Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: 6ZK5f7D4jeB9bcOQGaB5u3gLMkNSsnqexFv+3ZDi86M=
Subject key identifier: 18:13:FC:17:BD:50:57:76:59:10:B9:78:10:92:B9:1B:55:4A:25:79
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01A00214127025366433BA9FA9E796E3FD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 1956
Signing time: Fri 14 Aug 2026 21:01:04 +0000
Manifest this update: Fri 14 Aug 2026 21:01:04 +0000
Manifest next update: Sat 15 Aug 2026 21:01:04 +0000
Files and hashes: 1: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: Ez9Zi4Q42jWaf7+n6WZAVwmyjRHm2jyS8XQwEo7pRaA=)
2: niPFA17j7uRHpaTYenf6Cly67RI.roa (hash: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:12:70:25:36:64:33:ba:9f:a9:e7:96:e3:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Aug 14 21:01:04 2026 GMT
Not After : Aug 15 21:01:04 2026 GMT
Subject: CN=1813fc17bd5057765910b9781092b91b554a2579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:ff:00:d8:52:79:cf:fa:f9:91:da:a0:2f:
ad:36:c8:c0:82:13:9b:ba:56:23:ee:5a:78:30:5c:
12:e8:21:f7:4d:2c:66:eb:a8:2f:a7:f9:32:be:25:
04:5a:c8:08:c9:b9:f0:23:57:c4:05:79:86:3f:fe:
9f:41:dc:91:5a:3b:af:87:a5:ec:50:53:a0:60:84:
35:be:68:53:bb:4f:73:e9:b6:53:6e:b6:8d:80:09:
81:8b:71:6c:12:f1:90:c0:25:13:91:73:16:f3:36:
b0:9e:96:85:50:ec:68:05:31:09:c8:c5:92:4a:b9:
6c:f3:dd:87:18:fd:b9:58:cc:b5:20:58:51:70:ce:
ff:74:24:b5:73:67:1b:be:e6:49:2a:92:60:60:90:
e4:87:db:08:55:1d:d1:93:7d:2b:6e:2a:25:b0:97:
cf:02:86:c7:d5:bf:e8:a1:df:a8:ad:9d:36:b5:7d:
8e:a2:00:bc:a7:9c:5a:25:71:da:1f:2f:03:7d:4b:
29:80:3f:a3:5c:12:0c:72:ad:fc:a1:64:51:04:0c:
bd:0f:21:2b:63:af:f3:b7:4d:00:74:75:d4:25:3c:
d7:ca:15:c9:f9:b6:0b:07:6c:28:6d:1b:af:6b:d8:
97:07:09:fd:65:e4:e8:d7:00:d4:ec:a3:68:15:04:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:13:FC:17:BD:50:57:76:59:10:B9:78:10:92:B9:1B:55:4A:25:79
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d5:7f:41:8e:08:94:1f:b2:39:be:06:e3:33:9c:c3:b0:23:
1c:66:7f:9f:6a:7d:aa:d7:c2:7d:9f:3f:63:9f:4f:bf:ba:2c:
c8:fc:bf:c1:6d:59:53:78:bb:a7:ac:9b:58:23:ba:71:bc:27:
f8:77:fd:ec:a8:60:ba:77:04:fa:66:bf:1a:dd:d1:a1:8a:2a:
f8:d4:2a:8e:b0:5f:ee:e3:8f:4a:fd:f5:b0:4d:81:91:49:47:
5b:0c:ec:2a:cd:a0:26:db:8a:47:20:06:03:77:bd:7b:46:ef:
02:a2:65:2a:86:c2:af:d3:87:fd:e9:59:c0:03:d0:4b:af:44:
38:7e:3c:eb:25:14:d9:ba:8d:d6:9a:f5:20:71:91:d2:dd:8d:
c5:98:3a:8a:b4:05:70:62:49:99:04:5c:00:aa:02:1d:aa:da:
c9:87:cf:08:8e:99:2d:fe:81:7a:6f:a4:24:c1:86:76:c9:72:
d4:ab:bb:9a:ae:b9:e5:b7:a5:a3:f6:ae:3c:f6:d1:68:89:d9:
99:3a:a0:31:db:33:36:d4:7b:03:a5:9c:e1:a3:17:26:a2:e1:
a1:cc:2c:ea:65:80:3c:ed:84:89:2d:e8:5a:57:28:38:9a:05:
8c:45:62:63:de:66:7e:b2:58:14:13:91:6f:8f:dc:22:8d:f0:
43:ec:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:51 2026 by rpki-client