Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: X10jMNJIkL0cUSb03DrZBDWjbTAMkhmEV9HbxG3emS4=
Subject key identifier: 06:6F:EE:7C:88:97:C4:27:56:29:85:45:05:5F:A5:78:0C:9E:25:E8
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019CE44887E72D7016AC60735168D70C1B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1868
Signing time: Thu 12 Mar 2026 23:01:24 +0000
Manifest this update: Thu 12 Mar 2026 23:01:24 +0000
Manifest next update: Fri 13 Mar 2026 23:01:24 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: fjb7JW5ghPJ2/HC1Pe38y8hs1Sljxz9Eu96kksnCg1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:87:e7:2d:70:16:ac:60:73:51:68:d7:0c:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Mar 12 23:01:24 2026 GMT
Not After : Mar 13 23:01:24 2026 GMT
Subject: CN=066fee7c8897c42756298545055fa5780c9e25e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f7:14:8f:54:f1:9a:ca:48:43:87:03:a1:
3d:61:7c:83:01:76:d0:6b:f3:77:fd:3c:b1:be:2a:
dc:f6:07:06:ca:b2:b1:63:e3:18:b4:b1:77:a8:d8:
0f:f3:3c:93:d1:ae:1a:e5:2e:dc:b4:6c:6a:be:5e:
1e:59:a1:b8:28:ce:58:3a:5b:84:51:c5:97:93:94:
9c:51:f6:b4:0a:e2:0f:53:14:ec:c1:bc:69:b1:dc:
93:1a:e9:75:dd:46:d2:33:06:b1:f6:14:ac:39:bf:
f4:55:d3:db:44:c6:3c:4b:11:69:c0:b8:d6:9b:49:
85:79:d4:c1:72:a2:e8:13:b6:7c:b6:b9:65:4a:1d:
d3:19:6f:86:71:15:db:2d:4f:62:7d:15:ec:c2:16:
e5:68:9f:ea:1a:82:4e:88:db:62:c0:62:f0:69:e0:
94:25:8b:40:77:01:3a:65:5b:60:d3:60:b2:13:27:
fc:08:d4:39:e7:3b:a9:31:48:ff:96:96:92:35:33:
f8:63:f7:3e:cb:a7:cc:1d:64:c8:b1:bc:b7:65:74:
7e:f6:9e:fd:5b:bb:19:33:b4:ea:e9:6c:c8:ca:57:
b9:52:91:84:c8:bf:f4:5d:2c:80:d6:02:a5:bf:df:
1b:91:12:01:1f:77:3f:f1:34:b0:33:e2:c2:e2:38:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6F:EE:7C:88:97:C4:27:56:29:85:45:05:5F:A5:78:0C:9E:25:E8
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:87:be:d3:a0:bc:c7:a4:6a:3e:28:fe:63:5c:b0:63:99:65:
12:79:eb:e2:73:ab:bf:c7:11:f4:f1:63:2b:24:9a:68:e3:7a:
e7:60:de:0b:35:73:2b:82:01:6c:dc:af:e5:3f:af:ff:53:e0:
60:d6:1e:5d:a4:30:46:9d:a8:b4:93:ab:13:89:56:c8:63:14:
10:f9:cf:0e:8d:b5:f4:fa:91:62:ea:5b:bf:3a:7a:5d:23:5c:
14:1d:d5:a4:13:7c:06:42:c0:ce:22:5c:d6:7a:e8:df:45:de:
67:88:a2:46:b4:17:ee:18:1b:2d:6c:53:7e:12:16:4e:22:11:
db:14:e3:ff:03:59:44:4e:ab:0a:cf:e8:b8:01:82:73:11:b4:
90:f0:bb:d3:76:c6:31:ef:1c:f0:88:f8:5b:f5:22:69:3e:04:
29:58:ac:d2:ac:fa:8a:c5:ef:86:b8:04:15:12:4a:da:d9:18:
25:66:10:a5:bb:40:b3:57:15:47:8b:24:6d:ae:a4:e4:08:f8:
da:56:2c:ae:b2:e7:a0:cd:1b:ec:54:12:e1:7b:41:27:61:c2:
2a:ba:0b:e5:68:44:92:f3:04:fe:0b:ee:96:35:aa:bc:74:50:
b5:9c:c6:83:7e:46:e0:71:1e:23:3c:1f:29:8a:65:9e:25:f5:
70:b1:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:12 2026 by rpki-client