Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: r3BTrWZ0pSM9BM+oZuZpTA2DKn1j49Jeks+jQQyEdhs=
Subject key identifier: C8:6C:06:84:41:8E:75:15:E0:4A:15:15:44:EB:96:F7:2F:D8:D7:99
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019E1DC76FA5281204F5DDF7B363D0E4D102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1301
Signing time: Tue 12 May 2026 20:01:09 +0000
Manifest this update: Tue 12 May 2026 20:01:09 +0000
Manifest next update: Wed 13 May 2026 20:01:09 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: UKautveHknpVL02VKX8NpjmRitnY3DKOV/pg04U/55E=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:6f:a5:28:12:04:f5:dd:f7:b3:63:d0:e4:d1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: May 12 20:01:09 2026 GMT
Not After : May 13 20:01:09 2026 GMT
Subject: CN=c86c0684418e7515e04a151544eb96f72fd8d799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:88:6f:69:75:a0:42:9d:48:33:d5:ca:6c:
ee:e2:15:1c:13:03:bb:9c:42:c7:27:10:a7:92:48:
16:34:09:dd:c4:6a:2c:a1:66:23:4f:2c:94:f7:34:
48:d7:9c:0a:a0:a4:62:e4:7d:05:94:e6:b5:2e:ef:
88:2e:73:b1:b6:1b:33:9e:d7:7c:c9:32:26:82:2b:
2a:3f:ad:2e:bc:77:5c:59:3e:c6:d0:7a:bd:65:12:
4c:c0:d2:ff:ea:c1:52:c1:50:76:20:00:14:6d:ef:
e5:5b:33:6e:1a:fa:a2:b8:e2:3c:6b:c4:1c:46:b9:
0a:ad:8f:4c:b0:cc:e6:25:4f:4e:79:05:ea:88:5e:
62:79:74:4a:8c:e5:86:ed:86:4d:a7:98:ce:2b:ca:
4f:e2:4b:1f:13:55:9d:64:22:6c:26:ae:11:8c:d3:
1c:6c:f4:62:7e:c4:ea:97:9f:e4:50:19:64:e9:72:
0e:66:6c:f8:e0:90:04:c2:09:a7:a6:90:08:67:e1:
cb:1a:6f:b7:90:1e:b2:ef:56:d5:ad:e5:32:e7:b8:
d4:16:50:9d:22:0e:94:0f:98:2d:41:33:b8:a9:ac:
20:2e:13:70:87:38:7b:30:96:bc:fd:7a:97:11:65:
2d:c9:f1:7d:27:47:65:61:85:0e:b8:7f:7f:d5:8a:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:06:84:41:8E:75:15:E0:4A:15:15:44:EB:96:F7:2F:D8:D7:99
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:95:e1:8f:5c:21:d2:6e:cb:82:d5:39:2f:2a:40:4f:73:61:
77:42:b7:b2:9b:c6:2c:a8:5b:5f:45:8b:da:85:00:65:9f:64:
3e:86:f7:d4:e5:13:42:c6:27:9b:f4:aa:18:9c:23:1d:70:f9:
aa:4f:43:51:5c:2a:48:f4:ec:1e:36:d4:13:60:30:8d:96:a5:
46:74:a9:05:3e:a7:c4:a0:3f:b1:66:09:0a:5b:64:de:0d:22:
7a:67:ee:8b:60:d1:2a:94:26:1c:3a:fa:25:4e:b3:82:7e:17:
4d:fb:ca:b2:11:b6:b0:d6:26:85:6b:53:95:d7:5f:88:20:23:
47:df:91:ba:1d:4b:be:0a:e1:89:c0:c9:f9:1d:51:a4:00:bf:
78:f0:66:e0:9e:d4:d4:c7:b2:0a:71:aa:de:03:09:32:e2:0a:
ba:04:a3:5d:10:32:15:4e:2e:56:4c:f8:7e:5d:26:e5:7b:3e:
bf:40:4d:30:35:b0:45:91:44:4a:ce:15:f0:03:9b:24:a0:28:
fd:82:99:8e:0d:09:47:76:73:f0:0c:66:67:70:82:62:75:c4:
1f:49:43:ae:20:10:8c:5c:1b:cf:25:3a:aa:75:44:06:1c:29:
0a:8f:c8:49:44:11:3b:82:ab:58:87:ba:40:82:36:04:2e:82:
a9:7b:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:36 2026 by rpki-client