Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier: WyZfH/tg+hf73pZYY0JDPQnQipoM9LwMOybYyomlw+8=
Subject key identifier: 15:5C:56:A1:3A:84:89:4F:45:76:D1:F7:34:C5:32:D3:BF:22:58:B8
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial: 019F84FAD7E575D488310F61F4A9F85D4EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number: 0253
Signing time: Tue 21 Jul 2026 14:00:59 +0000
Manifest this update: Tue 21 Jul 2026 14:00:59 +0000
Manifest next update: Wed 22 Jul 2026 14:00:59 +0000
Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: YOEWNTCbz7rEauazEbVCtD7MghiX4LhU4qnMAFvEIjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:d7:e5:75:d4:88:31:0f:61:f4:a9:f8:5d:4e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Validity
Not Before: Jul 21 14:00:59 2026 GMT
Not After : Jul 22 14:00:59 2026 GMT
Subject: CN=155c56a13a84894f4576d1f734c532d3bf2258b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:8c:52:87:5c:3f:8d:9c:84:0b:3f:32:3f:
36:28:8d:9d:12:f0:0e:36:0d:9a:b0:87:f5:ba:f2:
a2:76:00:12:cb:a4:bb:45:af:93:57:0d:32:cf:d4:
26:77:c5:39:ae:9d:f7:65:49:7c:3f:4a:e0:ca:88:
43:7e:51:1b:20:20:38:ab:b8:93:b7:71:b6:44:7a:
c6:40:c6:ee:ea:ca:77:bf:b1:bc:34:d2:60:8a:d1:
42:d5:9c:ec:47:dc:68:80:0d:cf:8b:8f:17:5e:ac:
63:48:4b:12:16:8f:23:9b:bb:b9:0c:84:da:75:fb:
ff:a8:6b:56:77:69:ad:7e:49:62:21:39:ed:4b:1e:
8d:d9:97:44:9d:71:73:24:1a:a1:3f:cc:0f:e9:b1:
65:d0:ca:1a:04:23:e4:6f:d8:77:75:9a:0e:43:a7:
15:2c:cc:53:f5:07:dc:f0:66:bc:41:34:b4:28:56:
eb:f9:28:38:f9:f9:9c:d9:f6:45:d3:f7:48:c3:e5:
55:c1:32:c1:72:a5:84:de:7e:88:96:94:a1:0d:b8:
c9:96:3a:5d:e1:2e:a9:3a:4d:d7:42:5e:02:12:71:
fc:32:92:05:d1:e4:15:2d:95:2d:b2:90:b7:a5:5c:
da:f0:2c:43:bf:52:f9:88:90:f2:7f:46:18:49:3b:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:56:A1:3A:84:89:4F:45:76:D1:F7:34:C5:32:D3:BF:22:58:B8
X509v3 Authority Key Identifier:
keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:59:e7:3c:6f:b3:c8:47:a5:84:4b:dc:37:f2:3a:68:23:
81:ec:80:ed:15:70:8b:d4:ed:db:22:c4:74:ae:24:74:be:51:
c7:2e:a8:92:a6:ce:e2:44:63:15:62:43:d2:1b:ef:9a:15:7b:
7b:dc:66:89:7b:2c:b5:0a:f2:a4:01:80:9a:23:3e:6f:fd:8f:
5e:64:db:b4:a5:a6:74:2a:a5:aa:02:5f:aa:f4:04:49:e7:5d:
d8:6e:fa:3e:bd:f9:f4:f8:41:58:f0:0a:f4:00:22:eb:c6:91:
74:89:21:e1:00:74:51:e3:b4:c5:a0:1b:f8:70:fe:3a:69:4e:
ce:e1:de:69:04:d7:d3:f3:fe:ba:e6:fa:1a:9a:ca:df:76:2e:
91:bc:4d:98:4e:62:a8:44:af:f3:b3:f1:c6:4a:14:c9:86:45:
98:e6:b8:04:19:05:c2:97:72:0e:bc:12:c1:0f:a5:85:fa:7d:
8b:fc:41:54:4e:96:8d:1d:08:ac:98:07:06:54:e2:ee:b0:7d:
a8:4b:3b:ad:b7:6b:5e:83:df:7f:05:21:43:b8:dc:39:30:7c:
a1:f5:be:ff:49:16:ed:07:11:72:a1:20:6b:46:f7:97:fb:53:
f6:da:af:91:e0:fb:69:57:ab:c2:53:64:60:79:44:e8:ef:fb:
4a:f1:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:27:52 2026 by rpki-client