Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier: VUNXbIh0Gbxt0xZcG2fKaCQd7CRdK2/qQfNP/azWgvs=
Subject key identifier: 7D:E0:78:1C:6D:8A:B6:08:5C:3A:6F:7E:43:80:0F:28:F3:CA:24:51
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial: 019D39E5A01D2EA8D5691574B4F6320E32CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number: 0123
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: JOocMa4O9/2vHROUC0rqnMD+TvARquwHOZ0qgsIk89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a0:1d:2e:a8:d5:69:15:74:b4:f6:32:0e:32:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=7de0781c6d8ab6085c3a6f7e43800f28f3ca2451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:bd:69:02:a5:fe:b6:41:16:26:1b:a5:39:
4a:9f:53:c1:c2:1d:e3:78:94:3e:48:3b:98:4c:a6:
aa:b8:37:90:13:f6:83:5e:fc:93:36:24:76:95:94:
25:f2:21:d2:34:81:ec:9f:e5:fb:bc:d1:a6:2e:2a:
98:59:d3:6d:7e:fe:f3:75:a7:cb:6d:da:76:a4:bb:
6d:e9:a6:64:3b:d0:4d:2b:c4:62:3c:23:68:c6:f1:
13:50:42:cc:00:a8:3a:19:18:95:31:d9:12:ed:a0:
51:64:36:d4:d0:41:b1:11:21:0b:f4:e2:fa:e5:cb:
a8:e7:1f:70:b9:ae:55:8a:1a:fa:28:c9:7e:0c:49:
29:85:34:33:1a:03:45:cc:05:71:7f:56:72:f9:3b:
0b:f6:9d:93:2d:ef:cb:7a:d3:96:1d:46:ee:d1:fa:
5e:5e:1e:73:e8:f2:2d:96:79:19:12:b1:27:d8:c0:
fd:64:c3:8d:d5:c9:17:e4:09:45:8a:87:1f:dd:37:
23:e9:fa:90:52:7d:c2:dc:9c:e4:91:ca:fb:33:29:
60:12:9f:b2:2f:c5:86:4d:2a:50:f8:4a:56:16:2f:
05:b1:27:b7:da:11:18:fe:fe:ac:9f:9b:65:2f:a9:
82:7d:40:53:8b:4f:88:67:dd:2d:47:f6:3b:f0:64:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E0:78:1C:6D:8A:B6:08:5C:3A:6F:7E:43:80:0F:28:F3:CA:24:51
X509v3 Authority Key Identifier:
keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:f1:55:88:66:29:3f:5c:2c:2d:18:44:e5:cd:5a:f8:5b:
d0:ae:a8:e4:a4:d4:64:0e:42:92:e4:fa:ff:af:8d:bd:3e:78:
c8:0b:f6:70:ad:c9:89:31:7e:07:d9:dc:2a:0c:70:2f:59:21:
99:0b:80:4e:dd:bf:5d:f6:42:2c:a6:31:2b:84:f1:c2:26:c3:
7a:f9:60:0d:14:ea:b1:83:8a:4b:b2:1f:4a:95:2f:f6:c8:ed:
e5:78:18:6d:0d:e9:3b:55:56:76:3b:8c:c5:7b:ee:bb:b4:e6:
a3:a7:4e:26:0a:40:21:b5:eb:6f:e1:0c:90:7a:ef:e8:e7:13:
97:c9:ee:08:f4:f6:ef:b0:a9:80:05:d8:56:d6:32:fa:b5:60:
0f:06:4e:08:99:14:fb:c9:75:22:87:1b:73:2a:08:19:fd:ca:
36:e2:c7:10:4b:8b:82:65:47:0b:e4:81:cb:b1:1c:56:74:5a:
e8:4b:c1:5f:08:eb:53:e8:76:61:b7:4a:07:d2:f0:0b:0c:ba:
bc:29:e6:36:22:79:1d:23:ba:a2:69:1d:b9:d2:c4:91:2d:87:
6d:83:4a:02:0c:e7:1e:8b:1d:34:73:f9:48:8b:e1:0a:79:3e:
27:dd:86:7c:fe:5f:7b:64:41:12:db:3e:55:cf:21:23:d9:1e:
aa:4e:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:40 2026 by rpki-client