Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: WjcRlQqDRDsWnWmNkNLXElLzOGEo38V53e57qSkxztk=
Subject key identifier: 82:1B:47:98:F0:E8:66:B8:FD:33:5C:BF:75:CD:FE:AA:BA:BC:3F:47
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019FD7CEB8E7437EB95AB88A984859C1D47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 19EB
Signing time: Thu 06 Aug 2026 16:01:16 +0000
Manifest this update: Thu 06 Aug 2026 16:01:16 +0000
Manifest next update: Fri 07 Aug 2026 16:01:16 +0000
Files and hashes: 1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: 6PB2r4GhF1mj7NGMdA1yNeVc903vaFuz4hkaVvZiiw4=)
2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:ce:b8:e7:43:7e:b9:5a:b8:8a:98:48:59:c1:d4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Aug 6 16:01:16 2026 GMT
Not After : Aug 7 16:01:16 2026 GMT
Subject: CN=821b4798f0e866b8fd335cbf75cdfeaababc3f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:12:3d:d1:e5:a6:36:ab:19:f3:f9:33:e2:
eb:5d:c9:53:3e:8a:ba:45:1a:a7:d9:67:a3:9d:c3:
5b:88:8a:03:58:39:4e:96:20:83:07:e9:75:47:4f:
16:40:90:4b:5e:0c:bc:d4:b9:d9:1d:15:22:c8:ca:
5a:8e:6c:54:f8:c7:9c:0a:88:8b:b7:76:bc:c1:7a:
38:19:f2:59:10:50:1d:79:13:08:8a:8b:18:ba:d2:
c8:a7:0f:9c:ce:af:97:d1:72:11:f1:6b:e7:d4:31:
87:e3:17:3e:8f:db:06:26:00:cf:d0:03:28:02:88:
e8:97:a3:57:be:de:49:d4:c1:db:3c:d8:fe:e8:00:
82:0b:87:6b:5e:fe:10:1c:a4:01:45:ec:a0:e0:46:
5c:90:97:6e:b6:42:66:40:db:58:f7:a6:ac:df:49:
e5:f7:ec:7f:ad:8a:d2:a5:3b:43:ac:9c:68:e6:16:
01:ae:b0:35:8b:dd:56:55:6d:50:87:5d:54:9b:21:
5e:14:82:d7:2c:e0:f3:76:20:97:11:d8:c8:ea:64:
6c:e5:3c:95:04:82:02:43:90:a3:d0:b1:7f:26:c8:
5d:21:3d:b0:e1:c5:40:5e:ff:3d:e6:ca:02:d5:2c:
9f:41:26:2f:1a:bb:da:da:f6:13:f4:5e:21:d5:be:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:47:98:F0:E8:66:B8:FD:33:5C:BF:75:CD:FE:AA:BA:BC:3F:47
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d9:52:b3:4f:23:f4:16:62:f2:11:55:0b:30:78:d6:60:a4:
b7:dd:81:59:c9:2d:18:d8:7a:7c:e2:66:a6:94:e3:12:7b:6e:
6a:ac:b9:c8:76:19:c7:ec:12:a1:28:7e:0f:0e:ee:84:60:ed:
7b:c5:4c:3b:e6:20:da:49:b5:88:a7:e7:a4:ac:6f:25:8c:2b:
91:80:81:c9:5e:ce:78:0c:1a:9a:33:cd:8e:d0:65:4b:ba:cb:
82:1c:4b:a5:31:80:f4:3e:4f:4a:c5:a6:88:0d:48:d2:26:a5:
16:a7:ad:4a:fb:65:44:07:5d:86:f8:d1:94:eb:9f:b2:f3:af:
df:5b:a4:90:09:d5:05:b4:51:ee:b4:e2:e9:9c:2c:7a:6f:41:
64:d7:26:cf:d2:98:08:37:58:f4:6f:d4:b8:e9:e8:10:f3:ba:
dd:0d:fe:ff:80:1a:ad:cf:4c:a3:99:eb:e8:76:b5:43:fd:40:
15:e1:05:9c:34:98:1b:e3:12:b3:57:72:82:1b:c7:58:19:82:
f8:2d:3b:33:a3:60:d5:bc:65:0a:a1:85:56:a7:49:f7:ae:50:
5e:30:88:16:4b:9d:83:c7:5f:9c:24:87:09:af:81:f6:55:c8:
75:eb:7b:20:16:f5:1b:1c:82:68:af:8c:14:40:2f:cb:af:73:
ea:d4:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:11:21 2026 by rpki-client