Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: QZkEeAPt954353urH1Kk0uhU/njfGtt5pQ8jkMhZIIY=
Subject key identifier: 7E:38:07:D9:A3:84:02:B8:66:23:C7:D4:1D:9F:15:B7:D1:26:1A:12
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 019D37C008B4F5335FE4426E04683F956BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: IWjwsY1bgLSJyFmigfatosgU_Vg.roa (hash: 8dY5ihKfXw7w5x8t/2Vfg5q46ZrOCREowiMp97eEXuE=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: qowQMP+TxUKC5FxLNDqwRd+RGmKwJY/qfxksgnK1V2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:08:b4:f5:33:5f:e4:42:6e:04:68:3f:95:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=7e3807d9a38402b86623c7d41d9f15b7d1261a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:6b:ea:a5:18:1a:b8:73:65:0f:ae:c6:b0:
4a:4f:67:a2:8a:77:5c:7d:49:8d:c7:5e:5f:ad:0f:
96:b5:3e:94:a2:92:f6:1a:4c:e0:70:4e:0e:bf:94:
d5:95:cb:79:ae:2c:9b:5a:0c:f9:ce:53:f9:15:9f:
2b:33:40:88:9f:19:67:d1:24:2d:54:8e:56:d7:d5:
a1:17:39:01:e1:35:56:b4:32:94:ad:c1:10:48:ef:
d6:7d:a7:39:58:ed:17:98:16:20:bd:59:d4:fc:17:
65:d9:88:47:cb:00:66:6d:43:5c:6d:80:40:7b:51:
cc:cc:a6:9e:8c:81:8e:01:6b:8c:72:e5:27:d4:4c:
d2:20:90:b5:7f:a4:77:0c:5c:92:0a:26:ff:d5:7e:
56:a9:7b:41:16:05:a6:ab:b2:41:df:a1:ea:95:eb:
7b:af:28:f7:dd:4a:99:77:2b:63:71:b1:4d:6d:ed:
d0:3a:5b:c9:f0:d0:f8:46:24:e1:92:ce:1c:b2:e5:
71:04:18:8b:52:80:a1:67:06:21:42:d3:77:0c:a0:
1a:5e:1f:fa:5a:1e:c1:a0:98:6c:8b:9f:11:b9:c4:
24:be:9f:4f:7a:f5:c4:ba:13:52:f4:fa:c1:32:e0:
bf:29:be:5e:3a:f8:81:93:28:b6:b2:5b:2f:86:1c:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:07:D9:A3:84:02:B8:66:23:C7:D4:1D:9F:15:B7:D1:26:1A:12
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:c5:9c:93:52:b5:e0:ad:2c:62:06:02:bd:b7:00:4c:9f:
29:f3:1b:f4:02:9c:fb:41:ba:53:44:45:72:f4:6a:18:c0:9a:
06:ba:f6:08:09:cb:96:f8:32:bd:97:70:50:07:19:c1:d0:8b:
47:86:a8:c8:43:39:58:1a:0f:d4:47:7f:94:78:f8:9b:1b:b4:
a5:b0:5b:bc:0d:d9:1c:05:1c:6e:7e:db:11:3c:06:c7:b2:3f:
43:6c:c6:62:eb:62:4a:f0:37:01:bb:6e:e1:eb:9e:58:ce:1d:
93:9d:38:b1:ab:1a:4b:96:4e:ff:f1:f2:e4:36:c9:f3:ff:f5:
34:80:55:e8:9c:2f:7a:68:c7:c3:58:57:29:d8:f8:43:9f:2a:
af:4b:99:96:fd:c0:02:25:bf:8b:ed:94:17:5f:51:c7:41:bb:
db:30:6f:60:60:87:02:fb:ae:77:85:2a:89:ee:9f:5a:8c:51:
4c:75:1f:c4:7f:90:7d:92:98:c4:d3:bd:c1:f3:bc:bc:7d:7a:
6a:c8:fc:9e:fd:01:cc:30:3c:94:dc:58:ee:f1:86:50:af:c6:
ca:98:ac:62:55:30:70:d6:77:1d:51:f2:92:20:c2:4f:02:f8:
c8:4d:14:f4:a1:bf:6d:62:da:bc:56:4c:2a:3a:12:75:b0:0b:
93:21:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:54 2026 by rpki-client