Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: yTNb6mlxx+9UsAaK5seblTqRsx0FXDHvpomRPVHbkgE=
Subject key identifier: 83:CB:4D:30:37:24:D9:1E:09:6B:18:55:76:5F:94:09:DA:D9:E6:EB
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 01A0E4E2C63CEF3BD335CA30FA81AAFED655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 22:01:02 +0000
Manifest this update: Sun 27 Sep 2026 22:01:02 +0000
Manifest next update: Mon 28 Sep 2026 22:01:02 +0000
Files and hashes: 1: bY0US8PQsJwgwk4sBH5OxzcNIwA.roa (hash: J/0CXCG1xKhKkenaNTif5Fbq2gKs6zO5wkvBXdQkbs8=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: YROLwupdF5cjIQtfxAMMQBTYKjqQ1Sjjs7Mm2xx920A=)
3: wMMwxntmfG9n-J-6LL-v_AMs0TQ.asa (hash: lYdgJ7RBc0yUK0B4uDb9sHh7jptaek0nvYlwaOYxRcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e2:c6:3c:ef:3b:d3:35:ca:30:fa:81:aa:fe:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Sep 27 22:01:02 2026 GMT
Not After : Sep 28 22:01:02 2026 GMT
Subject: CN=83cb4d303724d91e096b1855765f9409dad9e6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:de:33:c6:65:de:d1:bd:0e:41:b5:86:ec:
b3:10:fc:da:b5:04:04:06:b0:ad:0a:af:57:eb:95:
a8:7f:e3:33:e1:90:0f:94:bd:a6:01:43:62:9f:68:
11:ae:13:a9:e1:7b:70:69:c0:8f:15:3f:62:d4:c7:
b5:d2:dd:62:e2:c4:ec:4d:f1:f9:f6:3c:d5:ee:5f:
45:42:fb:38:ef:bf:e8:08:57:1f:24:58:ed:26:d0:
ff:cf:d2:1b:60:ae:40:4e:04:78:ca:cd:60:88:60:
65:19:93:59:84:3a:5a:d5:b5:f9:f8:c3:0e:7c:17:
dc:86:8d:00:ae:0e:c6:5c:20:21:1e:5c:3c:00:28:
c3:b3:d2:7c:fa:e2:ab:e1:4b:d3:ed:26:e4:9d:85:
9d:8b:10:26:59:e4:a6:99:c0:f2:08:57:94:3f:b3:
61:c7:40:51:3b:d3:b3:d4:b4:6e:86:56:ab:20:e4:
ef:24:df:83:cb:9f:77:4d:6b:60:b3:82:c9:a1:77:
66:15:f5:a4:89:d4:69:14:97:b4:6f:34:e9:ce:5d:
33:ad:9e:95:b2:a9:82:b7:1b:79:75:15:88:af:9a:
e6:4b:bf:05:01:ae:b0:25:c1:b6:27:5f:4a:3a:ab:
81:4c:1e:f0:2a:d1:aa:16:ff:31:c9:e2:3b:bb:68:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:4D:30:37:24:D9:1E:09:6B:18:55:76:5F:94:09:DA:D9:E6:EB
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:eb:bf:55:db:9e:c7:82:62:50:58:aa:48:70:57:fe:6b:
d9:21:60:33:41:7f:eb:20:f2:b2:8a:5f:83:1e:2f:9a:06:6b:
e2:34:9c:dd:fa:68:72:c3:80:59:db:c9:33:de:2a:8a:41:6e:
f3:6b:3e:56:d2:39:46:71:bf:15:df:29:02:1e:01:36:5f:4f:
e1:7b:41:0d:e7:ba:fc:cf:a9:fa:c4:7e:21:2d:b2:51:37:e1:
75:dc:04:dd:74:60:bb:8f:c5:cb:f0:21:cb:0e:34:0a:23:93:
b1:a7:30:3c:b9:bc:47:9d:ad:83:55:b8:db:19:04:c2:8c:87:
96:a1:53:60:56:fb:93:03:dd:f4:e5:26:42:8d:56:8d:1b:83:
dc:65:22:db:1e:49:6d:af:99:39:83:f7:42:2c:d2:29:2f:46:
7c:eb:b1:a0:bd:0e:6b:8f:1a:68:48:a7:39:db:6b:bf:98:53:
14:31:02:8e:42:11:13:51:d8:da:6f:7f:cc:e6:73:0c:25:ad:
4a:60:18:19:90:ea:af:fb:4d:cb:b2:2d:6d:01:19:d7:42:f0:
fa:53:ef:61:dd:12:0e:4f:b7:3b:87:db:08:3d:95:02:05:29:
22:40:d0:e6:1c:25:24:a2:22:21:7c:54:77:e4:e2:23:5c:41:
c3:a9:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:33 2026 by rpki-client