Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: KM2OedUWC3aERZW5KVzAvGwe0e+NhhUHrIcBlNfGw2E=
Subject key identifier: A1:2A:E5:9B:26:54:5C:57:44:7C:00:EB:09:80:9D:A1:73:D1:4B:52
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019E56DB32976799081A76A461E819DD3AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 0478
Signing time: Sat 23 May 2026 22:01:06 +0000
Manifest this update: Sat 23 May 2026 22:01:06 +0000
Manifest next update: Sun 24 May 2026 22:01:06 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: 9NjMopJE48AI0WE1Lx1RMy30X8B2JgusQr+a/5hqRic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:56:db:32:97:67:99:08:1a:76:a4:61:e8:19:dd:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: May 23 22:01:06 2026 GMT
Not After : May 24 22:01:06 2026 GMT
Subject: CN=a12ae59b26545c57447c00eb09809da173d14b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:fc:9d:97:8e:f0:9d:c9:de:30:59:fb:18:
72:64:b7:ed:e8:2a:da:22:33:0c:7e:b5:e8:c4:cd:
1c:84:fb:b2:d3:ce:07:71:6c:67:4c:35:58:56:b0:
87:8c:e1:01:4c:0c:d7:0c:a7:f3:32:99:7a:99:fe:
aa:1b:4a:e3:ae:b9:62:fe:31:90:cd:0f:46:82:e2:
59:eb:23:cd:d0:f7:c3:59:f1:d1:ed:e4:64:17:30:
3d:6e:0e:da:d8:6e:2f:32:7a:72:93:3b:b3:2d:5e:
e9:96:cc:f5:61:ea:2f:6f:8a:3d:dd:33:89:b7:1c:
a8:91:fa:59:91:ef:0b:c6:44:91:d4:ba:c6:a4:bf:
52:0f:79:46:85:ca:11:30:6d:c0:74:ab:57:a6:05:
fa:6c:e7:b8:23:a4:27:bd:d0:7e:7c:53:b9:78:8d:
c9:42:c7:c0:90:8c:63:91:ba:83:11:ca:d7:a0:70:
0f:31:f8:4e:d4:2a:3b:61:8f:ff:ad:80:27:c3:eb:
26:88:14:76:08:82:1f:11:65:4f:9d:9f:36:55:42:
87:e5:9e:32:0f:54:85:12:c2:cd:63:d3:1e:51:0f:
68:63:c9:42:fa:d7:14:91:aa:1b:36:ca:16:e1:f4:
83:e0:c5:ae:ac:9d:76:31:bc:0f:0c:65:a4:b4:de:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:E5:9B:26:54:5C:57:44:7C:00:EB:09:80:9D:A1:73:D1:4B:52
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:2f:73:77:fb:c2:47:e4:f5:77:ee:ee:5f:7c:26:62:38:
f1:f1:c6:89:02:13:62:5e:ea:14:5d:17:87:04:6c:1f:0d:fe:
f9:a6:93:65:e5:d0:e4:42:9e:ef:24:2d:26:d8:2b:25:cb:0d:
63:3c:ad:5c:2d:92:a6:86:dc:83:7a:8f:9f:5e:3c:8d:54:b4:
88:61:24:b2:d8:54:44:ad:74:ad:af:34:d2:8a:55:2a:ce:7a:
ff:2a:e5:02:c5:ba:97:27:c9:45:6f:f4:e4:3f:19:c2:6d:70:
60:b4:1f:92:44:05:dc:f5:6d:d0:02:a4:2d:12:09:80:a9:1d:
dd:51:c0:8f:fe:49:82:68:fc:3b:01:d7:89:4f:c2:bc:7d:a8:
88:01:e6:29:13:c5:8f:82:4a:dc:2d:cc:c3:76:2e:1d:32:fd:
4e:fa:fa:38:84:17:1c:45:ed:3c:25:f8:2f:1e:2c:5d:1b:61:
d0:40:8f:0f:0f:38:54:9f:1d:c5:cf:44:32:1d:f4:1d:eb:d4:
ee:0b:42:68:ec:98:54:25:64:42:f5:d6:1d:8a:64:69:64:01:
ea:99:6a:8d:e3:46:38:24:f2:37:86:36:5d:4d:34:5a:a0:20:
81:9f:9e:6a:ab:ae:7d:41:95:28:05:e3:47:bf:7e:1e:e7:36:
c1:07:5d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5W2zKXZ5kIGnakYegZ3TqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4
MWQyZmQwHhcNMjYwNTIzMjIwMTA2WhcNMjYwNTI0MjIwMTA2WjAzMTEwLwYDVQQD
EyhhMTJhZTU5YjI2NTQ1YzU3NDQ3YzAwZWIwOTgwOWRhMTczZDE0YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hf8nZeO8J3J3jBZ+xhyZLft6Cra
IjMMfrXoxM0chPuy084HcWxnTDVYVrCHjOEBTAzXDKfzMpl6mf6qG0rjrrli/jGQ
zQ9GguJZ6yPN0PfDWfHR7eRkFzA9bg7a2G4vMnpykzuzLV7plsz1Yeovb4o93TOJ
txyokfpZke8LxkSR1LrGpL9SD3lGhcoRMG3AdKtXpgX6bOe4I6QnvdB+fFO5eI3J
QsfAkIxjkbqDEcrXoHAPMfhO1Co7YY//rYAnw+smiBR2CIIfEWVPnZ82VUKH5Z4y
D1SFEsLNY9MeUQ9oY8lC+tcUkaobNsoW4fSD4MWurJ12MbwPDGWktN6duQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEq5ZsmVFxXRHwA6wmAnaFz0UtSMB8GA1UdIwQY
MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt
NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2
LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+wvc3f7
wkfk9Xfu7l98JmI48fHGiQITYl7qFF0XhwRsHw3++aaTZeXQ5EKe7yQtJtgrJcsN
YzytXC2Spobcg3qPn148jVS0iGEksthURK10ra800opVKs56/yrlAsW6lyfJRW/0
5D8Zwm1wYLQfkkQF3PVt0AKkLRIJgKkd3VHAj/5Jgmj8OwHXiU/CvH2oiAHmKRPF
j4JK3C3Mw3YuHTL9Tvr6OIQXHEXtPCX4Lx4sXRth0ECPDw84VJ8dxc9EMh30HevU
7gtCaOyYVCVkQvXWHYpkaWQB6plqjeNGOCTyN4Y2XU00WqAggZ+eaquufUGVKAXj
R79+Huc2wQddOQ==
-----END CERTIFICATE-----
Generated at Sun May 24 04:37:53 2026 by rpki-client