Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: 7OjFlKkDllwnYXBCCZOtHU6+UA0IyXqfocOfFYsFa0g=
Subject key identifier: 30:B8:F6:77:03:A6:0D:82:7D:7D:E4:DD:3C:AC:98:AE:1E:73:52:E4
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019D382E39F15499906068E74BE6AA6BC967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa (hash: HoHhq099O+Q5npgf30dRiAWZ2csPL4g8k9fpkhuGo9w=)
2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: 6jdVcC59SzToeCTl4ZJ+m1OqTDW7bnqGb2cDKaW5rEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:39:f1:54:99:90:60:68:e7:4b:e6:aa:6b:c9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=30b8f67703a60d827d7de4dd3cac98ae1e7352e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:81:59:77:22:db:1f:9b:f1:d7:f9:0b:c1:
86:04:77:21:91:f0:48:83:db:91:04:f1:3c:97:ed:
87:d4:f3:67:cb:9f:fc:cf:0f:c4:c9:26:06:db:f0:
eb:89:f2:82:1e:48:07:88:2c:e0:54:5d:d9:06:90:
44:5d:a4:71:a6:33:6b:db:db:5f:a9:97:1c:3f:94:
e9:16:43:bb:83:a1:21:c9:2d:b0:40:b7:86:4d:d3:
0d:96:61:aa:bd:40:97:88:71:2b:28:dd:ec:6d:3a:
79:2e:f7:6c:78:a6:65:80:80:66:c0:4c:8b:4c:f4:
2e:99:c4:99:4e:17:c4:62:25:f6:da:ed:22:a7:25:
82:bc:23:84:f5:04:f6:b8:a7:cb:6c:49:31:f9:03:
6a:0d:41:d3:b8:1b:8a:e6:d7:b4:99:7b:ab:0e:76:
90:99:ae:51:b1:1f:7e:65:83:11:12:65:40:a6:a8:
a0:06:46:49:ba:5e:7f:bb:0a:9d:b9:23:e0:f7:61:
ff:1b:d0:f8:cf:09:5d:ba:ec:08:20:b9:bc:79:24:
12:80:0c:78:ed:f6:ce:56:65:a4:05:f2:0c:60:68:
9c:bf:4e:b9:37:0e:27:0e:d6:47:90:53:22:81:dc:
d7:d7:4b:e7:1e:a1:3f:63:e2:36:de:b5:03:a2:5c:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:F6:77:03:A6:0D:82:7D:7D:E4:DD:3C:AC:98:AE:1E:73:52:E4
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:07:1a:13:ee:4e:2b:0f:76:ba:5e:00:de:5a:c0:0d:66:03:
f0:c6:55:13:da:a9:e9:ef:fe:b8:53:56:b2:cd:07:56:00:1d:
1a:04:a6:24:c2:93:e2:b9:ee:dd:ef:1c:73:83:ea:a2:34:6c:
20:ec:9f:6d:c4:e8:4d:c8:02:cd:d6:27:67:2d:e4:f8:8c:5f:
7a:eb:53:35:9b:00:55:99:e6:6f:86:04:0d:8d:64:72:c7:d0:
d3:da:03:9f:ef:15:42:10:be:04:e7:5d:6a:4d:6e:27:0d:72:
61:d3:d5:7b:ef:7c:ab:d0:d4:16:39:9a:fd:ff:3c:5a:82:52:
5e:78:e7:cf:ea:30:3d:33:e4:f8:6a:98:79:15:32:5c:5d:55:
2a:e2:74:b6:20:10:79:4f:d9:4d:ce:78:1e:ae:27:1f:ee:59:
ca:f6:c6:28:86:a3:12:d4:01:fc:42:ee:76:a2:52:c0:fe:ed:
5a:3f:2b:1e:7f:95:8f:4b:1d:c6:a0:27:de:38:65:62:e3:3d:
85:97:3c:0c:85:63:a4:b2:90:8e:7d:08:8a:21:f7:82:77:ff:
eb:12:cd:91:68:5f:a6:be:73:f5:03:83:ce:c7:58:39:5e:25:
42:09:9d:00:94:dc:38:6b:66:cc:38:8b:04:5b:72:89:16:f9:
c5:a8:64:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjnxVJmQYGjnS+aqa8lnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliM2YyOWZmOWVhNzFiM2MzZGMxZjVhZjA1NGI0MTY0N2M5
MWFmOTgwHhcNMjYwMzI5MDYwMDQ2WhcNMjYwMzMwMDYwMDQ2WjAzMTEwLwYDVQQD
EygzMGI4ZjY3NzAzYTYwZDgyN2Q3ZGU0ZGQzY2FjOThhZTFlNzM1MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPuBWXci2x+b8df5C8GGBHchkfBI
g9uRBPE8l+2H1PNny5/8zw/EySYG2/DrifKCHkgHiCzgVF3ZBpBEXaRxpjNr29tf
qZccP5TpFkO7g6EhyS2wQLeGTdMNlmGqvUCXiHErKN3sbTp5LvdseKZlgIBmwEyL
TPQumcSZThfEYiX22u0ipyWCvCOE9QT2uKfLbEkx+QNqDUHTuBuK5te0mXurDnaQ
ma5RsR9+ZYMREmVApqigBkZJul5/uwqduSPg92H/G9D4zwlduuwIILm8eSQSgAx4
7fbOVmWkBfIMYGicv065Nw4nDtZHkFMigdzX10vnHqE/Y+I23rUDolxjoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDC49ncDpg2CfX3k3TysmK4ec1LkMB8GA1UdIwQY
MBaAFJs/Kf+epxs8PcH1rwVLQWR8ka+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTct
ZjQ2MjI0YjBkMTYxLzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTctZjQ2MjI0YjBkMTYx
LzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAcaE+5O
Kw92ul4A3lrADWYD8MZVE9qp6e/+uFNWss0HVgAdGgSmJMKT4rnu3e8cc4PqojRs
IOyfbcToTcgCzdYnZy3k+IxfeutTNZsAVZnmb4YEDY1kcsfQ09oDn+8VQhC+BOdd
ak1uJw1yYdPVe+98q9DUFjma/f88WoJSXnjnz+owPTPk+GqYeRUyXF1VKuJ0tiAQ
eU/ZTc54Hq4nH+5ZyvbGKIajEtQB/ELudqJSwP7tWj8rHn+Vj0sdxqAn3jhlYuM9
hZc8DIVjpLKQjn0IiiH3gnf/6xLNkWhfpr5z9QODzsdYOV4lQgmdAJTcOGtmzDiL
BFtyiRb5xahkeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client