Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: W2lKjqy7EAErGSroqgNED4+vf5HgGh1e4Nrv3QbBiBw=
Subject key identifier: 3A:E2:BF:83:77:AF:93:02:1B:79:5F:1F:8A:4A:4E:33:A8:E5:B9:52
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019D3A8ABEF5E7FDA163890D40035A9BFDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 17:01:04 +0000
Manifest this update: Sun 29 Mar 2026 17:01:04 +0000
Manifest next update: Mon 30 Mar 2026 17:01:04 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: 6t+EaEl+qCNLEDeOfXYJJI8gFfY6MR3pARqyJtjDKyM=)
2: yWKjIr-KiDyKL-TFC_YWyumNPFY.roa (hash: tGpo5HgtbRNbDfzJQyEVQHJI3m6rcZ2a1vQoza/IAIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:be:f5:e7:fd:a1:63:89:0d:40:03:5a:9b:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Mar 29 17:01:04 2026 GMT
Not After : Mar 30 17:01:04 2026 GMT
Subject: CN=3ae2bf8377af93021b795f1f8a4a4e33a8e5b952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:12:a7:5f:a6:3b:ce:03:85:c7:af:c8:18:
59:54:ad:3e:6e:70:a8:53:01:26:6c:18:be:35:57:
6f:cb:6c:67:9b:28:53:9e:02:2f:75:b7:3f:08:04:
71:43:f0:10:fe:b7:8f:c5:57:f2:88:eb:32:19:9d:
b9:54:d4:ef:58:ef:cd:8d:25:24:09:3a:7e:93:6f:
45:f8:f9:9d:fa:8e:f8:7f:83:f5:8f:ac:d9:16:ee:
fe:dd:2f:6e:7f:ed:9c:c7:f6:ea:18:fd:55:93:3e:
e3:c2:46:be:41:20:de:a2:8a:13:10:1d:c5:88:ec:
66:a9:30:04:71:d3:3b:40:f7:f7:d3:5d:34:c9:25:
0f:34:54:0f:e0:fb:80:6c:5a:6e:8b:9a:5f:b4:92:
7e:30:b7:a7:da:08:2f:2c:9f:e8:2c:4d:1c:0d:af:
75:f9:85:a3:73:a1:5d:71:07:2f:11:77:29:b7:c1:
af:2b:01:c4:92:cb:08:fe:07:37:b3:9c:e0:a7:f9:
cc:20:aa:36:5a:28:06:a5:af:8b:86:40:b7:96:69:
c0:25:e6:de:55:21:d6:7a:92:da:87:6c:54:44:fe:
5f:ea:db:2b:29:f5:01:d0:f7:c3:03:d1:16:6f:fb:
81:83:c4:a1:73:9b:e2:bf:bc:bd:b9:d0:78:95:06:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:BF:83:77:AF:93:02:1B:79:5F:1F:8A:4A:4E:33:A8:E5:B9:52
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:75:00:f7:b0:f6:57:70:de:0b:db:7b:e4:9c:17:b0:ef:
3d:c5:2c:a8:99:25:c8:23:40:33:94:af:aa:47:b3:4c:df:28:
30:b5:73:98:cb:c5:38:57:db:53:42:f2:09:40:56:44:a7:ce:
5f:a2:92:97:db:ed:c0:ed:09:35:ae:e2:64:d4:ea:32:30:09:
15:2d:09:da:bd:0e:7f:d9:71:f1:b5:04:a7:e8:e1:4e:8f:1a:
06:b1:4f:9f:55:e7:35:98:c1:c5:36:83:0c:19:11:03:da:fb:
28:db:12:44:6f:4a:6b:68:12:97:3f:27:af:17:eb:0e:d6:76:
82:cd:53:3c:26:af:a9:c0:fa:5a:30:2e:7c:6a:fa:a5:a3:81:
5c:fe:1d:f5:39:5e:b7:e8:fe:20:e5:a6:d9:3d:94:e7:35:23:
68:8b:fa:5c:84:f9:1c:95:00:b2:22:89:fa:96:57:90:8e:20:
0c:ac:c4:e5:ff:8f:64:a4:90:b9:b3:df:92:6b:a4:d1:b0:c5:
6f:7d:b0:b8:9c:80:5c:f8:aa:f0:61:ea:c5:c5:7e:81:61:70:
21:62:42:0d:e6:c0:8e:29:3a:86:14:89:e1:3a:b5:c4:90:0f:
0e:a1:b6:d2:d0:cd:cd:8c:f3:4c:46:40:f6:93:79:2f:5f:2f:
10:48:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:32 2026 by rpki-client