Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: YUpzti8CDZ8FzQB824gUhXlgclcBTMPOo1G87bCZ1fY=
Subject key identifier: E9:5D:F8:45:48:ED:42:43:35:0D:08:11:60:96:99:0C:FE:5E:1C:03
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019CE749EC6ABFEC0A84155ABC2191142091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 0489
Signing time: Fri 13 Mar 2026 13:01:47 +0000
Manifest this update: Fri 13 Mar 2026 13:01:47 +0000
Manifest next update: Sat 14 Mar 2026 13:01:47 +0000
Files and hashes: 1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: sjrcVxAqjqU29Nlpp4x+c2fSrpzI+UTfIlv4sR+88Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:ec:6a:bf:ec:0a:84:15:5a:bc:21:91:14:20:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Mar 13 13:01:47 2026 GMT
Not After : Mar 14 13:01:47 2026 GMT
Subject: CN=e95df84548ed4243350d08116096990cfe5e1c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:f0:02:b6:26:36:45:86:2f:2c:f6:c1:d9:
60:c3:66:b6:7d:df:a8:81:5c:21:fd:8d:d8:d2:e7:
6f:d1:7a:d6:1e:15:37:2d:b4:03:99:c3:48:d6:97:
69:85:e6:34:24:09:de:b4:47:44:71:95:35:9f:0c:
25:3f:bd:c8:9a:28:f8:fc:43:27:a4:57:e9:9b:3a:
77:b4:34:c9:e7:6a:9f:95:de:74:7e:5f:a5:ba:6f:
fb:0b:0b:9f:09:64:dc:b6:82:b3:a5:37:77:1c:17:
dd:1e:a6:a2:03:80:19:10:80:c8:cb:a1:0f:45:cc:
d0:bd:e8:cd:d1:f2:7d:77:01:24:f7:67:87:7a:9f:
62:e2:c7:5d:f8:8f:6d:4d:5a:28:3b:7b:74:f5:cf:
79:5e:be:6d:e9:4e:fd:db:df:4a:1e:e1:6d:fe:75:
77:5c:22:25:8d:54:e1:42:23:cd:29:98:a3:43:6e:
a0:65:4f:ab:3c:d9:7c:10:4f:df:5e:23:57:59:ad:
e2:42:f8:bb:26:68:6c:4c:d6:1b:2b:41:a7:bb:87:
72:e1:9a:bd:c8:4f:1f:3b:b4:1a:27:fe:e8:2c:30:
a8:e6:16:df:0c:85:67:02:d1:b5:74:89:4f:8f:45:
cd:9b:76:78:bc:fe:c9:8c:5e:5a:1e:b0:38:20:06:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5D:F8:45:48:ED:42:43:35:0D:08:11:60:96:99:0C:FE:5E:1C:03
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:79:22:2b:51:4b:b1:07:c9:f1:1c:0c:aa:76:7b:01:f3:fb:
02:89:3c:98:66:25:02:78:eb:5d:83:c1:d3:f3:be:46:72:ad:
9e:79:f8:df:70:52:f8:b5:bc:ca:99:a5:cc:3c:2c:b2:ec:aa:
2f:f6:2c:8b:d9:d9:be:1c:53:11:16:bf:a5:68:9d:0d:35:71:
51:61:7f:ad:32:3d:ab:64:cc:f9:4b:2d:ce:3d:e5:b3:35:af:
e7:ff:03:0e:bc:23:76:1e:8a:a4:0a:78:00:15:2f:04:3b:54:
23:2f:6f:33:b1:2a:87:38:e1:d6:32:34:fa:04:a1:fa:9d:08:
90:29:67:90:fd:b0:b6:f1:14:5f:50:d3:9a:c1:a9:6b:ed:22:
41:7e:f7:94:a9:c8:e9:7b:2c:2b:ad:b7:0d:ba:cc:f1:3b:5d:
99:fe:3c:22:eb:cf:8e:05:b7:e9:4e:49:01:e7:13:18:bf:56:
7a:94:e8:70:be:2e:26:14:93:8a:07:c3:69:c8:15:e1:f5:04:
2e:10:7e:dd:f7:f2:d4:29:13:e4:24:43:9e:d2:5c:df:e2:ef:
ae:34:3f:55:6c:a8:a8:a0:59:a3:ff:b1:74:15:82:79:db:4f:
c0:43:5e:20:92:d8:d7:f1:e2:5f:3e:26:04:c3:94:89:25:42:
83:28:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:23:23 2026 by rpki-client