Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: y0JcDSUHP2LlTVci8z2J+pFpAE+Lte+wh4JwjVop5PU=
Subject key identifier: AB:BF:07:FA:59:0F:6F:7C:2A:E3:6F:02:00:CA:A5:7F:1C:19:F1:95
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019D3865F58C689C7C3EF8B8D01926FACC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 18A5
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: YpF48auesb2A+5iGg9IavK8K3FK3nJILAZx+buEQW+0=)
2: p4odwBPCjK_f_cbe3suhJpjfBd4.roa (hash: BbTKrvDIk3p4mxNlC+Mfbr4gEXADSPPB2996OHBG8d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:8c:68:9c:7c:3e:f8:b8:d0:19:26:fa:cc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=abbf07fa590f6f7c2ae36f0200caa57f1c19f195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:04:35:13:8b:e9:44:76:9e:6c:1c:02:8c:
b3:50:7f:96:cc:2b:5d:4a:e0:d4:d0:90:d3:9b:74:
99:cc:4d:ab:52:64:5c:5c:53:c9:8a:50:53:60:af:
5d:7e:57:46:a8:76:02:08:d7:bd:ef:b4:fa:09:a3:
da:86:d5:fd:d7:fd:a3:8d:11:64:8a:e3:ee:03:7e:
7d:c4:d3:56:23:55:01:bc:27:4d:48:a6:95:73:82:
0b:a2:43:50:75:99:34:fd:c7:59:55:c4:24:46:45:
69:5b:2d:fc:a4:cc:3b:95:ce:8b:f6:f6:32:27:a2:
a4:eb:83:18:94:e6:0c:64:92:20:c8:85:33:05:25:
84:01:58:56:03:7f:29:ca:ac:d6:72:75:d5:ce:99:
de:4e:67:ed:3c:c7:da:06:eb:80:a3:4d:f5:54:7f:
5d:8b:f2:0f:04:90:d0:17:14:6e:4a:3f:11:6f:2e:
63:ac:61:9d:7b:ae:e3:69:4b:b1:d6:ef:02:f5:f6:
ae:7e:ef:f8:ff:a4:38:78:54:c0:a4:84:b8:36:60:
ca:4d:32:93:55:c2:b5:21:23:a3:77:61:13:b7:52:
24:fa:8d:1c:2b:ca:a1:2f:c4:07:e4:3f:6d:e3:69:
fb:6a:31:70:17:c2:9d:df:82:94:b9:ee:ca:5a:fb:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:07:FA:59:0F:6F:7C:2A:E3:6F:02:00:CA:A5:7F:1C:19:F1:95
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:47:2c:8d:58:a8:d0:df:f6:09:1c:0c:f7:c8:c3:67:1d:b0:
74:34:f1:f2:b2:a9:12:96:fe:ba:b5:89:3d:b3:3a:b5:f6:3e:
e9:de:c1:16:c4:30:78:d1:c8:75:51:da:ae:c6:5c:68:7e:81:
75:5e:74:3a:39:ce:5a:b1:42:b1:44:01:7a:b0:24:ad:dd:3c:
fc:37:67:3e:ed:90:50:81:a2:e3:13:04:53:5b:50:2a:92:5f:
21:1f:48:33:00:71:54:94:1d:36:63:d2:18:2f:29:60:41:aa:
aa:3c:87:fb:84:fb:ca:5e:41:3d:12:c3:8a:99:92:ee:4a:f9:
47:35:2b:50:96:17:18:e8:76:ed:30:78:d7:e9:d6:75:be:d8:
75:5b:89:12:8e:18:1e:34:9f:a6:ea:10:00:64:df:08:f8:71:
b3:2e:68:f7:30:c3:bc:c0:af:1a:93:8b:b6:98:48:73:88:e3:
3c:01:da:ba:6a:0d:b5:9f:3c:12:0c:15:27:2f:70:5b:c8:e3:
6b:4c:03:30:1b:aa:71:be:5d:a2:fb:14:f5:15:49:da:c9:5a:
05:4d:32:bb:fc:46:67:1b:67:44:8b:c4:35:e8:05:21:0f:80:
e0:82:cf:c6:65:aa:3e:b7:81:86:e0:71:54:4d:ba:ff:78:98:
ef:a1:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:47 2026 by rpki-client