Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: 5tpg0kSOxeaH9OIYqyR35h2GOxOqoSrBz0FfPIRnoe8=
Subject key identifier: B8:6D:FF:A1:57:AB:AF:30:CC:0F:29:E9:4C:36:1C:37:CE:33:0D:22
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019E0475246C68A9128100DD4BFBC4FA6B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 18F9
Signing time: Thu 07 May 2026 22:00:46 +0000
Manifest this update: Thu 07 May 2026 22:00:46 +0000
Manifest next update: Fri 08 May 2026 22:00:46 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: A0DwhwAM/TbGoIXyQ/jhS7mfQwpB9nV7HHAIMryZuIQ=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 21:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:75:24:6c:68:a9:12:81:00:dd:4b:fb:c4:fa:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: May 7 22:00:46 2026 GMT
Not After : May 8 22:00:46 2026 GMT
Subject: CN=b86dffa157abaf30cc0f29e94c361c37ce330d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:93:55:27:77:40:fe:2c:61:5f:36:a9:96:
66:06:1a:b1:90:98:27:9b:c1:e5:f2:2f:ae:2a:29:
52:92:c1:c2:f1:e4:9b:38:e0:f6:9a:1b:03:3e:e3:
7a:cf:68:11:32:11:b8:38:49:15:f5:3f:68:b9:1f:
2d:6b:bd:94:92:97:98:54:ce:95:4c:9c:ba:59:e2:
ab:e5:54:32:4c:79:3b:b5:39:8f:1b:39:8a:cb:14:
e5:85:31:bb:7e:07:55:49:bf:e6:cb:60:69:df:bb:
11:db:d4:27:9e:8e:d9:2f:25:e3:bb:b8:fa:52:0f:
8f:82:92:28:ef:fe:22:7a:fd:bb:7a:23:36:e5:7f:
34:83:16:53:e1:e0:d1:b1:6a:ff:a6:fc:ab:5d:05:
69:b3:c9:d1:4e:e3:00:80:5a:cf:39:91:60:b0:3f:
cb:61:86:57:c1:ae:76:cd:cd:bc:6e:31:42:a2:f3:
c2:d1:cc:65:71:6a:76:91:4f:9c:cf:ef:b6:4b:54:
52:db:09:81:fb:9d:d0:90:ba:80:03:8a:b4:76:64:
6a:42:85:05:9d:fa:50:bc:be:4d:55:8f:8e:58:77:
f3:1d:5e:17:32:ca:6a:23:e3:0d:c5:71:5e:11:85:
b2:48:0e:a9:e3:7a:cd:ee:4d:b8:4a:a4:f7:81:35:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:FF:A1:57:AB:AF:30:CC:0F:29:E9:4C:36:1C:37:CE:33:0D:22
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:41:c9:81:dc:7b:04:6e:82:57:98:cc:e8:43:25:9a:6c:9b:
6f:e1:d9:d9:3c:33:21:84:2e:0e:18:12:b4:c3:28:60:a8:06:
f1:57:f2:11:9a:55:8e:2f:6a:ba:17:ea:3f:29:47:3f:a3:cc:
2a:44:6f:a1:c4:fc:e7:65:dd:22:d8:c3:c6:24:1e:33:d3:34:
fd:cf:ea:00:e6:f0:7c:77:c0:1e:6d:70:6e:af:f0:9f:33:46:
d4:f6:22:9a:56:d9:08:ec:6b:fa:43:a0:f4:6f:5d:4b:7b:93:
7d:9e:59:d2:96:98:91:83:38:7e:9c:30:4a:b1:40:af:d4:ce:
12:0a:cb:aa:69:9f:a0:29:f8:be:13:43:8d:ff:b2:93:a6:75:
d2:70:93:c3:e9:6c:07:95:ee:49:64:0a:6e:14:9d:64:86:9e:
d5:04:63:6b:bf:e8:14:b9:ff:4a:e5:44:5a:55:14:13:bb:97:
4d:21:e9:a0:e8:ee:de:ea:5d:df:f8:5e:f4:18:a4:9c:30:88:
0a:89:3a:5a:83:91:18:f1:26:3a:fd:84:ef:f5:0c:3b:12:f1:
95:cf:69:59:60:2a:69:f5:c1:1a:5f:51:94:55:95:14:b4:6a:
96:51:4f:37:aa:29:cd:0a:aa:72:0d:b2:9d:e6:9d:45:aa:38:
e4:71:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:46:16 2026 by rpki-client