Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
File: MzXvvdFv37A3meob4nnPMzTRuLE.mft (raw, json)
Hash identifier: 2haZ+ItFzXflt8d/CTpl5TuqJXcZUk3/oQFnlp/kHzc=
Subject key identifier: B9:A4:9C:69:09:31:F9:45:5C:DC:57:92:CA:E4:2C:14:FB:00:4F:24
Authority key identifier: 33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
Certificate issuer: /CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Certificate serial: 01A17D3C46338A68F2DD5DE4F7D6F07FCC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
Manifest number: DD
Signing time: Tue 27 Oct 2026 12:01:04 +0000
Manifest this update: Tue 27 Oct 2026 12:01:04 +0000
Manifest next update: Wed 28 Oct 2026 12:01:04 +0000
Files and hashes: 1: MzXvvdFv37A3meob4nnPMzTRuLE.crl (hash: EP/rzWQUKSScAOcJ0V710SsENgo0xOtlBcWb+O3zs90=)
2: g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa (hash: TOrWaXuO5cnSwfcfdr4weZtfskD6uoAqK0dRobZ2NQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:46:33:8a:68:f2:dd:5d:e4:f7:d6:f0:7f:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Validity
Not Before: Oct 27 12:01:04 2026 GMT
Not After : Oct 28 12:01:04 2026 GMT
Subject: CN=b9a49c690931f9455cdc5792cae42c14fb004f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:d5:3f:ca:70:8c:7c:fb:c9:c0:f2:05:c1:
c3:da:2c:5b:89:b8:9d:e0:d1:65:6d:56:c6:23:a9:
c8:b1:f8:3b:44:de:d2:57:1c:59:4d:48:20:3e:ab:
f3:b5:c0:42:12:62:88:f5:db:b2:66:63:f6:ac:94:
79:3c:17:cc:6c:8c:24:8b:8e:34:7e:57:b3:01:31:
7d:1e:67:fa:d0:f4:c9:bb:d1:f5:66:a9:44:62:22:
3b:46:f3:3c:b9:7a:a2:25:ce:da:e4:b5:6c:64:0e:
c8:ea:a2:3e:46:27:cb:d7:e6:c4:c2:0b:d4:46:82:
cb:ae:8e:70:1d:ae:55:e4:78:6a:77:8f:5c:cb:20:
f5:20:1b:17:fd:a8:8d:65:4e:73:7e:46:d0:08:79:
88:c5:f9:88:d4:1f:69:e4:cd:ed:66:ce:df:7a:51:
a0:d9:1f:e1:07:2e:66:14:06:a2:f5:d2:c6:61:b9:
41:e4:26:e4:b1:9e:2a:44:20:b1:9c:60:59:52:ab:
c0:07:2b:ec:02:83:b0:b6:f2:5e:c1:53:ad:4c:c3:
f5:27:fa:36:16:d0:d3:76:46:9f:9b:5e:4f:31:65:
09:4a:57:77:d4:e3:18:e0:d2:de:7d:89:0c:67:1a:
69:2b:36:34:64:d8:9c:41:ed:3b:b6:32:0a:10:97:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:9C:69:09:31:F9:45:5C:DC:57:92:CA:E4:2C:14:FB:00:4F:24
X509v3 Authority Key Identifier:
keyid:33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:69:7c:c5:b4:9e:13:53:b6:c2:37:a3:6d:35:eb:79:80:d1:
91:ee:74:36:76:e9:a4:a8:c3:6b:00:e7:e6:74:4a:2f:14:0b:
5a:1d:6b:26:36:b6:4b:7a:ab:bc:3e:cb:5f:be:2f:a7:3d:51:
c7:03:8b:9f:fe:04:35:f3:d3:f5:d9:8c:5c:01:1f:42:8c:64:
0f:45:56:47:4c:31:81:60:95:05:c7:81:d4:c9:1c:6f:21:a9:
91:6f:3a:1f:04:8d:a1:20:d8:f6:c1:b4:5f:67:ef:7f:ea:83:
55:72:09:6f:e4:0b:3c:d4:c8:ed:65:ae:2c:d8:66:2b:92:2e:
0d:34:26:7a:6d:ad:a3:2d:ff:4d:1c:8e:85:6c:29:63:4a:07:
65:ca:2c:f7:1b:81:89:c4:73:9d:d3:a2:ec:ac:d1:cb:b9:57:
10:f3:95:ac:a1:ab:72:b6:c9:40:ef:2f:ce:50:2f:90:ac:d9:
87:62:b7:95:a3:37:cb:7b:8e:e7:c2:70:1f:90:21:73:da:e0:
74:54:59:6b:7f:1b:94:44:37:27:78:8a:20:22:56:ee:78:11:
f3:23:95:1b:34:08:ce:0a:0d:f8:98:76:0e:3a:21:9b:46:08:
72:3b:49:c7:4f:7f:2e:7e:d5:78:9a:83:fd:54:59:11:71:ae:
f5:eb:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:52:11 2026 by rpki-client