Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: fXMp2XJ2lzj6enMxmhXEg6gF5ZBywRpiBZw9DIVIebQ=
Subject key identifier: E0:0A:6F:87:F7:80:B2:54:92:40:86:C9:4D:AC:CF:07:0F:3F:A1:8F
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 01A183073E6DB7E67C3F74A8DFF96C96FE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0F12
Signing time: Wed 28 Oct 2026 15:00:52 +0000
Manifest this update: Wed 28 Oct 2026 15:00:52 +0000
Manifest next update: Thu 29 Oct 2026 15:00:52 +0000
Files and hashes: 1: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: pGxIDF2x97xvR0LZZ42GIN4OlOU/ht+ZutPqM4lNHss=)
2: _buqN6yYSytWYhTqNPA1kKSIBNk.roa (hash: c6bP7C3wNXIAyK047P+noenWK/m8RQLknUBgsv8PDgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:3e:6d:b7:e6:7c:3f:74:a8:df:f9:6c:96:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Oct 28 15:00:52 2026 GMT
Not After : Oct 29 15:00:52 2026 GMT
Subject: CN=e00a6f87f780b254924086c94daccf070f3fa18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:73:32:8e:95:ad:54:80:be:d7:9d:21:be:
8b:f4:ae:9c:f5:b2:b5:0e:75:94:46:9a:4a:90:b2:
a3:be:e8:0c:ee:15:06:aa:03:2c:6f:9d:64:3f:4f:
a6:58:44:73:91:76:8f:74:cc:5d:4e:d6:17:da:3c:
ea:75:da:13:28:a9:5f:2e:9d:78:6d:77:42:b0:43:
27:e2:af:ec:9e:ef:0d:2d:33:82:c6:5d:a6:0d:42:
84:54:b6:30:11:27:de:26:88:36:4d:f4:22:81:97:
63:14:22:46:ff:32:b4:82:f8:c2:c6:05:14:15:b6:
a2:ac:b5:d6:a6:dc:be:c7:25:8b:94:17:ef:3c:eb:
04:61:9c:16:9f:a7:69:3a:53:4e:8a:f0:6e:8d:1e:
02:18:a1:82:ad:9b:5d:8a:22:50:e7:0f:5c:9f:9c:
d1:47:43:cb:49:86:dd:6a:22:96:5a:a3:35:4e:27:
31:69:3c:a1:87:b3:86:a7:c8:3b:b5:5e:a9:e9:ce:
79:22:db:9a:ae:72:50:da:1b:6a:78:60:f4:77:d5:
a0:54:2a:09:38:ad:55:c7:3a:55:da:46:d1:97:5a:
6c:20:28:7f:ca:f6:de:ad:4c:fa:fe:fd:3e:1f:7b:
e9:c3:61:55:11:eb:e1:2a:03:0d:5f:72:9d:6a:05:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0A:6F:87:F7:80:B2:54:92:40:86:C9:4D:AC:CF:07:0F:3F:A1:8F
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2f:47:3e:0f:ad:e4:4e:86:5a:63:05:f1:e4:4a:92:cc:62:
d1:84:e3:93:ce:c4:6d:ed:40:57:96:7f:04:a2:32:80:b6:ff:
94:6b:54:50:64:4c:8e:4d:1d:4c:8f:45:8a:03:7c:e5:36:6c:
32:fa:c8:33:94:fc:53:c4:e7:e5:dd:28:ef:d2:fd:5d:c4:2a:
8b:3b:85:76:64:b5:da:19:c7:31:f8:1e:83:21:fd:0b:37:01:
60:0a:34:d9:3f:f6:2b:be:a4:1b:c4:ca:84:4e:04:02:34:6b:
eb:44:db:4e:5c:bb:9e:62:59:87:19:f2:24:ee:4c:fb:00:fc:
69:52:e3:8f:f2:f6:b9:8b:8b:a6:19:aa:f5:b0:06:d8:c1:c1:
aa:d0:71:29:86:3f:8c:b6:b3:1a:27:a9:f4:5a:75:25:a4:6e:
c0:95:9d:93:41:da:26:77:50:19:2f:40:b7:7a:2d:7c:62:0e:
0e:8f:99:3e:ce:23:49:b5:79:d7:50:c4:ee:2a:86:dd:7d:4c:
0a:44:66:7a:82:b7:e9:3a:32:84:5b:bb:d1:9c:ee:35:0c:8a:
b6:c6:77:c0:af:27:8f:e8:ea:eb:40:9c:04:3d:90:c5:d1:f1:
f2:03:24:9a:a4:3d:3b:78:12:50:0f:f2:74:dd:e1:0b:3a:7f:
93:ed:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:58:15 2026 by rpki-client