Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: X3mZ7AyiEYu5DnBobZE2EuWc+UVxjvApAjC/9FVXLOA=
Subject key identifier: 3A:52:9C:EF:B6:13:D5:C7:29:F3:B2:21:CD:8D:67:A7:AD:4B:22:45
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A170934264237D3C01D17396926361DB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 0615
Signing time: Sun 25 Oct 2026 01:01:01 +0000
Manifest this update: Sun 25 Oct 2026 01:01:01 +0000
Manifest next update: Mon 26 Oct 2026 01:01:01 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: 43jD70nxjDt8CvUnP6f_8Hr0imA.roa (hash: JQkmSJMn+rtoFqaD2I0l0rJUF6o8ZlOkdptsnrhMvv4=)
3: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: HEWyHNgL1Nhl9KwdtQokILjqZet1Sr6oJ9iO+vxHWxM=)
4: uUkYTWJlvzaPh0qHhHyoZNFlGIk.roa (hash: LBun7MYL+1YtN2glOK5uK1eDRtkgLoINsdtK7MQ7+90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:93:42:64:23:7d:3c:01:d1:73:96:92:63:61:db:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Oct 25 01:01:01 2026 GMT
Not After : Oct 26 01:01:01 2026 GMT
Subject: CN=3a529cefb613d5c729f3b221cd8d67a7ad4b2245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:4d:33:dd:2c:7e:44:f7:83:f6:ca:50:2d:
51:07:7f:ac:72:2e:c4:03:0f:3d:50:31:40:28:d7:
b9:95:d6:82:19:3c:1c:83:18:45:3b:9a:08:d9:51:
c9:0a:30:aa:2a:d8:45:14:19:31:18:1a:45:5c:42:
ae:dd:2b:9d:d4:35:83:a7:e1:96:3f:0e:8f:9b:cc:
37:58:10:b3:85:c4:6a:36:d9:46:e3:9a:f5:6d:04:
c9:f1:a1:39:17:01:bc:c8:7b:ff:8a:bc:a1:de:5b:
a2:bd:a2:d6:14:1e:67:0f:82:66:b2:74:a9:95:77:
7e:3c:98:da:af:de:20:e1:96:8e:7b:9f:be:60:87:
a8:2b:95:02:fe:e0:80:97:b4:93:9a:44:5e:8f:fd:
75:45:e9:b7:8b:5b:1e:95:c9:c4:c3:41:79:f6:a7:
f3:83:9f:68:cf:af:05:8e:8c:e5:53:78:99:de:4d:
32:df:8f:7c:42:59:dd:41:35:93:81:c3:f6:52:40:
57:2e:ab:a1:b8:7f:af:ab:8b:b1:69:1b:8d:3d:4d:
7c:35:b6:ca:1c:62:8e:25:b3:ff:44:1c:ea:fe:50:
b1:0b:98:12:50:39:1f:4e:d9:20:ba:cd:03:f2:32:
89:69:64:d1:cd:24:3e:cc:e8:ac:7b:d8:cf:4f:71:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:9C:EF:B6:13:D5:C7:29:F3:B2:21:CD:8D:67:A7:AD:4B:22:45
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a6:9e:0a:9a:1a:3a:e6:b0:de:34:bd:1a:41:37:31:91:20:
06:d8:29:ad:ea:f3:49:04:73:82:f9:dd:97:94:8f:98:ba:c7:
95:95:ec:f0:e4:b3:60:7d:48:35:e8:df:ef:ac:5e:65:b4:ee:
42:89:9a:05:30:36:d3:bd:bf:f2:96:02:48:7f:5b:7d:44:91:
5c:2c:85:55:32:b0:9f:b2:be:26:d4:7d:f3:62:28:88:82:f5:
9f:8a:0a:c3:77:91:14:d4:2f:4c:48:33:85:32:d4:96:bc:63:
a8:93:0a:4b:9b:a5:20:f7:e7:f7:b5:06:b9:87:37:f0:bc:ec:
40:92:60:6c:61:aa:ac:d4:b2:7c:58:d1:fa:19:b8:03:b4:21:
fc:46:71:71:e5:99:09:65:d5:d6:46:89:9d:64:9b:07:bc:7c:
ef:b1:7f:07:71:97:ab:e7:2d:9c:db:3a:1f:a5:16:b8:bc:e8:
34:0a:eb:c1:91:93:7f:52:78:c5:6f:fa:38:b3:f8:c8:e9:13:
11:c4:94:c0:62:3c:b4:3a:e1:7f:5c:cb:41:a5:8b:cc:08:37:
7e:af:2e:4b:41:68:2c:dd:47:94:4d:d8:cb:43:ce:53:96:02:
fe:b4:64:a4:3e:4e:ff:4b:45:df:e5:e3:db:c0:f4:c5:51:5f:
0d:ab:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:48:11 2026 by rpki-client