Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: E9pBcLqp/nLY7+s5wy0B3vJ3ViynPBtkrbn9wmfPBIs=
Subject key identifier: 6C:A9:AF:FD:C5:E3:80:7E:9F:9D:A3:64:3A:8B:44:7E:D5:1C:9E:B1
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019F4275F807231399619EFA2C57CEB522D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 04F2
Signing time: Wed 08 Jul 2026 16:00:55 +0000
Manifest this update: Wed 08 Jul 2026 16:00:55 +0000
Manifest next update: Thu 09 Jul 2026 16:00:55 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: mFxy4TGa74G8vjzcIYMPRT3ytxT96kU/VRx9PtnzkM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:75:f8:07:23:13:99:61:9e:fa:2c:57:ce:b5:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Jul 8 16:00:55 2026 GMT
Not After : Jul 9 16:00:55 2026 GMT
Subject: CN=6ca9affdc5e3807e9f9da3643a8b447ed51c9eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:f5:34:05:de:86:02:be:f0:bb:8d:c1:b4:
8f:33:20:97:a5:22:cf:bd:66:f0:ee:5e:3a:ce:2d:
9d:3a:8e:75:05:15:61:2c:f1:cd:4c:62:31:47:21:
dd:85:ee:d5:b0:b9:86:59:1c:c7:3b:fc:40:af:56:
a8:53:2c:4a:64:32:32:ce:a7:74:9f:79:cd:ba:d3:
c7:f6:28:0d:30:b3:47:bd:08:4c:a4:50:00:85:33:
6f:d0:d4:d1:e1:f0:d9:8c:c2:f0:1e:2b:1c:29:4e:
a6:d8:41:ff:24:b4:86:d1:90:4d:78:90:eb:ad:5c:
0d:40:3d:ba:f2:98:3a:2e:28:f4:e0:79:f2:50:07:
b7:6f:17:82:ca:96:b4:2b:12:4a:4f:2c:c0:f3:bf:
43:16:f4:6a:00:22:fa:a6:c9:a4:17:8f:b5:84:c4:
f5:0b:46:c7:8b:3a:4b:ff:04:bf:ee:45:cf:be:dc:
7d:f7:20:bf:a6:2e:0c:93:ee:8a:7d:b6:18:cc:0d:
a0:90:94:b6:d4:27:f6:8f:2f:95:3b:e5:b3:13:b1:
46:28:57:30:46:4a:3c:a1:ca:0a:22:c4:48:b7:22:
a3:4c:95:ed:3a:12:b0:74:60:18:fb:b5:7c:e8:45:
c3:3e:01:46:fb:fd:fd:eb:e5:aa:a8:fa:63:1b:51:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:AF:FD:C5:E3:80:7E:9F:9D:A3:64:3A:8B:44:7E:D5:1C:9E:B1
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:69:2a:3c:c1:f2:e1:9d:ee:80:27:af:87:dd:de:1b:cb:3a:
23:96:4d:32:30:c0:95:fc:be:38:44:7c:3c:11:35:0e:76:6f:
e4:9c:a7:ad:a8:f0:98:1d:09:19:c7:c8:46:dc:b7:21:75:54:
89:df:ef:e0:30:00:c9:fa:cb:14:49:35:a9:ca:78:f1:a0:fa:
0f:3c:40:1a:53:ca:26:d8:2c:3e:63:60:28:99:7e:a9:ec:35:
47:d8:b7:f9:15:ca:0a:3b:e3:57:45:a4:e8:5a:4c:ac:7c:46:
9a:b6:92:62:e2:b2:59:f8:91:d9:cc:65:01:50:ab:e3:d7:e5:
1d:72:17:48:ee:a5:53:e3:b4:78:82:19:b7:0f:29:35:06:05:
2d:f3:ee:ec:bf:dd:65:1a:8f:46:42:c8:a4:91:31:8c:aa:00:
9b:b9:1b:09:1a:5e:f7:1f:21:07:48:1d:d6:44:45:bd:84:df:
64:02:c0:8f:e5:af:65:13:05:3c:2e:0e:1b:a7:e0:70:eb:4a:
c7:d4:32:c4:5b:a4:53:6d:04:a0:a3:04:11:6f:7e:3a:81:bc:
12:ef:66:67:d3:7d:a4:e2:37:29:83:9c:2f:86:e9:31:ab:a8:
69:96:d9:86:51:1a:98:1a:a7:bd:c1:f8:b8:e7:6e:6c:4e:da:
cd:07:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:35:05 2026 by rpki-client