Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: VYzIIS4lJDXN1bIYYFJoKCCtD/vRhLa+LgDce9mZZ8g=
Subject key identifier: 02:00:B2:69:9C:82:45:83:34:2D:64:4F:55:68:A5:4B:81:39:44:3E
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 019F9E4C3D1DAF9BC9ADAB21E65B06ECA439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0E17
Signing time: Sun 26 Jul 2026 12:00:24 +0000
Manifest this update: Sun 26 Jul 2026 12:00:24 +0000
Manifest next update: Mon 27 Jul 2026 12:00:24 +0000
Files and hashes: 1: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: RscFXb9xzrjINT++Qptr88bR4+Zil3dMyvAQ+/rIKkE=)
2: _buqN6yYSytWYhTqNPA1kKSIBNk.roa (hash: c6bP7C3wNXIAyK047P+noenWK/m8RQLknUBgsv8PDgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:3d:1d:af:9b:c9:ad:ab:21:e6:5b:06:ec:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Jul 26 12:00:24 2026 GMT
Not After : Jul 27 12:00:24 2026 GMT
Subject: CN=0200b2699c824583342d644f5568a54b8139443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:02:5c:29:d2:aa:47:10:18:78:31:06:29:
f4:29:65:da:82:0d:95:cf:0e:b6:91:15:43:11:79:
fa:ba:f4:64:29:dc:ae:19:4b:21:26:ce:47:44:7f:
22:d8:a6:59:8a:b4:f1:4c:ea:a4:da:e0:6b:ba:5d:
0a:f3:a7:e8:48:4b:69:84:e8:07:9b:f0:e8:b0:ba:
25:de:83:5d:fa:3f:5d:b9:cc:f9:ac:a6:e1:04:db:
de:fc:74:40:2c:29:b3:6c:13:16:5d:0d:a2:28:cd:
6e:02:37:4b:09:70:1b:7c:f1:a7:f1:47:8d:a5:89:
fd:f2:92:26:cb:fe:7d:1c:22:cd:9f:68:90:bc:24:
bb:34:71:b3:9b:be:38:5a:4e:15:ad:e5:0d:b5:55:
38:ff:da:c1:cb:b2:37:c4:d2:fe:d7:34:dd:f5:ec:
85:03:b9:40:02:b1:e7:f6:11:8a:dd:41:eb:09:e2:
ac:d8:5a:de:4f:65:27:df:6c:9b:82:3d:bf:02:c5:
e5:9e:09:75:77:fb:6d:d0:9a:b2:3c:b1:20:17:4d:
91:92:1d:32:4f:04:34:d5:d4:ba:c7:5c:fc:0a:35:
25:23:15:f0:a3:9a:5e:d5:9e:f2:b5:a7:22:2b:5a:
46:04:8a:d9:26:64:29:5c:7c:07:3b:e6:2f:56:af:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:B2:69:9C:82:45:83:34:2D:64:4F:55:68:A5:4B:81:39:44:3E
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:07:1a:1b:33:53:77:34:6a:e5:aa:7e:d2:de:92:91:ff:f1:
ed:b1:81:aa:6f:18:26:72:33:9a:bd:27:f6:b3:bb:20:4d:fc:
fc:18:6d:31:7b:b2:77:2d:11:d2:a4:e7:37:5f:e8:60:2b:cf:
4a:0a:8a:62:70:e1:2f:05:92:28:63:32:b9:ad:30:72:77:54:
e7:c3:86:8b:af:5d:1f:74:f8:e9:11:72:ff:7b:e8:6c:de:41:
87:c7:d1:a4:aa:63:c6:dc:a7:90:c0:c6:13:ca:cd:d7:5a:49:
8c:46:a6:10:bc:02:15:c6:48:97:67:ee:be:11:e2:cb:5d:9b:
1f:69:20:47:70:b0:07:b6:eb:a3:70:01:f7:b6:66:c6:43:e6:
3a:7c:7b:7c:d7:66:2e:bc:52:8e:63:15:9b:3d:48:5e:55:35:
df:47:91:7f:af:52:d8:b9:7a:7d:c3:60:57:e4:e9:d4:a5:3e:
b9:99:da:b6:25:d3:a5:6d:b0:7a:40:aa:5c:5c:0a:a3:90:8b:
9a:a7:f6:48:27:a7:2f:9e:35:04:c6:d7:30:2e:6f:b3:74:f3:
95:79:e9:25:db:e3:0a:fd:91:28:7b:e2:17:89:1c:3c:34:a4:
3b:b8:be:c9:c4:ee:8f:4f:c9:70:72:57:71:19:87:16:16:79:
1f:69:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:55:59 2026 by rpki-client