Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: v4FSXJxDmasih3HEs6MrsDYQkR+4frmgdK3JngmrGL8=
Subject key identifier: 28:17:9E:65:26:48:4B:51:9B:1E:BE:94:86:B5:3D:64:11:3A:F4:10
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019EB98F72F227BC91B73F9F084A9C88F8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 02:00:46 +0000
Manifest this update: Fri 12 Jun 2026 02:00:46 +0000
Manifest next update: Sat 13 Jun 2026 02:00:46 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: 5HtkmM/LPaJ1Ft9KiKjyZlqeRmVnlMZcfp+RQSTy//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:72:f2:27:bc:91:b7:3f:9f:08:4a:9c:88:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jun 12 02:00:46 2026 GMT
Not After : Jun 13 02:00:46 2026 GMT
Subject: CN=28179e6526484b519b1ebe9486b53d64113af410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:43:de:70:d2:ad:1a:00:bf:f4:08:9d:f6:
ca:5d:5a:bd:ca:91:b4:99:36:ca:76:49:ac:f2:1b:
21:2a:2f:e2:83:06:c1:07:9b:ed:68:74:32:17:06:
65:22:ab:47:9e:7c:c0:b3:64:73:54:74:15:05:3d:
23:fe:4c:b3:31:62:f8:8d:a2:59:3c:7f:92:3a:29:
fb:6f:41:d4:58:35:cb:60:8e:ac:96:5f:e0:ea:5d:
c6:7f:e0:54:86:a6:98:90:66:05:36:05:7e:5e:5c:
9f:c1:b5:c8:59:bd:c1:42:d4:c1:08:2c:be:14:7d:
4d:99:67:73:41:0a:c1:a3:b4:4b:8b:58:98:c4:cc:
fc:df:50:ec:69:76:55:bc:1a:dd:02:03:b3:26:0c:
c0:51:70:57:cb:be:11:20:9e:16:be:03:dd:f7:b7:
12:d1:9c:52:57:11:aa:76:5a:4c:f8:a7:62:67:65:
d1:41:b5:37:c7:77:0f:79:4e:6c:ca:d1:47:85:c4:
92:f4:20:92:12:86:52:cf:23:6a:ac:22:e2:b4:e9:
e1:0d:cf:ff:1e:bb:7d:45:6f:7d:1f:61:d4:48:7e:
c1:65:99:a0:94:52:80:87:70:7b:6c:30:73:ef:c7:
1e:07:98:83:0b:50:33:1c:f5:51:b3:64:49:6e:a2:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:9E:65:26:48:4B:51:9B:1E:BE:94:86:B5:3D:64:11:3A:F4:10
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:41:e0:50:8f:2e:c4:fe:51:d7:d2:82:74:32:90:df:af:
2d:9c:d5:84:ff:81:7f:3b:28:fd:90:57:b0:46:e0:e4:35:eb:
ee:c4:6d:57:03:6d:c7:07:f7:21:c6:2e:ad:16:b6:ea:24:15:
5f:b6:20:66:21:b5:73:ef:3b:0f:28:0a:58:7b:d6:cc:f0:c0:
fc:31:46:f1:b8:a3:da:82:57:32:99:d0:68:4b:76:f3:80:e1:
c9:1d:0a:f2:b5:5d:2d:ee:7b:bb:b8:84:c2:c2:56:27:8c:e8:
d9:67:1e:4d:8b:04:7b:3e:7e:a6:4c:10:3e:d8:8f:42:e5:af:
ea:0a:f1:11:5c:78:6d:7c:d5:63:c7:cd:ae:b0:77:94:fe:df:
dc:f9:a2:74:21:a8:6c:5c:a3:91:5a:8b:d0:e3:1d:ce:b5:e8:
60:56:74:57:01:e1:ce:55:02:e0:82:68:eb:a4:7f:0b:b4:02:
c2:fd:f3:fc:d7:d8:76:99:69:08:2c:5c:51:3a:2d:b0:cb:4a:
a3:4d:be:13:01:74:e2:df:d1:27:fa:78:33:81:6b:d1:3f:5d:
eb:14:e9:14:20:ea:e4:39:f7:05:3e:a0:4d:e2:1b:22:6d:71:
69:51:ad:23:75:53:22:72:62:28:90:e1:11:40:bc:e1:65:b0:
2b:e7:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:00 2026 by rpki-client