Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: nkFbN9rUMq10PabDteX1F953iMpDJuOvgxBojYHROlE=
Subject key identifier: 34:06:CF:7D:25:6A:BF:5D:EB:AB:B1:3C:73:39:B0:62:FC:AD:A8:76
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019D390A2EB4B465BE221A97DCAE696B4238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 03E4
Signing time: Sun 29 Mar 2026 10:01:01 +0000
Manifest this update: Sun 29 Mar 2026 10:01:01 +0000
Manifest next update: Mon 30 Mar 2026 10:01:01 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: NrSge5wjQxQYKxBu3xDEi7MG4Xtlvwy7Lo7lPVfiGXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2e:b4:b4:65:be:22:1a:97:dc:ae:69:6b:42:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Mar 29 10:01:01 2026 GMT
Not After : Mar 30 10:01:01 2026 GMT
Subject: CN=3406cf7d256abf5debabb13c7339b062fcada876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:c6:60:d9:f9:1a:60:27:c6:a3:0c:41:d5:
21:07:d4:81:cd:57:40:32:5c:52:f6:26:8b:4b:a9:
03:3b:32:83:d1:fa:d5:bf:22:ed:c3:89:37:0a:d9:
0e:d1:b6:41:02:54:af:6f:32:7b:bb:db:22:c5:85:
43:10:91:47:88:39:4a:df:45:4d:14:2d:e1:f8:b6:
9a:ca:87:f4:4a:d1:08:08:3b:fc:08:8c:bb:7e:19:
de:c4:f5:57:c8:7c:a2:59:b4:bb:87:fb:30:48:d3:
87:9d:c7:65:6f:a8:6a:d6:0e:5c:03:a4:1d:ae:12:
d3:52:4e:d6:b9:6c:07:f0:b6:63:c1:6c:f8:f5:d0:
40:93:6c:d4:6c:e6:db:af:05:47:bc:1e:d1:f8:1c:
44:79:d4:06:e0:41:77:5a:d8:62:0a:3e:40:2e:77:
73:49:10:12:2c:01:79:a8:6a:2c:f0:d0:b9:9b:e4:
86:5f:48:88:a1:3f:ab:21:cc:98:61:23:a5:ea:7b:
6c:e6:6f:f7:9c:21:81:f6:86:cc:70:d5:01:15:ee:
8e:a3:d4:e0:d4:3e:02:75:29:29:70:b3:d4:e9:11:
79:10:48:d9:d1:16:ae:09:10:20:4d:b5:3d:ab:6f:
6d:ed:ac:49:92:34:d7:48:86:2a:88:f3:c3:27:8d:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:CF:7D:25:6A:BF:5D:EB:AB:B1:3C:73:39:B0:62:FC:AD:A8:76
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:57:b3:df:d8:20:6d:9c:7a:72:90:a0:55:4b:ef:23:2a:
48:43:53:f6:12:c2:f0:59:fa:a7:b7:b0:db:c1:83:e6:71:71:
67:a9:e7:04:da:3c:18:9b:74:9f:6f:fb:e3:65:ff:cd:70:45:
6a:18:76:f1:43:9d:80:8e:fb:a1:86:c3:31:07:44:6e:50:09:
52:b8:75:d3:9f:f3:4d:5c:80:d7:91:90:b5:d9:69:03:14:e8:
52:53:97:d6:7d:c2:d5:e3:df:c8:2e:30:d7:d8:20:b5:63:6e:
8b:d1:61:48:5c:33:a1:bd:54:24:dd:1a:87:54:9c:ba:b5:49:
a0:3f:29:2b:30:4c:c2:a8:0f:1f:e5:c6:7b:c9:6e:b9:11:08:
b7:63:77:ba:0f:a9:a1:fb:20:a8:5d:74:32:0f:31:2b:f7:90:
c5:4f:70:85:48:43:51:64:6b:05:d8:9e:c1:a0:95:5e:38:f2:
ba:49:6a:9c:53:8f:66:c2:c9:8a:86:a4:9b:43:60:12:26:b0:
5f:2f:3e:9f:55:79:9f:df:01:bd:ef:1e:61:7c:18:22:f1:99:
4f:3f:86:6e:4e:24:51:a2:28:bc:43:ad:61:8a:21:e1:48:67:
52:dd:32:6a:ac:a4:69:8f:bc:4c:69:34:0c:99:eb:8f:4e:4a:
e0:a8:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:34 2026 by rpki-client