Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: bWMpjeVO2SyxOGJpD47sZW4Q732oJZy2TtPj8SGXgG0=
Subject key identifier: 70:4B:CA:DD:C5:2A:D9:9F:87:1E:44:1F:C2:9A:F7:86:61:55:17:9C
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 019D3A1CB1E0EA80AAA68611E1E98DC3AE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 15:00:52 +0000
Manifest this update: Sun 29 Mar 2026 15:00:52 +0000
Manifest next update: Mon 30 Mar 2026 15:00:52 +0000
Files and hashes: 1: 8HOqsxKCS56C5l2TYH5vJenn9Uc.roa (hash: r5GuTgTO8u43SvuFo8e3I9Qx7FDg9zvojI1lw4JUs+Y=)
2: EuTvpzj_rBg4p9cpcF0sTGEJSQg.roa (hash: 2ycyJUxPv2cATlhlJrwI3vU1U2HjLZsDnb7MjY9bKXM=)
3: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: NW1W9p2Zqg3NHG+u0E5eynnjZNk4APnESgf0Zt5oGSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b1:e0:ea:80:aa:a6:86:11:e1:e9:8d:c3:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Mar 29 15:00:52 2026 GMT
Not After : Mar 30 15:00:52 2026 GMT
Subject: CN=704bcaddc52ad99f871e441fc29af7866155179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:89:67:c3:53:9a:d4:d3:20:bf:fa:61:f3:
1f:70:1a:6e:d3:d4:39:df:7a:04:71:c8:ac:79:28:
df:61:8b:9b:fb:44:82:ea:36:75:78:2f:64:41:66:
71:9c:2f:89:8d:e4:dd:cf:9b:48:2c:e5:75:c0:f4:
83:3e:75:e4:14:fc:2e:21:dd:8a:34:57:15:a8:83:
ff:83:db:4d:fd:ef:30:54:69:92:17:78:0b:24:66:
ad:76:43:41:6c:f4:16:98:c7:d7:14:b3:92:21:3b:
f2:ae:55:00:63:40:86:77:3d:45:c7:cd:7f:89:25:
03:84:91:a1:98:ba:aa:09:2f:f1:3b:f3:b0:a8:b6:
13:ec:98:38:3d:41:52:1d:fb:51:cb:2a:ff:21:d9:
23:a8:fa:46:d1:17:a4:17:2d:ed:41:99:91:5c:45:
12:2f:79:d4:45:7b:91:7d:35:4c:73:45:77:2a:c9:
de:94:50:72:21:96:01:23:42:57:4e:75:d0:8f:8c:
3d:0c:5a:91:d0:d1:20:1b:47:39:80:7d:96:62:3b:
0d:80:a8:2c:90:e0:ec:ac:8b:ea:6e:21:cd:3c:b4:
59:f9:b7:31:7d:37:5f:a0:6a:c5:22:f0:70:e3:43:
b1:6e:4f:9a:b2:63:e7:74:79:d8:c8:e9:2c:d2:51:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:CA:DD:C5:2A:D9:9F:87:1E:44:1F:C2:9A:F7:86:61:55:17:9C
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:94:01:ad:21:80:0e:f1:a2:50:86:df:22:d3:a1:52:57:
64:11:23:95:2f:0f:ca:52:b5:b0:51:e4:f1:70:79:7e:97:5f:
6f:22:54:33:51:18:9c:38:8f:5e:25:61:ae:ca:b8:a8:fe:03:
4c:8a:fb:13:b3:b8:71:fe:79:6e:62:38:f9:0c:6f:bc:4d:a9:
b9:aa:2f:5a:81:1e:62:04:8a:c1:85:2b:a0:91:5e:1b:ac:85:
37:9a:df:a1:27:ad:05:cc:6c:2d:af:dc:f8:8a:c5:e8:09:25:
4d:4f:13:3e:9b:8e:dc:c6:45:22:b7:29:74:c8:a2:52:b6:19:
67:e3:22:cc:8f:c0:17:6b:a9:8c:61:58:a5:20:ce:1d:c5:ae:
2f:79:ac:80:53:10:d5:52:37:70:0f:df:dc:54:77:eb:2d:f6:
6a:7d:33:c1:9d:73:cc:c3:6c:72:f2:4b:99:5b:3f:b9:e5:3a:
99:d4:29:86:51:6c:3d:0e:d3:75:13:c4:c0:1b:1b:06:f2:d8:
8f:ce:9c:d9:f3:65:7d:d9:c2:4a:ee:57:ce:cb:69:dd:3a:c1:
22:07:c5:fc:9b:98:06:3f:a8:4a:3e:b4:60:75:fc:83:ad:33:
b3:a7:20:ba:41:74:8a:c9:b0:75:a0:26:d6:7b:87:7e:9f:89:
b0:0e:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:20 2026 by rpki-client