c:20:47:f1:ff:7e:4c:c3:de:6b:ab:6d:95:20:cb:63:35:
f3:dd:e4:ff:d9:34:ff:b9:47:aa:49:bc:4c:36:9d:f2:a4:bc:
1e:69:a9:65:98:b8:8f:be:76:cc:f6:f5:46:47:b5:ed:86:24:
08:03:95:03:26:77:13:e3:21:e7:0b:08:d4:8f:e9:01:26:f8:
bc:d7:80:6c:16:50:f5:2a:9c:21:3f:0a:bf:70:33:75:82:a2:
e9:ec:e7:05:cf:ae:b8:22:5b:a0:89:a4:2e:9a:4f:cf:9f:97:
65:56:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:14 2026 by rpki-client