Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: /WYRwlh+eVzuRDUZPMn7Ig5ARQQJx9prbbix8zkLs7U=
Subject key identifier: 75:76:3F:26:30:ED:70:C9:37:F9:D1:04:1B:6E:5B:49:F8:D3:B9:5B
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A1765E1BDE869E60A91E89E2FF3DE68E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 0618
Signing time: Mon 26 Oct 2026 04:00:41 +0000
Manifest this update: Mon 26 Oct 2026 04:00:41 +0000
Manifest next update: Tue 27 Oct 2026 04:00:41 +0000
Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=)
2: 43jD70nxjDt8CvUnP6f_8Hr0imA.roa (hash: JQkmSJMn+rtoFqaD2I0l0rJUF6o8ZlOkdptsnrhMvv4=)
3: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: xMPzHhctdeJCK2dHt2u8idbfoECJvD7kMDSpihIxt6I=)
4: uUkYTWJlvzaPh0qHhHyoZNFlGIk.roa (hash: LBun7MYL+1YtN2glOK5uK1eDRtkgLoINsdtK7MQ7+90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:1b:de:86:9e:60:a9:1e:89:e2:ff:3d:e6:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Oct 26 04:00:41 2026 GMT
Not After : Oct 27 04:00:41 2026 GMT
Subject: CN=75763f2630ed70c937f9d1041b6e5b49f8d3b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:53:6b:72:f7:0e:f7:03:dc:66:00:49:1b:
fb:27:c0:e6:57:e2:4c:b3:5d:94:0f:75:6e:13:c0:
d3:f7:c1:ce:45:c8:0e:98:ef:68:98:8a:7b:93:26:
db:22:34:a2:ed:06:c1:a5:c1:11:f8:b3:04:ae:c4:
8e:c1:48:b1:b8:47:ef:d9:58:68:ec:aa:8d:be:20:
cc:5f:1b:18:fc:75:04:1b:07:3c:4a:75:00:e7:42:
b2:3e:e0:bc:5c:46:e5:d5:8d:be:1e:cf:d0:1d:ec:
b7:2d:b8:5b:df:63:b1:78:06:3c:fb:3a:0c:ea:ea:
29:16:9d:ae:8a:9d:0e:d7:36:1c:31:3b:a2:77:66:
4a:25:42:99:0c:86:b4:f5:57:1c:5f:a8:a6:03:8f:
70:2e:d6:b0:7c:9e:75:45:20:49:f7:26:52:ff:2a:
de:43:4f:1b:49:d1:2c:af:4f:4d:e5:b6:67:41:1c:
56:00:d8:d3:3a:bf:14:14:38:ef:40:a0:d2:cc:34:
e0:40:5a:91:60:29:ff:64:c2:88:71:99:da:63:92:
d6:fc:e4:85:45:b5:ef:9e:d9:06:37:38:fd:52:57:
ca:84:43:6d:52:e8:76:4a:b8:2d:4a:6a:31:b0:4b:
0c:27:f2:cb:d2:77:0c:5c:73:c9:7c:16:4c:d6:f5:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:3F:26:30:ED:70:C9:37:F9:D1:04:1B:6E:5B:49:F8:D3:B9:5B
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:21:18:27:18:d8:f1:1e:84:60:5a:68:07:a8:82:0d:93:c0:
14:bf:8e:be:d9:d2:9f:a8:12:eb:04:dc:d8:b6:81:08:92:02:
06:4e:e8:24:8a:48:be:a7:ee:d7:4e:da:12:d3:13:ff:16:fd:
b6:03:0f:ba:20:49:e2:d7:77:6b:5e:0b:24:8e:cb:bd:37:13:
42:a1:9a:e7:6c:63:24:9e:43:3a:b9:f6:30:e7:57:97:0f:9a:
ac:4b:bc:8b:9f:b1:e2:e5:4b:87:f2:a7:ed:56:73:c0:5a:59:
c6:68:06:b3:95:15:52:d6:30:3f:2f:92:3a:4e:dc:86:e8:29:
a8:5e:77:0e:32:af:41:27:0f:2b:5a:7c:b9:09:15:93:b4:f9:
9b:54:64:12:84:93:4b:9e:4b:58:1d:f3:76:b8:5b:19:1b:1d:
0e:d1:b4:d0:73:30:b4:b3:d0:9c:50:99:14:e2:9b:85:73:60:
a8:5d:43:b6:33:20:8d:ea:a7:e1:4f:03:0c:62:bf:84:5d:89:
97:9f:0e:cd:bb:7f:59:2f:18:b8:7e:ce:bb:13:3d:8c:51:1d:
2f:e3:2b:fe:42:c3:7b:6a:48:59:8f:aa:fd:f9:ea:d2:c7:e3:
0c:8c:5f:6d:02:fd:a7:c3:f4:a1:18:8d:5f:da:fe:e3:f4:e6:
19:42:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:30:29 2026 by rpki-client