Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File: MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier: vDqcwywoWGp33JheR0zCcuT6SjS242bE0BH2OhcAu7A=
Subject key identifier: DE:65:AD:2D:3B:7E:8A:B4:F0:4A:5F:54:BF:94:60:03:C6:8A:D9:F6
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer: /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial: 01A1219C8475B82742991DFFE0E9188D0A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number: 163C
Signing time: Fri 09 Oct 2026 17:01:07 +0000
Manifest this update: Fri 09 Oct 2026 17:01:07 +0000
Manifest next update: Sat 10 Oct 2026 17:01:07 +0000
Files and hashes: 1: LxGPVJPyHWs5hHWhFZXK4a7O2-M.roa (hash: DEIc9UcHZJ6CJFEO4vc1601YJk4dflrb/oBYiYPKpTI=)
2: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: faaGgErKU+GAYpXN1NdR++acaLud0pMtV+TXk7V3AEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:84:75:b8:27:42:99:1d:ff:e0:e9:18:8d:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
Validity
Not Before: Oct 9 17:01:07 2026 GMT
Not After : Oct 10 17:01:07 2026 GMT
Subject: CN=de65ad2d3b7e8ab4f04a5f54bf946003c68ad9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:56:45:3e:d1:96:05:ff:62:c0:51:b2:98:
21:96:74:72:cb:6a:cb:13:49:27:39:88:d9:c4:43:
db:8c:79:9a:a5:46:b0:6d:77:15:d7:0c:1b:fb:f4:
18:0d:2f:8b:88:04:9b:42:8b:87:a2:18:24:42:46:
f4:bd:69:71:00:c3:96:78:54:2c:2b:e4:86:28:39:
c4:9c:e3:bf:fb:6c:cc:55:72:96:04:37:c2:ca:47:
51:e8:2e:7d:f1:05:2b:c4:ca:85:f8:ef:a9:9f:fd:
04:dd:f7:73:e2:59:f5:4b:09:19:9c:c7:34:9f:ca:
e5:5b:43:98:1f:d3:de:99:d0:3f:e6:37:b5:14:e9:
d4:49:27:03:00:61:58:6c:d4:3a:91:79:ab:d6:2e:
b8:f0:76:d0:7f:b1:5b:86:32:56:91:ca:21:66:19:
21:8d:72:1b:13:1f:33:4e:e9:dd:1d:27:be:d6:95:
bd:36:2a:fd:78:68:fe:ca:9a:ce:07:71:1e:f2:5b:
98:69:1e:01:27:d5:38:46:55:ec:74:b6:b8:90:67:
de:00:13:67:ac:36:71:93:c4:2d:da:91:68:98:d7:
44:92:53:5b:e7:70:62:8e:b1:b2:c6:c7:72:cd:1e:
1c:5e:61:13:c8:02:15:64:95:ce:ae:8f:09:f7:bc:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:AD:2D:3B:7E:8A:B4:F0:4A:5F:54:BF:94:60:03:C6:8A:D9:F6
X509v3 Authority Key Identifier:
keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d3:49:05:ee:2b:bf:de:b2:18:98:d2:48:e0:5e:b0:26:a7:
23:63:f2:a2:e1:f9:14:b6:98:dd:7a:09:a9:3d:32:f2:45:94:
43:30:11:52:74:b7:65:f3:5a:17:5c:89:2f:f8:e8:c9:e2:20:
f4:1e:36:0a:88:35:a9:17:a6:9c:60:0e:25:55:40:e9:2e:8c:
db:b4:3c:d4:04:82:43:cd:bf:33:a9:75:07:0b:0e:62:2a:cd:
dc:b3:8c:54:b7:43:de:2d:37:05:2b:b1:51:97:32:18:6d:32:
32:2c:ac:04:8a:00:63:34:fa:d8:27:19:82:0e:60:7f:e1:08:
a2:a1:2b:89:f2:03:d7:fa:b2:4c:b0:bb:d8:d0:91:c4:c8:19:
0f:68:05:41:56:b3:24:79:6b:72:c3:9e:a1:cb:aa:36:85:6a:
ee:b8:0b:5b:98:9b:07:99:28:aa:df:a4:fa:08:12:74:94:bf:
c0:13:11:4d:b5:7e:e6:84:f7:e8:f6:95:7d:83:6c:4b:65:fc:
46:82:94:6b:38:58:aa:dc:99:cb:3a:3f:ac:08:85:52:93:f9:
bf:de:81:32:d0:81:0a:bd:93:87:94:12:c2:6d:68:a4:89:4b:
48:56:7e:b4:03:ac:79:ba:f0:72:a7:9e:8c:1f:22:0d:ef:57:
5f:4a:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:08:42 2026 by rpki-client