Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: QeU/GdNyB6STiJ8ZEjf3pUf8JnLiaZ5WXylwcstNZL8=
Subject key identifier: 56:E2:89:54:5B:DE:E6:67:E5:78:83:2C:98:D1:B2:8F:49:CE:0B:C5
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 019FA3053870C679FF16D4644865F7568CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 10:00:56 +0000
Manifest this update: Mon 27 Jul 2026 10:00:56 +0000
Manifest next update: Tue 28 Jul 2026 10:00:56 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: Zs8kDBMoDs0GY+ngT8D8wuDaKoUmg/GNipdL+hxz7AQ=)
2: fnxekr8hjBPYztHEpriyNTg-w1c.roa (hash: Yw6ebR/XuI9yJ6QrRRVgWW8yPZGg+etxygR5z7m4D2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:38:70:c6:79:ff:16:d4:64:48:65:f7:56:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Jul 27 10:00:56 2026 GMT
Not After : Jul 28 10:00:56 2026 GMT
Subject: CN=56e289545bdee667e578832c98d1b28f49ce0bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:f8:bb:ad:72:7d:d8:85:bb:4b:3c:31:b6:
2a:12:8c:0d:1e:f1:10:f2:9a:3c:41:f7:65:b9:cb:
bc:10:22:4e:45:6c:ca:62:b9:f8:e8:a8:79:2f:16:
fe:70:06:ad:86:21:9b:0d:67:70:92:ff:33:9d:15:
6c:c5:6d:df:4c:b6:bc:19:fc:15:4d:9d:ee:fc:b0:
92:20:ae:14:f2:e0:b7:f0:8c:8b:86:79:86:78:93:
13:54:df:9a:28:91:bf:e4:00:e7:e8:e2:95:9d:17:
c4:fc:d3:37:0c:9b:ce:58:0d:dc:65:79:05:15:c5:
52:1a:9e:1e:44:43:ca:96:d7:c8:2d:36:17:ec:5f:
a8:b7:6d:ab:65:e4:69:8b:14:38:c0:d2:34:29:7f:
7c:77:08:08:43:b4:7b:ad:28:c8:59:3e:5a:82:ec:
90:83:59:57:bf:2b:f8:d6:b2:c4:78:c3:96:74:6d:
c3:fc:88:eb:f3:e7:0c:e4:5e:e9:0a:1a:74:de:9e:
bf:b6:a3:c2:7a:d5:65:f4:d6:a6:86:7d:63:f0:85:
ed:a5:8c:a3:11:81:52:52:ad:a2:95:8b:cb:8d:b5:
4d:57:7c:50:42:3b:e6:0b:0f:67:d6:08:7b:ec:6b:
91:cf:fc:25:04:f0:4e:19:1c:7e:65:dc:31:f5:68:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:89:54:5B:DE:E6:67:E5:78:83:2C:98:D1:B2:8F:49:CE:0B:C5
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ef:d5:a6:55:de:db:54:fe:18:9c:02:44:81:c5:34:f8:84:
b3:f7:d5:fd:be:d3:dc:26:70:33:2f:9a:80:0f:46:03:a1:59:
54:6a:34:53:84:09:9a:44:52:8e:3a:f2:57:a5:82:7d:9e:96:
2b:71:7b:f8:67:d2:5f:ac:b2:5f:b6:06:88:2d:ba:01:1a:99:
0a:60:0d:62:06:bd:05:f7:cf:7f:02:0f:25:d7:e4:03:3e:b4:
86:0d:30:65:f2:84:7e:14:63:73:69:2a:97:a7:f3:fb:ac:72:
21:89:de:e5:ec:56:d6:d5:96:38:8b:3f:20:ca:f2:e4:30:a6:
9f:76:4e:35:7c:11:6b:c9:6c:4e:9e:be:02:a5:af:94:68:8e:
4b:7a:75:05:5c:79:6e:83:45:3c:9e:2c:5f:d0:c5:6f:6a:41:
36:94:e4:82:76:fd:8c:55:25:4a:04:8e:92:f8:85:b5:2b:b3:
d8:e9:a2:24:22:2b:d3:d7:4e:d6:c2:3f:84:cb:79:ad:62:76:
49:b3:b3:96:ff:63:4b:39:ac:13:f3:65:47:64:dd:11:ee:78:
9f:ae:ea:75:8f:02:08:8b:19:90:bd:70:49:49:38:47:f9:4d:
98:7c:13:1f:01:1f:6d:e6:48:9a:95:e8:9e:24:d4:cd:98:cb:
b9:67:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:12 2026 by rpki-client