
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: 2BhAFJbPIMc23TzwUCIxE2adhvn6Ie9ELwPItUQd/6Y=
Subject key identifier: F8:B9:29:E9:4D:8E:2D:D2:D0:AD:0B:FE:5C:4F:37:54:A0:EA:DF:0E
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019DDF5702DB1327C0E617D93A9A57E92919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 18E7
Signing time: Thu 30 Apr 2026 17:01:54 +0000
Manifest this update: Thu 30 Apr 2026 17:01:54 +0000
Manifest next update: Fri 01 May 2026 17:01:54 +0000
Files and hashes: 1: C8JQF4zr-4aK_RwcjE56-DT6Wxg.roa (hash: rY/9eLA6NM4GP5yGoqQdoz+NjeXxPxDAiu09l4Q28uQ=)
2: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: me/9dPoVLu4d+qTvbLScDx7nwewNfPgrjIQ7toLs7K4=)
3: n_2sX8oetXRh3eKs3u3UutqLTuo.roa (hash: h6ff979Rmb1Z+QDtHv0xtctucpVS/vaN2I+2M9Q0tyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:57:02:db:13:27:c0:e6:17:d9:3a:9a:57:e9:29:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Apr 30 17:01:54 2026 GMT
Not After : May 1 17:01:54 2026 GMT
Subject: CN=f8b929e94d8e2dd2d0ad0bfe5c4f3754a0eadf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:fa:1d:34:03:31:fc:5f:90:72:b1:fd:bf:
b9:9c:16:76:d9:f7:9a:b3:ee:8c:1f:51:0c:71:48:
72:42:ef:ba:00:ec:f9:49:70:87:16:eb:ab:c8:1f:
5e:ab:22:c9:fe:14:9f:35:10:86:06:53:ae:49:33:
01:d9:0d:a7:3e:43:fb:41:c4:1d:9d:33:db:b3:4a:
7e:9a:57:6a:4f:30:12:a2:c0:f4:6d:9f:70:da:1c:
d0:ec:9e:29:f3:aa:d4:28:35:a6:0b:1d:c2:75:78:
2d:25:e1:fe:81:55:3b:4e:15:a4:6a:b5:af:4c:80:
01:b4:1f:dd:37:75:d0:ed:94:d7:02:b7:fc:d0:8e:
ec:a9:95:be:c0:e2:08:e9:f9:49:41:2b:a7:e9:de:
65:d2:9e:12:99:61:e0:80:5a:04:b7:55:2f:e9:54:
00:40:f0:93:fd:7c:a6:7c:a4:66:b0:e1:c9:2c:4c:
c5:f9:96:bf:be:65:56:3b:4f:3f:0e:e5:7b:7e:5c:
4b:8c:e1:f6:f5:26:97:23:c7:53:5b:94:58:bf:23:
81:4a:32:7a:39:64:0d:35:2c:92:a6:02:9c:5f:a4:
95:5b:f2:79:f5:5a:80:d6:31:ca:24:f4:4d:97:ad:
81:a0:47:00:1b:d4:d0:3e:4b:ec:7c:b4:94:30:f6:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:29:E9:4D:8E:2D:D2:D0:AD:0B:FE:5C:4F:37:54:A0:EA:DF:0E
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:d6:b2:f5:25:1b:64:12:61:6d:72:e4:19:31:15:c8:7d:
cd:95:bd:f2:a0:9c:de:e5:0f:24:f1:0f:07:18:a7:54:ab:60:
31:a4:0d:16:ef:45:e4:4d:9d:2d:24:97:fc:d2:5e:2a:34:2f:
c0:7b:83:fa:b7:10:f2:e4:7e:32:36:5b:cb:17:e1:46:45:09:
81:9d:ea:0c:a6:08:ee:dc:65:52:dd:b1:11:43:4c:90:7b:5e:
ec:71:91:e2:24:89:26:7d:7f:44:03:52:f9:b8:02:60:88:d5:
d7:bc:4d:6a:b7:1e:36:d7:15:a6:fb:c4:5a:63:80:68:69:da:
8a:89:eb:19:db:25:5a:a5:94:4d:26:4b:6d:b7:98:46:da:df:
02:43:7f:fd:fa:f3:b6:6c:88:59:1d:91:67:39:9a:60:a1:a8:
0a:dd:ee:bf:6c:e6:e2:9a:6b:c6:42:8d:3d:88:5a:91:5b:98:
aa:7a:5a:3e:70:b5:81:02:fc:0f:bc:a4:3a:a4:e2:5d:d5:95:
71:1d:ef:5f:d8:28:5e:e8:d7:b8:53:bf:60:02:e5:ed:49:37:
fe:5f:a0:08:07:aa:98:48:88:11:de:5e:e8:8e:ef:04:0d:91:
05:e8:1c:61:be:46:88:a7:06:26:53:31:c6:60:e5:6e:a9:14:
66:0e:d1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 21:09:05 2026 by rpki-client