Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/760f0e-9c02-4dee-a8b9-8626ca5f5cab/1/0zBKtQJ4sTNhcfbzcjmBzB6Voos.mft
File: 0zBKtQJ4sTNhcfbzcjmBzB6Voos.mft (raw, json)
Hash identifier: CeDcioNV1xJ7DnZuu64WSxSRBKmPeyOwkR8va5ZEXRA=
Subject key identifier: 41:01:C7:B7:AF:90:77:F8:C8:41:FF:C9:53:50:B6:2A:C6:64:75:F6
Authority key identifier: D3:30:4A:B5:02:78:B1:33:61:71:F6:F3:72:39:81:CC:1E:95:A2:8B
Certificate issuer: /CN=d3304ab50278b1336171f6f3723981cc1e95a28b
Certificate serial: 019D3488A1DB64D078BA7CE223AE39924B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zBKtQJ4sTNhcfbzcjmBzB6Voos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/760f0e-9c02-4dee-a8b9-8626ca5f5cab/1/0zBKtQJ4sTNhcfbzcjmBzB6Voos.mft
Manifest number: 0D
Signing time: Sat 28 Mar 2026 13:01:02 +0000
Manifest this update: Sat 28 Mar 2026 13:01:02 +0000
Manifest next update: Sun 29 Mar 2026 13:01:02 +0000
Files and hashes: 1: 0zBKtQJ4sTNhcfbzcjmBzB6Voos.crl (hash: +c/OxY2PBBhMxubEUHJUtGrUnEOyTrDGu/1MH58jhlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/760f0e-9c02-4dee-a8b9-8626ca5f5cab/1/0zBKtQJ4sTNhcfbzcjmBzB6Voos.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/760f0e-9c02-4dee-a8b9-8626ca5f5cab/1/0zBKtQJ4sTNhcfbzcjmBzB6Voos.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zBKtQJ4sTNhcfbzcjmBzB6Voos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:a1:db:64:d0:78:ba:7c:e2:23:ae:39:92:4b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3304ab50278b1336171f6f3723981cc1e95a28b
Validity
Not Before: Mar 28 13:01:02 2026 GMT
Not After : Mar 29 13:01:02 2026 GMT
Subject: CN=4101c7b7af9077f8c841ffc95350b62ac66475f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:9b:82:8b:af:d0:9c:74:fd:10:89:c3:73:
c7:6a:c0:ec:3b:27:48:f7:e4:99:90:c2:30:c0:7a:
6d:12:cf:95:42:45:db:71:43:a4:90:7d:3b:e2:e3:
fc:b0:ad:ae:95:51:01:5e:d6:09:c1:83:c8:b9:21:
46:a5:85:78:13:36:f0:30:3a:f6:0c:db:12:cd:4b:
dc:1f:89:e5:62:0f:bf:4b:dd:62:e5:f0:8f:f4:ed:
12:67:0b:7a:11:65:4f:fa:f3:dc:67:4f:12:dc:7e:
96:ea:12:13:00:8b:41:1d:a2:d1:9c:17:e8:ac:33:
9d:15:26:9a:0d:8a:30:3b:5f:20:ba:47:0d:98:53:
8c:ec:7d:20:9e:b9:3a:78:07:b3:a0:1e:76:84:92:
4f:78:2e:05:86:d8:24:29:71:94:b1:2e:de:19:a2:
94:68:de:bc:57:76:6c:1c:d7:7a:9c:ee:b5:75:b3:
b0:57:a8:cd:9e:3e:fd:3d:5d:dd:d3:5d:d5:ff:f8:
8e:7b:fd:c7:7a:14:8c:a6:14:e3:27:68:fe:f2:57:
c0:18:3d:7e:29:2a:27:b2:16:a9:dc:5a:44:67:75:
13:e7:5d:8a:82:5f:63:2d:38:18:ac:c8:4e:0a:63:
b5:66:3c:b5:c9:7c:a5:b2:4a:e0:1d:31:72:f7:37:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:C7:B7:AF:90:77:F8:C8:41:FF:C9:53:50:B6:2A:C6:64:75:F6
X509v3 Authority Key Identifier:
keyid:D3:30:4A:B5:02:78:B1:33:61:71:F6:F3:72:39:81:CC:1E:95:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zBKtQJ4sTNhcfbzcjmBzB6Voos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/760f0e-9c02-4dee-a8b9-8626ca5f5cab/1/0zBKtQJ4sTNhcfbzcjmBzB6Voos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/760f0e-9c02-4dee-a8b9-8626ca5f5cab/1/0zBKtQJ4sTNhcfbzcjmBzB6Voos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:c6:a6:a3:88:a1:c1:a5:af:92:47:14:7d:15:8d:68:63:
4e:be:e4:9c:21:fd:e7:06:9a:53:a0:54:3a:87:96:ea:a9:9b:
93:3b:14:65:92:ac:8d:2f:62:b6:cf:6d:68:7d:06:4b:07:17:
7a:b8:cb:37:7b:cc:4f:0f:18:40:a0:d7:69:b1:60:69:6a:61:
d9:73:02:ca:c9:17:fa:94:1c:b0:fd:4c:ca:b1:8e:7a:bf:e0:
78:ea:39:90:1c:59:c1:26:0c:0d:21:54:da:b2:50:2c:44:8f:
8d:23:60:f0:36:1f:9c:3b:18:94:19:7f:f9:0c:16:fd:22:8e:
99:1a:c8:8c:54:79:20:ab:80:9d:5e:e4:92:b5:8e:6c:74:13:
da:ec:b8:5e:20:68:81:e6:f1:44:65:1c:81:8f:00:8f:cf:0c:
82:5b:1f:17:32:78:08:f8:7e:12:45:22:85:b0:af:da:4b:8f:
42:99:91:08:ff:aa:17:bf:ab:98:77:5a:b8:92:51:2d:d2:6e:
41:ce:f6:85:1d:6b:93:17:47:a9:74:fd:28:8e:9c:7e:bb:c8:
e1:4a:e7:0d:99:dd:12:98:ec:57:f8:e5:62:a1:66:fb:71:61:
ce:d9:44:b0:1c:0e:ed:42:db:81:ab:ea:4d:e5:27:80:26:45:
6e:c7:4c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:03 2026 by rpki-client