Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: tM5HJoUAwKmahqrzSW/heIa0ZzQPyEI4PTZkypEjaN8=
Subject key identifier: AB:E7:49:61:96:9B:DE:F0:4E:17:0F:38:0A:05:DE:59:6C:81:C5:42
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019D1CB743924D8D1EBC8347BC8F3BA8E39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1881
Signing time: Mon 23 Mar 2026 22:01:05 +0000
Manifest this update: Mon 23 Mar 2026 22:01:05 +0000
Manifest next update: Tue 24 Mar 2026 22:01:05 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: BWdhGAPn3iCcIXhmxcwUAY4eMZfXq9clpA/KDugYRN8=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:b7:43:92:4d:8d:1e:bc:83:47:bc:8f:3b:a8:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Mar 23 22:01:05 2026 GMT
Not After : Mar 24 22:01:05 2026 GMT
Subject: CN=abe74961969bdef04e170f380a05de596c81c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:1b:86:f4:22:f2:94:08:ea:78:a1:e3:9b:
e5:64:3a:f6:65:d5:ad:06:7e:a4:01:a5:f0:2f:e5:
01:ec:d3:eb:44:55:86:03:d9:bb:12:48:8e:9d:ce:
00:0d:e3:51:d7:64:58:0a:89:70:ba:3f:18:8b:99:
a6:a5:ab:c5:9b:38:3e:ed:30:17:92:44:85:e8:fe:
7a:89:13:bd:fd:3b:71:dc:77:8c:bc:cf:96:e6:23:
d2:e9:e1:9d:d2:e5:03:58:b1:1d:e3:d6:06:1b:2a:
41:3a:5f:25:7f:1a:b8:59:69:b3:30:8f:b0:89:45:
72:80:48:9c:4b:c9:88:0e:f2:c7:42:c3:8e:52:5f:
bc:c3:21:fc:76:91:7a:6f:de:92:71:07:b0:29:59:
ef:0a:b9:ea:6a:66:f0:08:62:77:52:7e:e5:ef:65:
1f:44:1a:17:ed:59:80:40:92:df:a9:05:5c:fa:b2:
1a:c3:1d:c3:ab:b6:ea:d9:77:a8:82:ad:8b:86:21:
d1:55:a8:a8:bc:84:a0:5d:96:ae:a4:3b:62:f6:bc:
ce:6c:e9:b4:d7:5d:3b:77:b2:d1:ec:2f:19:02:d9:
5b:95:88:99:01:c1:03:8a:39:eb:18:fb:90:30:a0:
98:06:dd:b1:93:b1:64:4a:c4:05:f4:6f:e2:db:a2:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:49:61:96:9B:DE:F0:4E:17:0F:38:0A:05:DE:59:6C:81:C5:42
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c0:bd:63:b5:b3:9d:15:2e:03:86:9d:d8:30:e1:3f:9a:8a:
82:46:5a:5c:b7:a4:d5:9c:fc:6b:5c:f5:61:ff:56:9d:7f:a3:
e8:e1:82:b2:fe:3b:67:10:a9:30:02:8a:52:26:bb:cc:c0:a1:
de:ce:66:ca:ca:e9:b1:4b:2e:82:05:39:21:61:89:a8:e4:05:
22:77:79:8d:e7:5f:5d:b3:55:4b:5c:34:ea:c6:b1:be:42:8e:
0d:85:19:f4:08:e8:96:b9:9b:25:fe:61:b1:02:0b:7b:66:f7:
d2:53:53:1b:df:85:b2:3b:c6:92:9e:55:2f:51:c5:71:ef:7f:
18:4f:d8:e3:d1:45:9e:f4:c2:8c:1c:61:48:59:22:c2:02:ef:
06:e8:80:24:2d:6c:f6:7b:48:1c:32:c4:ad:f4:94:5b:91:07:
f2:68:00:1c:55:c8:35:99:9d:71:5f:d4:7a:e1:67:c1:e9:8d:
9f:9f:96:59:f3:c6:8d:a8:09:04:e7:0e:aa:c8:7c:39:2a:79:
f9:92:ec:93:3e:d4:1d:d3:87:32:02:bf:41:33:40:50:1b:b8:
b7:b7:63:3c:ef:7b:0a:f5:b2:2c:56:be:3c:08:29:73:6e:0c:
bd:4e:fa:20:14:da:54:87:8a:75:8e:3b:41:38:d6:96:9b:77:
4e:3e:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 05:12:15 2026 by rpki-client