Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier: QknfJcKAD+puZ5hNqTs6WGuJKAyQW11MDIdiHJaag9k=
Subject key identifier: 9E:17:FB:04:78:51:54:99:E2:0B:C8:3B:0C:13:97:1B:37:47:45:CD
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial: 01A179285F7716E37CF3E20D7FF2C8414DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number: 0356
Signing time: Mon 26 Oct 2026 17:00:51 +0000
Manifest this update: Mon 26 Oct 2026 17:00:51 +0000
Manifest next update: Tue 27 Oct 2026 17:00:51 +0000
Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: wYAfmVbd9Ga1pLTvPoNQXhnwQemv5zidJCoKh6xm+Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:5f:77:16:e3:7c:f3:e2:0d:7f:f2:c8:41:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Validity
Not Before: Oct 26 17:00:51 2026 GMT
Not After : Oct 27 17:00:51 2026 GMT
Subject: CN=9e17fb0478515499e20bc83b0c13971b374745cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:12:7d:1a:91:bc:16:c9:be:6d:01:57:6c:
60:6e:72:5f:1d:38:a5:89:a9:5f:18:07:96:dc:59:
cb:60:5d:10:fe:9b:88:ab:0a:60:60:ec:a6:12:43:
32:84:aa:5d:48:31:08:cd:2a:52:dd:f1:46:1b:21:
d2:98:10:27:0a:e8:4f:18:84:36:4b:8b:1a:ec:68:
da:3c:c6:30:97:25:8f:bb:2a:b8:8d:40:ef:8d:a4:
e7:e9:70:91:22:a0:c4:21:d2:f2:ba:5c:6b:c2:c1:
38:ce:1a:d6:fe:bc:64:b2:94:6f:2b:b9:f1:ef:7c:
fe:dc:8c:96:38:dc:80:84:c9:81:9f:17:5b:d4:9e:
a3:69:18:d1:b8:a2:ca:c4:a5:50:2f:e2:c4:ae:d4:
90:c4:8a:a4:77:77:e1:61:09:76:14:44:9a:43:11:
33:cf:aa:76:c1:08:87:ef:93:4b:13:f4:9a:d0:4a:
aa:75:20:05:e5:46:02:78:23:89:a4:67:27:89:ce:
4b:c9:08:5f:65:d7:bf:fa:64:a0:38:71:df:91:b6:
88:21:13:fe:53:aa:44:f6:c9:c8:7d:51:2b:fb:53:
0c:3b:55:6c:46:31:be:9b:9d:51:a8:e2:17:7a:23:
3f:3f:1b:76:b5:06:c6:da:1c:2b:33:24:e0:14:de:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:FB:04:78:51:54:99:E2:0B:C8:3B:0C:13:97:1B:37:47:45:CD
X509v3 Authority Key Identifier:
keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:16:6c:4a:8e:52:34:79:e7:4e:7f:08:ad:e4:c3:f8:9f:
21:01:d8:4b:4d:95:88:35:de:3e:0f:47:e9:85:5a:65:5a:f2:
b0:2d:97:a7:fb:21:13:d2:21:42:6b:1d:1b:1e:f7:4b:46:e7:
5f:9f:74:e6:63:5c:cb:63:2d:71:73:93:7e:c0:af:13:70:37:
7e:28:69:44:17:57:2b:e0:85:ef:b3:8d:72:a9:35:f0:5b:09:
c5:b3:80:77:dc:91:f6:19:bf:62:59:86:68:60:f5:c6:af:f4:
db:c6:51:c8:09:70:f0:92:11:1b:d0:ea:33:a5:38:02:e8:74:
1e:c2:23:1b:96:59:40:b1:53:43:2f:25:46:04:3e:02:10:73:
e5:77:a3:7b:5f:dd:cd:33:68:6f:2e:e4:88:e2:29:02:18:06:
43:53:f9:79:cd:b8:b9:69:f7:fd:35:c5:cf:a6:c8:b3:da:c8:
07:9e:c5:9b:53:52:68:11:f5:11:92:9f:35:18:5a:95:8c:14:
e1:52:77:e1:04:3a:43:5b:eb:3b:35:4f:00:a6:3e:38:75:f3:
a2:c3:3c:cb:bf:be:26:64:b6:bd:2a:1e:e6:f3:14:f1:fd:0c:
6f:95:b5:ff:1e:58:1a:04:c8:61:07:4e:2b:6e:96:52:e2:6e:
6e:8d:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:57:10 2026 by rpki-client