Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: miagssb/rrSTH/XXOGNcws1a6yhEyHw2Dm7UH/OtWfg=
Subject key identifier: 7A:6F:11:D2:AC:53:EE:79:0E:58:00:51:E9:D7:B7:A9:DE:24:05:DA
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019DCFE2F0074866F472A656E018AD1D5F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 17:00:49 +0000
Manifest this update: Mon 27 Apr 2026 17:00:49 +0000
Manifest next update: Tue 28 Apr 2026 17:00:49 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: JYZRzcirIK3QrQjN8IMOrOG8Dpnpnv6d026tBwcjZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:f0:07:48:66:f4:72:a6:56:e0:18:ad:1d:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Apr 27 17:00:49 2026 GMT
Not After : Apr 28 17:00:49 2026 GMT
Subject: CN=7a6f11d2ac53ee790e580051e9d7b7a9de2405da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:c2:71:16:03:f7:b8:f0:5e:15:96:6b:8a:
95:c3:47:73:6c:d0:1a:d5:94:6f:78:c6:36:76:e3:
d8:6f:b8:60:b2:3f:f6:a5:d6:74:7f:93:30:f1:67:
e8:3f:e8:96:6d:be:4e:8f:7d:07:16:ac:57:c7:ff:
36:1f:a1:92:bb:0c:d7:41:ce:95:53:c3:07:fd:d4:
a0:de:0e:90:79:57:65:a7:95:e2:61:56:b3:d0:6a:
26:68:e2:33:d4:ce:79:5a:dd:6a:02:68:d5:9b:b3:
79:f0:6d:98:08:76:b4:08:27:45:77:5f:f1:52:e9:
02:ff:d1:cb:a0:7c:4d:5f:88:0e:7c:f4:40:3c:ec:
0d:5f:65:7f:c0:0a:e5:18:f1:d2:7b:91:a0:e3:63:
22:38:a2:d0:9d:73:24:07:47:62:7f:af:5e:3f:3f:
3b:ee:39:29:f7:5a:f1:41:ec:a3:61:8a:c8:4b:f0:
57:10:b0:a7:14:7e:a1:70:b0:d7:e1:c4:9e:9f:dd:
6f:b7:6f:4d:17:70:c3:68:63:1b:23:41:86:d3:ff:
9a:75:14:29:54:95:af:61:c9:b9:b6:ef:fb:d3:38:
e3:eb:13:e4:be:e4:ef:a2:69:3d:76:7f:d5:0d:5e:
f1:ac:cb:8a:44:29:84:a8:59:89:98:c5:e6:61:ab:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:11:D2:AC:53:EE:79:0E:58:00:51:E9:D7:B7:A9:DE:24:05:DA
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:92:a6:13:2d:96:53:37:21:16:1e:1b:b0:a1:a6:15:6b:e6:
83:7c:4a:68:1f:3a:7d:cd:12:37:f9:67:2e:d8:14:71:4a:1b:
8b:2f:7d:76:b8:d3:db:b4:6c:67:a7:0a:ba:25:56:6f:4b:17:
08:d9:1f:c3:de:98:c1:f9:06:89:1a:e1:97:7f:ae:b9:c2:fd:
7e:b5:4c:72:bd:17:01:df:b0:10:e3:52:8e:94:6a:9c:60:c3:
8e:52:68:1f:37:f9:cb:92:48:44:7d:b9:8c:f6:00:22:6e:65:
1b:1f:5b:9e:0e:21:8e:a2:2e:d9:df:e3:5d:69:25:dc:0a:93:
1c:7e:f0:04:5a:b9:c1:7e:2d:d9:c7:cc:73:93:4c:66:f9:1e:
c9:eb:0b:b3:71:d6:8f:d1:e6:cd:7d:da:52:e9:26:7f:ff:63:
b5:db:3c:32:cb:cb:37:6d:b5:ab:e9:89:55:66:c8:a5:d9:43:
bc:0c:2b:99:0e:2b:2c:8f:48:ac:34:cf:08:8f:52:05:08:83:
ba:fc:88:42:0f:46:2c:d3:61:35:be:5a:ae:58:19:d8:bd:a5:
b9:d1:5e:f4:0e:16:b4:bd:76:a5:33:94:84:fe:af:91:75:83:
8e:e2:a4:4b:a6:22:b2:7f:d3:80:33:ed:e8:11:cd:9c:5d:38:
62:36:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:23:36 2026 by rpki-client