Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: 1ErnSMUN6IlKIQZ5MclgiSVnfJe0Le/Qv7oHcnTn7e0=
Subject key identifier: 5E:75:CC:8F:D2:C2:22:84:0D:D7:26:3D:3E:00:9A:40:67:D0:2B:54
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019DCF0770EB374D57F8420E0B5B68094E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 0501
Signing time: Mon 27 Apr 2026 13:01:04 +0000
Manifest this update: Mon 27 Apr 2026 13:01:04 +0000
Manifest next update: Tue 28 Apr 2026 13:01:04 +0000
Files and hashes: 1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: 0ok3cA5f7jJjvDNIITSarMWmbfv+RSQB7Sngj/M8BSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:70:eb:37:4d:57:f8:42:0e:0b:5b:68:09:4e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Apr 27 13:01:04 2026 GMT
Not After : Apr 28 13:01:04 2026 GMT
Subject: CN=5e75cc8fd2c222840dd7263d3e009a4067d02b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:77:63:80:13:a3:a9:a4:d6:8f:e9:85:e3:
8a:a8:b3:27:67:bd:88:f4:09:00:29:e0:84:9d:3f:
fe:dd:8f:25:17:06:b7:7b:f1:af:7d:1a:dd:01:8e:
ca:a7:76:0e:53:aa:b2:6b:2c:6a:72:60:5d:16:9b:
b8:62:d1:c2:31:d5:8e:24:ac:a5:ff:e0:aa:dc:e7:
ea:ee:f3:26:70:38:e3:4c:d7:d4:c5:1e:1c:01:58:
2f:7d:12:4b:94:89:6b:61:c4:06:08:fc:c0:61:28:
5a:0f:20:38:c9:76:a3:30:e6:08:0d:fc:ad:7e:a2:
7a:af:36:3b:a1:67:74:f7:f0:96:20:45:17:89:22:
f3:2f:ad:55:70:63:4b:0e:f1:f5:6b:c5:89:8b:b5:
79:69:20:ce:d0:f8:c2:51:bc:6d:2b:2d:85:ff:b9:
b1:fa:b0:89:1f:d1:e8:5e:ec:db:1b:4f:85:3a:94:
75:d2:b8:b9:bb:08:ad:ae:57:0d:0c:d6:8e:7a:48:
53:64:3e:00:4c:8d:09:85:0f:3b:ac:f8:81:9b:f8:
d6:70:94:ee:c1:ef:37:9a:4e:09:82:c2:87:87:26:
5d:ed:13:fe:d1:3f:e9:25:02:16:7a:12:00:1e:49:
c1:b7:05:d4:53:eb:b1:d3:2e:db:1d:7b:2b:45:ca:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:CC:8F:D2:C2:22:84:0D:D7:26:3D:3E:00:9A:40:67:D0:2B:54
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f6:5b:dd:7b:e3:8b:0b:8c:9f:e2:e3:2c:d3:73:bb:a4:0e:
3b:cb:cb:0a:d9:b5:d3:b5:70:bb:d9:08:d3:8b:91:82:75:4e:
b9:31:58:d1:4d:d3:75:44:25:85:58:02:e5:60:3a:2d:e1:c9:
c9:37:c6:39:6c:4f:da:95:1f:bd:4c:b5:bf:97:27:62:35:06:
64:b0:9e:ca:f5:0d:d9:da:ec:02:f9:94:c3:18:d7:fa:ab:65:
d5:2d:7e:07:b9:98:e3:e3:3d:0d:c4:7a:9b:0a:46:a3:0f:6d:
56:c4:57:43:92:dd:9e:54:a4:c0:e4:44:a6:34:38:f5:7b:60:
a1:98:17:e8:b8:c6:cf:d1:22:fe:49:fe:75:c2:4d:1c:81:d9:
d1:b1:66:10:7e:b9:d6:8b:db:6d:15:3c:e1:ec:b4:55:fd:8a:
b1:5f:b9:2d:9e:9c:13:d3:ce:5e:4c:c0:4c:85:73:c7:4a:cd:
19:19:f6:f5:0e:49:63:8d:d5:a0:85:70:5a:fc:55:ab:a0:89:
00:1c:aa:67:cf:83:5b:62:d6:cd:84:c3:de:f9:fc:d3:98:79:
30:d7:1e:f4:89:7c:ed:b0:46:ae:8d:9a:f0:78:7f:c4:0e:37:
d6:b2:b3:49:b5:52:58:c2:ee:a1:d6:98:1c:d7:15:66:74:8a:
6a:17:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:57:52 2026 by rpki-client