Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.mft
File: mzDoGpK3quJi2weA3vEzMjmlu9k.mft (raw, json)
Hash identifier: 53h/DdEH9YoeTGOxg3tX886d/YH4BPVzf1puhQ5T7dM=
Subject key identifier: AC:00:4D:8F:DC:6E:84:20:D9:76:8F:39:04:AA:DC:6D:EA:FA:2A:AB
Authority key identifier: 9B:30:E8:1A:92:B7:AA:E2:62:DB:07:80:DE:F1:33:32:39:A5:BB:D9
Certificate issuer: /CN=9b30e81a92b7aae262db0780def1333239a5bbd9
Certificate serial: 01A1592FC5EFB7AADA813B61E70FAEED658C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzDoGpK3quJi2weA3vEzMjmlu9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:05 +0000
Manifest this update: Tue 20 Oct 2026 12:01:05 +0000
Manifest next update: Wed 21 Oct 2026 12:01:05 +0000
Files and hashes: 1: fobQ-wfZDWID9dxzv_B2hfDY1eg.roa (hash: TQWbXjN5TU4ewP7qPlg45B5SHcu9Vn9bciyiLWKyEcw=)
2: mzDoGpK3quJi2weA3vEzMjmlu9k.crl (hash: zwgn8KQgO65PHW+TE9FTFO/cBhblQLbkMaxEbJa8EpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzDoGpK3quJi2weA3vEzMjmlu9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:2f:c5:ef:b7:aa:da:81:3b:61:e7:0f:ae:ed:65:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b30e81a92b7aae262db0780def1333239a5bbd9
Validity
Not Before: Oct 20 12:01:05 2026 GMT
Not After : Oct 21 12:01:05 2026 GMT
Subject: CN=ac004d8fdc6e8420d9768f3904aadc6deafa2aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:ca:a3:36:a1:92:0c:28:ad:ca:ef:07:38:
0a:93:46:1b:8e:9b:a7:d2:b2:3d:47:9d:1f:ef:da:
b3:39:af:6f:89:f6:8d:b0:fe:50:09:fc:f6:ce:05:
5a:ac:82:d1:d2:34:be:50:57:de:64:bb:0d:a7:f3:
c5:96:68:1e:8d:c0:80:48:78:0a:2e:73:b8:9e:84:
1c:d2:d2:a4:d5:08:f9:ae:57:14:3c:94:f9:67:91:
60:50:49:a0:75:0a:19:1a:2b:17:90:80:3f:18:da:
ed:46:06:96:1e:22:a7:5f:0b:6b:0d:87:6c:57:d1:
c9:7e:dc:e8:85:8e:f7:cc:e5:96:4c:42:f3:e8:dc:
7f:37:7c:62:4a:f3:dc:5a:d5:40:17:10:2f:e8:2f:
64:41:77:db:b2:75:68:1b:1d:54:7d:fc:9d:b9:76:
68:87:d3:bc:e8:92:b6:dc:cc:5a:91:ad:6f:7f:94:
2b:53:42:48:32:85:06:b2:21:c6:af:84:76:93:80:
79:1f:1e:2c:f1:dd:40:0c:75:e8:f7:c5:ad:80:e6:
0f:16:b8:45:7c:90:b9:08:55:74:71:06:73:6e:08:
c4:09:25:06:df:7a:f9:76:f8:57:12:fe:24:d3:44:
04:0a:e4:83:86:0a:db:8b:28:e5:b6:11:52:be:8b:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:00:4D:8F:DC:6E:84:20:D9:76:8F:39:04:AA:DC:6D:EA:FA:2A:AB
X509v3 Authority Key Identifier:
keyid:9B:30:E8:1A:92:B7:AA:E2:62:DB:07:80:DE:F1:33:32:39:A5:BB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzDoGpK3quJi2weA3vEzMjmlu9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:29:cf:cf:4d:d9:88:f4:9d:6b:9a:82:5a:cd:86:3a:8e:7d:
99:7a:0f:4f:bf:53:33:4e:48:4e:af:ee:9f:ff:6c:06:52:06:
41:4e:f7:d0:c8:4c:35:9d:f1:18:eb:0c:0e:e2:73:d0:9b:69:
6f:b7:68:1f:9a:bc:42:f2:a6:b2:42:7b:57:48:31:c6:cc:28:
db:44:14:ca:c6:c4:ab:62:7f:eb:c3:7e:95:17:1a:a9:75:c9:
fe:88:39:a6:d4:24:d7:01:27:d1:6d:1c:12:4a:e4:57:f7:21:
eb:9a:4f:a9:a2:28:4a:4d:ea:58:b9:f8:0e:52:ef:32:c3:f1:
5b:f0:78:e2:4a:74:b7:c1:c7:f6:1e:50:e0:35:b3:2c:8a:07:
59:d2:ab:31:c0:bb:6a:61:ff:95:03:94:5d:bc:fa:0b:95:2d:
77:79:04:87:0e:1f:d5:25:c9:31:7d:0f:11:8b:34:ca:25:bf:
08:20:e8:b1:e8:0f:1c:82:66:20:c3:c1:9e:9b:56:5f:a0:da:
04:55:c9:d7:08:fa:7a:d6:c2:61:14:ba:80:d1:45:a0:c4:ca:
55:8f:df:1e:b1:69:7a:f0:6b:c1:d3:d8:83:1d:bf:38:69:ff:
57:41:26:98:a5:3d:13:23:d5:bc:68:7b:1f:22:a0:a3:d6:58:
33:ba:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:23 2026 by rpki-client