Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
File: MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft (raw, json)
Hash identifier: XLHKZkX7HsWFtwAVDBnonKNVHv7x2fs4Uyx7UsGwuJo=
Subject key identifier: 46:99:69:DA:C7:97:13:CD:B1:2F:B3:5B:37:9B:0C:59:C1:C4:FD:C6
Authority key identifier: 31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82
Certificate issuer: /CN=31951e36ffd97c1d733a90a5af6fada85fd27782
Certificate serial: 019D3940CFE9A6C509805958AE69148C2FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
Manifest number: 018D
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl (hash: AESOyTETWP5DunYu13ijdsRDzcgQPdHUfqNn35gM+Uw=)
2: N3hVVOovM_77teroBxQL9P-gg3U.roa (hash: 2ks0o9g54VzhWfaTpoQs/luMrk638SsVVoduuStd18k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cf:e9:a6:c5:09:80:59:58:ae:69:14:8c:2f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31951e36ffd97c1d733a90a5af6fada85fd27782
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=469969dac79713cdb12fb35b379b0c59c1c4fdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:c2:b8:27:d1:7b:ff:33:d8:47:b0:37:35:
72:88:9e:9e:fe:6e:96:a2:7c:36:ff:aa:6e:86:19:
57:61:4e:1a:cf:fe:5c:3b:75:d2:63:dc:49:2f:d5:
bb:81:94:17:12:a2:18:fa:16:4c:6a:d6:54:ae:a9:
b1:3c:4d:15:8c:31:38:74:98:81:77:46:cd:59:7c:
ce:2f:2a:5a:6b:0e:94:ef:63:a5:20:4d:64:55:04:
bf:f7:57:68:7e:b5:c3:f0:fb:b1:e3:be:42:cf:ab:
44:2c:02:05:10:64:af:2f:9c:09:3d:d5:04:b9:ec:
cc:37:34:bf:d8:65:83:68:a4:ca:11:e9:19:5e:e0:
a9:60:a7:19:78:35:b4:28:67:cc:4d:4d:c7:0c:cd:
68:96:d2:1a:82:9d:a6:b7:6f:1a:4d:ed:9e:de:d7:
94:ff:9c:7a:f2:a2:78:ab:c3:04:8e:a4:ee:bf:cf:
85:aa:f2:be:87:a1:db:5b:b1:f8:bc:b6:2d:36:cd:
5c:fa:23:e4:91:d3:59:5e:e3:c3:84:5d:95:e9:2b:
dc:2c:35:27:f0:d7:12:96:53:39:33:ea:4f:b5:18:
0d:35:f9:6c:41:82:c9:98:3b:96:17:54:5f:b6:6e:
63:74:e5:98:12:18:7d:a9:5a:97:65:f4:ee:e6:ca:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:69:DA:C7:97:13:CD:B1:2F:B3:5B:37:9B:0C:59:C1:C4:FD:C6
X509v3 Authority Key Identifier:
keyid:31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a2:ab:76:06:d9:6c:65:3c:50:cf:b1:d5:11:ca:e0:2d:4d:
a1:81:a9:40:14:11:82:b6:50:c8:0c:f0:7a:eb:7d:c6:ff:7e:
85:6c:f0:56:47:32:02:96:3a:c4:a1:67:99:1c:a8:b5:db:6a:
55:20:5a:bd:8c:f6:6c:d8:12:8f:88:47:e2:71:c6:be:a4:46:
48:36:f6:79:b9:0a:dc:4b:f1:67:5b:15:c3:17:0a:e7:1c:4f:
51:87:29:63:9b:21:0f:90:5e:5b:92:96:93:1b:89:52:dd:b4:
67:1c:59:d5:78:0a:b5:bf:62:54:09:c2:49:d8:3d:d0:92:a0:
12:e2:9d:08:65:4d:3a:78:bc:51:26:1c:f8:56:67:24:83:05:
0a:cc:ed:af:c4:c3:6a:d7:3e:59:ba:c9:dc:33:6a:e0:fc:eb:
21:e9:a5:d4:a7:a8:7f:07:cb:35:8b:d9:8c:69:ae:16:0b:2c:
e0:92:15:74:14:9d:87:4c:03:0b:4b:65:fe:61:0b:43:7d:ab:
ec:5a:9c:0a:0b:31:2f:d0:eb:b5:b8:a4:84:78:d6:a1:bf:f2:
b3:0d:dd:12:d9:a2:82:4b:f0:97:ec:aa:1a:b1:dc:ae:a5:80:
eb:0b:e8:c8:f8:30:07:fb:f0:d4:4c:1c:81:ed:0c:dd:bc:40:
2c:27:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:52 2026 by rpki-client