Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: GLP4C64pwXHkBU1r175kgkmHwUknLgfh4J8OtxIXE5E=
Subject key identifier: 41:7B:E8:7C:89:0F:C6:FF:79:23:85:FB:D3:E3:12:B0:0F:D5:6E:25
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 01A110E0395D7C51466EED987F021B6259AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1AA8
Signing time: Tue 06 Oct 2026 11:01:32 +0000
Manifest this update: Tue 06 Oct 2026 11:01:32 +0000
Manifest next update: Wed 07 Oct 2026 11:01:32 +0000
Files and hashes: 1: 1p0RiyBFchvE7NhFhbA51Ectb08.roa (hash: 2borQweYI7IpHIVDCEmYv8l+r/XVIWh005RBqdpqevc=)
2: 3z-Y6t-U3ROkg_EG1RWdxfklXIs.asa (hash: NZQhQHhOGqpSYcXAGADR+b2Wa/0vitRzCxWw3ooj/yQ=)
3: 5lfWbvg3zU6Z6ybWt0icxRxsPd0.asa (hash: fgeud77moQArDWbg8FPxiPBnVSa0ByR987mkHqJCiH8=)
4: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
5: af-zPo0siQNIyWuWlPAaFTV5JrE.asa (hash: qXExYR4uREIU9z6G8z6b/I2nd02vgo6aaHViiZ0ixao=)
6: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: kcLbuVwMrIsEbHq1iUAvzEeZbGDnQuS0fDzjXlprIc0=)
7: oSelOf5aA6ezO3E8iAmBsJzt2zk.asa (hash: e0luP9mt5FcyvtUWlHY00y5DxcfieoKokUjjKqntgJg=)
8: s6V_FnZiiuhLVPTyF6HGsUpvGmU.asa (hash: s89BKFycIikpqBjD8Od7lpfTO1vBbDb2dmXiov8hXmE=)
9: xcANJ6YqhKp5j8X2_DKN9wMAOts.asa (hash: xRlaVBYi/p35ZQzYh9VwNj2e1VQjpKgYwZ7Bcne7+vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:39:5d:7c:51:46:6e:ed:98:7f:02:1b:62:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Oct 6 11:01:32 2026 GMT
Not After : Oct 7 11:01:32 2026 GMT
Subject: CN=417be87c890fc6ff792385fbd3e312b00fd56e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:f8:fa:23:18:a5:29:be:d6:2e:31:83:d1:
17:ae:a2:8f:85:0e:cb:32:dc:83:2e:99:74:b8:4a:
ff:c0:8d:c7:dd:a4:ac:3a:36:0f:8f:cf:d2:20:42:
44:de:1e:db:13:0b:d2:8d:35:4c:a3:08:8f:60:f3:
fb:15:ca:54:4b:d0:9b:d5:42:17:fd:d0:03:25:c9:
98:1a:a9:0c:cb:dd:d6:d8:43:cd:c3:9e:d3:42:c3:
82:81:e1:cc:aa:a4:e0:88:ed:c6:3f:86:5b:cb:18:
d6:b5:39:3b:69:35:d7:28:27:0b:13:f2:d4:bf:03:
55:9a:9c:8c:bb:bf:f8:88:4d:bc:ef:62:89:c5:0b:
e8:c0:7a:1b:dc:ad:7d:b6:17:8e:65:bf:c8:fd:77:
17:57:2e:d2:b1:3e:5d:0b:9b:b6:b2:96:61:50:70:
7a:a8:af:9f:b6:12:a1:0d:e1:32:ad:6f:b2:bf:43:
a5:c9:af:de:e5:b4:c9:a4:b3:a7:ed:11:c2:3f:38:
65:02:96:1b:96:c6:79:f1:6b:c0:7d:0a:d1:fd:95:
88:bd:b8:6e:98:f3:22:84:4c:38:3c:30:f7:35:24:
eb:28:80:dd:92:82:9c:55:46:59:7f:b4:59:d3:90:
71:94:20:4c:b6:dd:40:3b:20:b9:b0:0f:fe:f7:05:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:E8:7C:89:0F:C6:FF:79:23:85:FB:D3:E3:12:B0:0F:D5:6E:25
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4f:e6:21:ce:03:0f:35:09:57:f4:b1:3f:75:6f:17:40:2e:
05:29:9e:e6:7e:7e:5c:5a:85:5e:6f:e0:f0:bb:f7:fa:85:bb:
77:7e:c1:cb:8d:ef:a7:11:3f:b5:34:cc:f7:39:be:e5:69:e6:
b8:9f:c1:77:7c:50:00:5b:14:11:3a:fe:d8:b3:6e:73:43:92:
b1:22:d7:9d:84:04:e5:d6:60:1a:cb:5c:b9:92:7c:7b:8f:1f:
e7:6c:3a:5b:2b:f5:f8:73:94:76:ab:3d:d4:ba:8c:cd:b9:79:
d6:8d:a0:72:33:48:dd:f0:de:2b:5d:46:b5:93:f4:9e:00:0c:
6a:fa:2b:c6:5c:d5:54:ca:e7:3f:e4:f2:09:1c:0a:85:84:be:
28:65:2f:b8:db:e2:46:93:51:7b:f3:72:c3:a1:79:a3:f5:3a:
c6:22:58:3b:90:6e:8d:79:ff:e0:68:ac:09:4d:4d:6f:2f:04:
51:50:e5:a9:ee:eb:07:2b:82:6b:96:be:38:56:5c:79:05:0a:
8d:e7:0b:7d:f0:d1:ee:af:5a:78:2f:8b:e0:1f:3e:e3:db:2e:
08:20:d8:ce:b8:b3:23:9c:fd:12:b9:56:6b:f3:7c:cf:30:e8:
bb:1d:83:5c:f6:37:d8:96:7c:f1:4b:c3:bf:09:c0:97:e4:17:
17:c5:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:59:44 2026 by rpki-client