Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
File: MzXvvdFv37A3meob4nnPMzTRuLE.mft (raw, json)
Hash identifier: htZrxQ5bOZHMGHR+Bvow8UVKPzZk+rNS3NFrAnDZpPQ=
Subject key identifier: 30:5A:3F:D9:BC:EB:CA:56:87:E7:94:0F:8E:38:7A:24:9D:5A:C1:8E
Authority key identifier: 33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
Certificate issuer: /CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Certificate serial: 01A087F976D08BB84E48E3E7CF33A5947041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
Manifest number: 5E
Signing time: Wed 09 Sep 2026 21:01:08 +0000
Manifest this update: Wed 09 Sep 2026 21:01:08 +0000
Manifest next update: Thu 10 Sep 2026 21:01:08 +0000
Files and hashes: 1: MzXvvdFv37A3meob4nnPMzTRuLE.crl (hash: tILq7zNCi/n9WDN8S9ASP4ehkYQDxI2WkdUn+1j8MMQ=)
2: g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa (hash: TOrWaXuO5cnSwfcfdr4weZtfskD6uoAqK0dRobZ2NQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:f9:76:d0:8b:b8:4e:48:e3:e7:cf:33:a5:94:70:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Validity
Not Before: Sep 9 21:01:08 2026 GMT
Not After : Sep 10 21:01:08 2026 GMT
Subject: CN=305a3fd9bcebca5687e7940f8e387a249d5ac18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:2e:fe:cc:15:57:e3:8e:6f:d8:74:be:f9:
4c:de:e1:6a:04:34:6c:a1:7e:d6:79:4f:c1:35:e2:
e6:53:77:95:80:96:de:b2:87:80:de:2e:c5:cd:eb:
e1:62:eb:49:40:fb:af:72:37:33:d1:69:5d:9c:99:
7c:9e:4f:e2:6b:d2:3c:76:aa:80:a3:43:d3:82:07:
c6:dd:d5:39:67:f2:1f:49:62:a5:c9:99:40:cc:2a:
7d:5a:49:52:68:14:ee:83:97:5c:ee:22:cd:73:7d:
8b:95:57:20:ea:d6:87:26:b9:4d:66:1b:48:16:5c:
5a:d3:54:bd:84:ce:86:5a:64:64:2e:93:70:05:b8:
5a:b7:af:ee:a6:d9:fb:1c:98:57:9a:64:74:35:29:
34:b5:4a:a0:73:e1:7e:d2:03:8f:7f:23:a0:b1:ab:
43:04:07:3f:96:61:92:06:53:f0:49:0d:19:4e:98:
16:a9:c3:cb:18:dc:70:50:c4:72:01:ab:d9:c6:f2:
64:aa:44:77:8a:15:d6:5a:d0:35:c8:d3:3f:c2:34:
6b:11:e4:81:31:6d:53:93:4a:22:e6:82:53:7b:49:
3d:de:33:d4:72:00:d6:5a:c0:32:21:a8:29:59:e6:
4f:5e:d8:31:ef:09:25:17:d8:36:7b:70:b3:1f:5b:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:3F:D9:BC:EB:CA:56:87:E7:94:0F:8E:38:7A:24:9D:5A:C1:8E
X509v3 Authority Key Identifier:
keyid:33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:ef:52:d8:21:70:13:9c:36:5e:1c:71:b3:7f:5f:d9:8c:
09:46:5f:d7:f9:c3:75:09:fa:09:da:0f:61:64:50:e7:45:44:
4a:7a:8b:39:25:51:f9:af:9f:82:68:ca:59:ee:df:27:c1:44:
0b:67:cc:6f:a8:1d:60:d7:6f:d3:74:ba:97:af:78:3b:be:9c:
86:8a:23:2e:20:d7:51:66:41:ad:84:0a:5d:60:2a:79:99:71:
a4:41:1b:28:96:80:3c:ab:07:15:de:e9:c8:5a:9f:8d:a0:1d:
f5:8f:7a:e5:10:d8:56:b5:62:7f:6f:c1:67:63:f0:6e:79:c1:
78:3e:c6:e8:b1:7c:a4:a8:04:a3:04:ab:fa:e4:8d:e7:e8:ec:
4c:e1:f1:e0:ce:b6:43:92:d3:4f:16:0f:75:d5:04:e3:5a:d3:
c5:9d:5b:49:9f:92:31:6f:3a:63:5e:cc:80:f8:2e:37:b2:0f:
d0:49:ce:40:62:48:50:23:5c:fc:c3:09:93:58:84:67:91:92:
af:2d:8e:da:e8:f4:bf:e4:fc:73:43:f9:0e:1e:0a:24:13:29:
54:be:37:21:55:02:ea:a5:45:c1:cb:32:7f:1f:82:a1:87:44:
b8:07:24:1d:d5:c3:f3:b9:7a:9e:47:3d:5d:40:ae:76:f7:82:
59:71:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:39 2026 by rpki-client