Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: AeDpEzz2cdwITipEzweWyBXkW01E8ZqvE3lCBvFSBk0=
Subject key identifier: 67:D7:5F:E7:C6:B8:9E:F0:59:73:F4:50:7F:36:7F:06:5C:0F:7F:33
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A02A349C817C0D44EEB46344C53993DB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 056A
Signing time: Sat 22 Aug 2026 16:01:26 +0000
Manifest this update: Sat 22 Aug 2026 16:01:26 +0000
Manifest next update: Sun 23 Aug 2026 16:01:26 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: CYsL4jBtVcQACYsNmBfllvAjlNQZBxGlGa/l13j6FjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:34:9c:81:7c:0d:44:ee:b4:63:44:c5:39:93:db:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Aug 22 16:01:26 2026 GMT
Not After : Aug 23 16:01:26 2026 GMT
Subject: CN=67d75fe7c6b89ef05973f4507f367f065c0f7f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:8d:c3:11:35:3e:7b:48:b8:5a:8f:24:36:
fd:0d:3c:b4:19:f0:d0:6e:0c:d4:b3:7f:f3:e9:9c:
1c:bd:57:f3:26:f2:9c:71:f3:38:39:24:98:71:f2:
73:7c:8a:04:aa:66:56:af:ad:f9:3d:d3:6d:cf:f7:
53:c1:3c:82:c8:44:9e:ec:0e:7c:57:e7:65:37:7f:
0a:bb:f8:c0:fc:a6:5a:6a:3f:5c:3c:52:31:2c:90:
6f:28:da:f7:02:82:71:1b:4b:09:66:ea:5f:ec:e1:
a1:a3:19:b7:a8:0e:2e:fe:50:10:d7:7b:18:ba:1c:
9a:7c:8b:e1:fd:8b:d3:f3:ac:2b:81:6b:94:5c:0a:
e1:c3:bb:b4:a0:07:f0:4f:68:dd:e7:41:97:26:60:
e6:1c:04:b8:71:8d:86:43:51:f3:28:32:bd:20:af:
51:38:b4:b8:54:c0:99:80:95:c7:92:a6:25:32:81:
81:af:c8:df:cb:50:79:32:04:3c:58:2e:3a:5f:e3:
a7:b6:a3:14:bf:2c:51:d7:2e:4b:fe:f0:c1:be:33:
d7:25:c4:e7:20:06:81:77:63:9e:27:a3:b9:1a:98:
bc:fe:7b:c4:55:f4:95:0f:a2:da:a7:6d:f2:9f:8b:
f0:48:54:62:53:8b:0e:49:d3:ce:f9:df:4c:9e:ab:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:5F:E7:C6:B8:9E:F0:59:73:F4:50:7F:36:7F:06:5C:0F:7F:33
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b8:b6:7f:1f:1e:1a:ad:40:6d:20:01:7f:01:eb:aa:e9:b2:
40:c2:68:e9:64:42:38:e4:07:f9:fb:da:fb:60:1c:5d:6c:f3:
e8:f9:ae:a9:41:7d:6b:a6:33:e9:f2:bd:8f:08:97:0b:8b:1f:
fb:14:7b:58:45:b1:c1:fd:2c:43:8a:ea:70:e2:e9:8b:95:00:
9b:f1:e8:76:01:67:00:57:73:29:90:41:21:5a:f7:46:b4:5b:
3f:22:bf:32:14:9c:4d:11:b7:d6:1c:66:e1:d3:9f:72:67:1d:
75:c3:b2:02:62:33:cd:cd:39:8e:4b:08:79:fe:c1:54:77:8b:
92:b6:9f:3f:e6:7e:40:b8:43:00:a6:99:fd:e3:04:1f:ae:b4:
c2:02:d0:ac:5a:9a:8e:db:46:72:61:a0:98:84:2d:41:c1:e9:
21:63:33:02:f2:d2:7a:e5:d0:29:8d:e7:41:bc:3a:7d:38:9e:
6b:dc:22:09:e4:44:b6:72:6d:ca:18:96:f4:01:a2:40:7b:2a:
ac:ac:b3:9b:7e:ac:0c:b2:da:96:63:63:4d:0a:ef:25:2a:99:
6d:4f:2c:97:c4:8c:74:31:2a:82:0c:8a:08:92:54:86:1c:99:
73:ef:e9:5d:fe:00:5a:4c:f1:e1:a0:7a:c5:b0:ad:ca:33:69:
37:e3:fa:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAqNJyBfA1E7rRjRMU5k9slMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4
MWQyZmQwHhcNMjYwODIyMTYwMTI2WhcNMjYwODIzMTYwMTI2WjAzMTEwLwYDVQQD
Eyg2N2Q3NWZlN2M2Yjg5ZWYwNTk3M2Y0NTA3ZjM2N2YwNjVjMGY3ZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgeNwxE1PntIuFqPJDb9DTy0GfDQ
bgzUs3/z6ZwcvVfzJvKccfM4OSSYcfJzfIoEqmZWr635PdNtz/dTwTyCyESe7A58
V+dlN38Ku/jA/KZaaj9cPFIxLJBvKNr3AoJxG0sJZupf7OGhoxm3qA4u/lAQ13sY
uhyafIvh/YvT86wrgWuUXArhw7u0oAfwT2jd50GXJmDmHAS4cY2GQ1HzKDK9IK9R
OLS4VMCZgJXHkqYlMoGBr8jfy1B5MgQ8WC46X+OntqMUvyxR1y5L/vDBvjPXJcTn
IAaBd2OeJ6O5Gpi8/nvEVfSVD6Lap23yn4vwSFRiU4sOSdPO+d9Mnqvy1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfXX+fGuJ7wWXP0UH82fwZcD38zMB8GA1UdIwQY
MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt
NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2
LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnri2fx8e
Gq1AbSABfwHrqumyQMJo6WRCOOQH+fva+2AcXWzz6PmuqUF9a6Yz6fK9jwiXC4sf
+xR7WEWxwf0sQ4rqcOLpi5UAm/HodgFnAFdzKZBBIVr3RrRbPyK/MhScTRG31hxm
4dOfcmcddcOyAmIzzc05jksIef7BVHeLkrafP+Z+QLhDAKaZ/eMEH660wgLQrFqa
jttGcmGgmIQtQcHpIWMzAvLSeuXQKY3nQbw6fTiea9wiCeREtnJtyhiW9AGiQHsq
rKyzm36sDLLalmNjTQrvJSqZbU8sl8SMdDEqggyKCJJUhhyZc+/pXf4AWkzx4aB6
xbCtyjNpN+P66w==
-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:04 2026 by rpki-client