Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: XzM++fDQ3aRRyrO87ljW2ghJhy1DwsU6k1Y2OZQA7hU=
Subject key identifier: 38:82:1C:55:D1:E6:38:2B:0B:00:7E:CA:A0:E3:EC:62:EB:03:36:80
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019D2704A1DC70FA7C244F1CB5E6417C2DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0BAA
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: cvZsnHDoLQCzYdYLij0tP4mz+S/S3KQcGIyBwoH0BOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a1:dc:70:fa:7c:24:4f:1c:b5:e6:41:7c:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=38821c55d1e6382b0b007ecaa0e3ec62eb033680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:15:07:6a:97:c5:c0:fd:92:26:51:43:30:
24:c9:98:88:53:24:49:9c:23:45:82:a3:fb:23:86:
04:fc:57:fb:a6:df:bb:35:c3:ca:4d:2d:a7:74:7e:
3e:b3:c1:f3:1b:32:5c:77:0b:eb:21:b3:51:2c:17:
50:4b:3c:ad:d0:ab:45:93:33:6f:e4:f9:ab:96:e6:
6d:b4:56:6a:34:bb:d6:00:55:59:a3:af:4f:29:73:
f3:81:04:05:0b:b3:26:d4:94:3e:90:88:71:ae:ee:
6b:80:6c:52:13:e2:d3:bf:6d:cb:f0:2e:ee:b1:4c:
cf:0a:91:e2:34:f2:4c:70:bd:aa:56:02:3d:9d:01:
6d:47:43:e6:1b:46:63:d6:65:ef:2d:f3:d3:2e:98:
71:46:2d:9e:2e:bd:2f:c8:97:99:64:47:50:b1:94:
8b:76:4a:12:b1:b9:4e:36:c5:ce:95:b0:00:72:22:
67:b5:51:aa:c6:c6:41:34:e2:cc:d8:26:b8:e5:ed:
d8:ae:50:49:59:07:b2:fe:37:7d:0f:7d:e3:89:cd:
b3:51:41:2e:55:b2:97:68:9e:f6:4b:91:ea:80:7c:
48:f3:aa:29:80:d3:b5:28:6b:43:bc:9f:22:f2:e9:
c2:0a:e8:74:6f:40:25:df:3b:f5:2b:c7:b1:2b:95:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:1C:55:D1:E6:38:2B:0B:00:7E:CA:A0:E3:EC:62:EB:03:36:80
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:0c:a4:e4:8e:35:9d:c2:a9:48:e0:cc:56:b2:08:a7:71:
8f:75:bd:d0:8a:dd:ce:85:08:fd:5f:e2:07:82:26:5f:29:42:
72:3d:48:d3:5e:12:64:e9:bf:e9:08:e0:c0:3c:9d:35:ca:8a:
d7:9a:db:3e:92:4e:7f:12:57:65:16:89:79:2a:27:ce:75:36:
d1:bb:49:57:1e:bf:2e:88:19:b5:06:73:7f:28:15:c4:8b:67:
8f:ab:ba:9c:66:17:c2:9d:42:9e:42:a0:32:ac:4e:5b:6b:cf:
56:18:28:30:e7:cb:8d:f7:d6:3c:d7:2d:55:44:77:1c:f7:bf:
ac:92:d3:3a:e7:7c:27:28:11:d4:8c:0f:91:a8:51:ec:8b:fa:
69:a0:d4:65:f8:75:1e:9e:36:41:8b:18:6e:7f:7c:6b:32:c0:
d4:c6:96:c6:e9:19:0e:8a:a0:ad:f5:a2:82:75:76:91:4a:ba:
a6:b1:b3:6b:22:8b:a6:ed:41:6d:5d:43:d9:8d:f0:ea:f9:17:
cf:59:79:ad:87:52:77:6f:d9:41:82:93:96:6a:c9:ce:1e:8e:
8a:02:ba:fd:e8:77:a1:c8:27:b4:78:93:27:0a:1e:fa:ad:e9:
84:e8:09:91:a9:0a:39:07:2e:b4:94:70:f0:b1:94:83:72:3e:
47:d0:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:50 2026 by rpki-client