Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: J4rjGAcrX+8qJ2ldnMbVXs9gBzdW6wmebtgCJ03HZNM=
Subject key identifier: 6D:92:B2:EC:F6:FA:4F:2D:A6:24:9E:42:BB:F3:C5:3A:7B:59:4B:9E
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 01A021D5A3DED13341A468E4A5D3417EDF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1A29
Signing time: Fri 21 Aug 2026 01:00:44 +0000
Manifest this update: Fri 21 Aug 2026 01:00:44 +0000
Manifest next update: Sat 22 Aug 2026 01:00:44 +0000
Files and hashes: 1: 1p0RiyBFchvE7NhFhbA51Ectb08.roa (hash: 2borQweYI7IpHIVDCEmYv8l+r/XVIWh005RBqdpqevc=)
2: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
3: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: I4srY4GUotOTrt2hJoq/kCAUg2ctTDHJUCCcI7hBdjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:d5:a3:de:d1:33:41:a4:68:e4:a5:d3:41:7e:df:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Aug 21 01:00:44 2026 GMT
Not After : Aug 22 01:00:44 2026 GMT
Subject: CN=6d92b2ecf6fa4f2da6249e42bbf3c53a7b594b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:b5:07:33:2d:b0:d2:49:62:84:66:76:f4:
91:8e:5d:54:9b:3a:be:b3:b0:6c:14:e2:5b:69:07:
88:b1:f5:98:fc:32:21:0f:fc:aa:4e:0e:8c:5c:19:
7c:6a:c3:4c:45:7c:62:6c:19:d3:8b:5b:6b:88:32:
68:14:73:52:63:43:0e:ed:c0:c6:e2:a6:79:0d:94:
8f:dc:e5:e3:82:aa:6c:da:fa:35:30:4d:0b:f2:6b:
21:2b:39:54:d8:aa:d3:a0:1d:56:dc:5a:c9:6c:d5:
f6:ef:3b:b5:2a:de:fd:d9:b0:db:07:1a:3c:5f:3e:
21:91:da:be:cc:72:d0:ce:08:34:e6:2f:5d:89:19:
a8:c2:75:3e:bb:92:c2:f2:5e:34:ee:16:0b:2a:5b:
64:cc:ed:f0:a3:81:0a:00:ee:6a:90:b0:ad:9b:8b:
0b:80:ff:4c:e5:0c:ea:50:9e:76:00:40:4b:eb:7e:
80:ad:50:70:59:a7:b8:49:bc:6d:d7:bc:5c:b4:d9:
32:d3:95:0f:27:f5:17:b8:3a:d0:ea:7f:72:c7:2a:
79:e8:6c:0b:3c:f6:fb:56:37:6d:e2:43:30:9e:62:
59:f1:02:01:6c:f7:8a:bd:7f:01:a8:9c:59:d7:10:
c2:95:c2:99:cd:84:3c:c4:f3:f0:38:c0:68:5b:92:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:92:B2:EC:F6:FA:4F:2D:A6:24:9E:42:BB:F3:C5:3A:7B:59:4B:9E
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:58:bd:59:d4:b5:f8:d0:29:71:d7:9f:08:8c:f8:ca:5a:
a8:9e:98:bc:98:b9:58:bb:15:5e:db:e1:34:f6:d4:3a:45:6d:
5d:ad:d1:8f:eb:1f:c0:92:c8:aa:1e:66:4b:b7:68:07:28:29:
d9:d6:cb:43:66:bc:3c:8e:e4:57:7b:0d:d7:af:05:0d:ad:8a:
e3:6f:5e:20:69:51:31:40:a0:59:e2:7b:ab:c5:c6:29:3b:90:
bf:91:1b:7f:6f:39:42:91:86:e7:54:51:7e:8b:35:e3:ad:b0:
d5:35:68:69:5e:2e:8c:34:88:da:5c:35:74:20:ad:21:e0:6d:
8d:dd:fa:25:bc:50:b7:8b:29:dc:95:5e:1b:82:e9:23:c2:5e:
17:7f:53:e5:b9:9d:5a:e8:b2:17:cf:4a:11:75:e9:6f:1b:31:
be:2f:43:6c:af:02:9d:b5:5b:66:05:0f:7a:f9:c4:2f:30:fa:
d3:f6:21:40:08:de:6d:9c:85:a5:de:86:3d:75:75:38:e4:2e:
7d:51:17:9f:d8:ea:f2:91:5c:eb:52:53:1c:c1:e9:d7:aa:fe:
7d:fb:c1:f0:d8:2a:52:a6:6f:d0:2a:b9:95:b9:03:d8:98:32:
ae:d4:bb:96:ef:38:30:c8:03:cf:f3:68:25:63:9b:21:3a:a1:
e5:4b:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:56 2026 by rpki-client