Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: FmqnulinAGNdn7kqZgJgFZMgoYAT9KV5hU7WVY0+ZXg=
Subject key identifier: AD:EE:4A:6C:C7:D3:AE:7B:E2:26:91:D3:A7:D4:E4:CF:2C:DF:58:63
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 019D389C13A3CE438F6B2FEC95820FCEBCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 0756
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: vQXYEBQ//hkoJ/PpI5Zyr2Y4lQQopduRo8NXT817HD0=)
2: qqoPemYi4_pyOzOVoO62_Uat0so.roa (hash: Sdr4R7TpF1P6pqqGJyLye0mNOG4fczQyXXubw1Zcqyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:13:a3:ce:43:8f:6b:2f:ec:95:82:0f:ce:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=adee4a6cc7d3ae7be22691d3a7d4e4cf2cdf5863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:26:8b:11:c7:a4:d8:af:6a:c4:d3:77:3b:
f1:83:e2:d2:89:9f:31:8d:2a:08:45:51:b6:1c:79:
e2:9a:e5:dc:e7:c7:75:a9:99:d1:08:b6:04:3c:65:
84:79:c6:e3:ef:ce:17:ab:a4:34:59:d4:46:d6:54:
ac:2a:75:bb:b0:0a:fd:8e:cd:31:c8:cf:a7:dd:de:
8f:8a:00:49:aa:1a:8d:3c:6e:08:b5:2f:1c:91:02:
d1:33:46:7c:83:0c:83:e6:93:0c:cb:aa:1b:cb:fb:
8e:44:68:06:61:9e:51:61:2e:ed:8e:4b:2d:47:93:
64:07:ee:bc:73:3e:3e:4b:01:a2:2b:f4:eb:9e:07:
99:74:75:05:3d:e9:30:9a:6b:c8:03:7b:b5:2b:e1:
fa:85:79:67:7a:1f:96:48:5f:32:ba:4f:df:c9:72:
2e:e3:99:3d:06:b5:b0:91:59:e2:d3:07:8c:39:5c:
a7:92:cd:32:96:36:96:9f:d0:9a:26:0a:b8:5b:94:
b8:04:94:07:6b:bd:11:a4:f5:af:c9:e8:ec:ac:85:
f0:27:18:00:fa:69:a1:31:ac:bb:c2:8c:6e:09:50:
e7:52:1c:4e:00:7a:84:41:31:35:2f:fe:b3:05:d8:
97:70:4c:50:10:9a:64:16:97:27:13:52:d1:56:50:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:4A:6C:C7:D3:AE:7B:E2:26:91:D3:A7:D4:E4:CF:2C:DF:58:63
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d7:70:d3:02:03:b3:48:95:8f:52:72:88:b3:7e:22:40:20:
7b:ed:6e:e7:4a:70:d3:83:f3:6b:8c:83:20:92:72:96:8d:e2:
28:a3:8e:f6:e5:70:5d:bd:fd:4f:3c:39:4c:53:0b:a7:d5:60:
4b:60:72:f8:f4:10:e7:ca:39:93:d7:d0:8a:a2:00:23:11:51:
0f:63:04:78:d9:84:cc:ad:51:7e:45:2e:77:32:57:fc:97:2c:
2c:d7:87:21:01:e3:c0:45:c3:72:f2:67:51:61:8c:a5:3c:cb:
1e:3f:8a:e7:79:c3:1b:80:bf:61:d5:f6:82:d3:76:7e:82:4f:
43:a7:c7:d4:a5:a9:34:8d:79:f8:52:e2:b9:77:31:07:00:5c:
2a:71:18:0f:52:b1:df:f8:14:1d:f6:b8:c0:b6:07:44:e2:98:
5b:8e:6e:3c:87:d5:47:ad:6f:2f:bb:af:52:dc:6c:e9:87:59:
3f:14:27:66:ec:c2:08:0d:57:3e:65:ae:7c:d2:08:e7:6a:1a:
b8:ab:f1:bf:f4:67:3d:da:bf:79:a1:7b:6e:96:8d:c7:b1:30:
3b:57:a7:22:25:6f:6c:28:6b:95:ae:fc:f6:65:f4:a8:8f:d4:
15:77:3c:3e:5f:2b:52:d6:de:79:58:c7:ff:38:3a:22:3f:30:
bd:aa:ac:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBOjzkOPay/slYIPzry3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
EyhhZGVlNGE2Y2M3ZDNhZTdiZTIyNjkxZDNhN2Q0ZTRjZjJjZGY1ODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2EmixHHpNivasTTdzvxg+LSiZ8x
jSoIRVG2HHnimuXc58d1qZnRCLYEPGWEecbj784Xq6Q0WdRG1lSsKnW7sAr9js0x
yM+n3d6PigBJqhqNPG4ItS8ckQLRM0Z8gwyD5pMMy6oby/uORGgGYZ5RYS7tjkst
R5NkB+68cz4+SwGiK/TrngeZdHUFPekwmmvIA3u1K+H6hXlneh+WSF8yuk/fyXIu
45k9BrWwkVni0weMOVynks0yljaWn9CaJgq4W5S4BJQHa70RpPWvyejsrIXwJxgA
+mmhMay7woxuCVDnUhxOAHqEQTE1L/6zBdiXcExQEJpkFpcnE1LRVlAheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3uSmzH06574iaR06fU5M8s31hjMB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtdw0wID
s0iVj1JyiLN+IkAge+1u50pw04Pza4yDIJJylo3iKKOO9uVwXb39Tzw5TFMLp9Vg
S2By+PQQ58o5k9fQiqIAIxFRD2MEeNmEzK1RfkUudzJX/JcsLNeHIQHjwEXDcvJn
UWGMpTzLHj+K53nDG4C/YdX2gtN2foJPQ6fH1KWpNI15+FLiuXcxBwBcKnEYD1Kx
3/gUHfa4wLYHROKYW45uPIfVR61vL7uvUtxs6YdZPxQnZuzCCA1XPmWufNII52oa
uKvxv/RnPdq/eaF7bpaNx7EwO1enIiVvbChrla789mX0qI/UFXc8Pl8rUtbeeVjH
/zg6Ij8wvaqsQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:11 2026 by rpki-client