Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: KNr+g237n6HesNlV0yracKRTLygPWiFsB2fJhLIE1zA=
Subject key identifier: 42:8F:DD:67:BC:D2:F2:87:93:5E:04:FF:F1:EF:DF:30:1C:5F:66:11
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 01A10B4AE303D5F1B68303C1904C8074D11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 115D
Signing time: Mon 05 Oct 2026 09:00:19 +0000
Manifest this update: Mon 05 Oct 2026 09:00:19 +0000
Manifest next update: Tue 06 Oct 2026 09:00:19 +0000
Files and hashes: 1: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: c+qfFyvUvWVBt5YS6ZovHVQb9gd4DZ+i+F7NkzMjYqA=)
2: XSVXot1mrN9KrobWqSb7ZJcFIHo.roa (hash: XG35l+m4PstJ+C55dywjRW/YEAH7VQspHcuyVm5s0zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4a:e3:03:d5:f1:b6:83:03:c1:90:4c:80:74:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Oct 5 09:00:19 2026 GMT
Not After : Oct 6 09:00:19 2026 GMT
Subject: CN=428fdd67bcd2f287935e04fff1efdf301c5f6611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:4c:c1:15:ce:16:c3:be:7c:64:c4:a6:a3:
22:52:c2:ea:2e:94:ff:e8:03:c0:c7:6b:42:49:e4:
5c:64:f9:4f:2c:d8:5b:8a:b0:81:81:4f:fe:65:fb:
ff:09:63:7e:5f:88:86:2f:61:6d:7c:24:82:3b:0f:
a6:a5:ed:28:0b:29:af:14:71:61:6d:04:5d:4e:ec:
b1:63:90:e8:fd:ea:96:8f:3d:2a:6c:f1:f4:24:d9:
55:02:d9:28:d0:00:ed:e4:87:ae:f3:e7:5a:ce:d0:
13:df:ae:64:c7:95:5f:79:cd:c8:c1:81:f3:d6:77:
9e:6b:f9:75:3b:fa:94:f9:3e:82:fd:5f:85:f3:3c:
28:24:57:25:15:e8:77:ca:86:f4:38:b8:a5:3e:8e:
95:50:06:68:2b:5b:2a:9c:09:6d:d6:b0:5b:0e:f1:
93:a2:3b:04:32:9a:fb:13:0f:e8:20:aa:3a:c9:6a:
62:95:4f:cf:e6:df:5f:47:ba:3f:84:fb:a6:b9:42:
e7:a4:a6:a3:a3:8a:9c:f9:ce:b4:23:bb:31:95:33:
84:47:e0:36:7c:a4:ca:57:9c:64:18:f5:9d:d2:f4:
03:01:ef:c9:cc:ff:fb:11:99:9c:f5:f2:45:62:16:
80:c5:b7:54:ff:90:3d:42:9b:fb:93:e3:e1:2a:0e:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:DD:67:BC:D2:F2:87:93:5E:04:FF:F1:EF:DF:30:1C:5F:66:11
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:54:da:04:8e:51:a5:1c:6c:f6:40:01:f8:32:07:02:0e:
fb:c1:cc:b3:4e:a7:6d:43:53:10:98:59:9b:90:bb:dc:9b:f7:
dc:24:f8:24:5a:96:fb:0e:63:5b:92:23:30:b7:81:91:50:b2:
2e:f5:8a:c3:ee:9d:30:14:5d:a7:0a:68:2d:6c:4d:7d:df:26:
45:b9:d8:b6:8f:a7:8e:de:77:3e:5e:e0:62:0d:a5:27:21:60:
de:39:c8:a0:8e:68:9f:41:b0:ec:26:20:11:57:21:1b:cd:1d:
8c:7a:0b:22:6f:94:22:72:a0:e1:23:d4:5b:29:bf:da:df:19:
ba:e7:91:d2:cf:fd:cc:be:3b:f8:fc:1f:90:1f:bb:3c:9b:55:
27:c1:1a:8f:41:44:a5:36:0e:ac:e9:92:83:84:7a:18:9a:3c:
3b:21:ac:31:aa:5e:09:3a:65:50:67:95:f1:61:3c:04:56:b9:
63:33:1c:d9:f7:b0:ac:13:3f:ff:fe:8c:61:22:ab:44:29:6d:
db:1d:f6:1c:0c:45:cb:5b:8d:db:37:ba:43:d0:29:a3:e6:1c:
36:07:c8:6b:45:eb:20:32:79:67:f9:9f:19:26:58:f2:5f:ad:
98:95:eb:08:7e:7e:07:bc:85:7d:80:86:68:70:0a:1d:f0:51:
c9:c5:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:08:00 2026 by rpki-client