Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: FyBdaNwNAYJ8O2ndIn9Xgga6rCHh+5nFQnnSl8aFn/U=
Subject key identifier: 3C:CF:74:CE:59:EE:CF:9B:BE:93:8D:B2:19:C6:33:11:F7:B0:C1:D6
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 01A0D26EC5AFA924F5A3E312D97C75542194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 0AF4
Signing time: Thu 24 Sep 2026 08:01:09 +0000
Manifest this update: Thu 24 Sep 2026 08:01:09 +0000
Manifest next update: Fri 25 Sep 2026 08:01:09 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: pIEKBiBbr83DTtaWP2kA9u3XwUG2C1//zabOvzCogzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:c5:af:a9:24:f5:a3:e3:12:d9:7c:75:54:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Sep 24 08:01:09 2026 GMT
Not After : Sep 25 08:01:09 2026 GMT
Subject: CN=3ccf74ce59eecf9bbe938db219c63311f7b0c1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:50:a1:df:f3:5a:20:97:31:b6:c6:1d:cf:
3f:18:e6:65:3b:c5:da:bc:26:4a:52:56:28:fa:3f:
31:c9:21:63:c0:c2:5c:9e:91:38:e4:dd:e0:bf:07:
c6:e1:28:29:e7:18:a3:b4:dd:c4:d6:89:d2:de:12:
cd:46:de:7a:6d:19:79:b2:cf:92:08:96:c0:bb:97:
62:6c:a8:a8:bb:5e:1b:41:3d:74:d3:92:31:ec:72:
14:8d:8c:73:92:05:ac:5d:cb:63:97:f0:aa:bc:fa:
cb:76:42:12:2f:d5:ac:7e:1b:ce:a1:0a:da:8c:d1:
5c:35:f3:7e:a6:f6:68:91:3a:2d:fe:82:be:04:30:
fb:17:12:ea:9d:d0:f1:ee:25:aa:76:9d:d8:67:15:
c7:27:b1:e4:c2:8e:52:77:26:4b:58:06:da:fd:22:
c5:70:ee:1f:b5:cd:f6:5a:bc:90:5a:41:10:f1:57:
d4:51:3a:45:e9:16:e5:4e:dd:7d:84:7e:36:9f:d0:
44:c5:93:3b:1c:83:fd:bb:19:8a:96:f5:34:c8:0c:
3a:66:14:ab:cd:1a:f8:1c:1b:29:96:99:be:aa:a4:
c1:f4:b7:8e:08:54:86:b3:33:4f:21:a0:6e:92:6d:
fe:f7:7a:89:d7:9a:13:6e:bd:af:2f:9a:1f:0f:c6:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CF:74:CE:59:EE:CF:9B:BE:93:8D:B2:19:C6:33:11:F7:B0:C1:D6
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:36:95:1b:19:76:d2:13:96:1f:74:b6:b1:b0:fc:80:6c:c1:
f2:19:a4:34:e6:80:a8:b7:25:dd:12:bf:96:a7:cf:da:ce:5f:
3b:bf:97:6c:ea:66:06:d1:08:d9:90:00:d8:3a:14:10:f2:e0:
63:13:9a:7a:cf:57:e6:c9:0b:aa:06:00:a0:b4:08:e9:4f:dc:
45:36:cc:21:ec:dc:85:74:bd:7b:96:93:74:d4:ff:2e:25:04:
38:6c:f6:e4:5d:70:5c:44:72:67:b2:9c:27:ed:eb:e9:ad:2c:
7c:94:9b:2d:14:4a:0d:b4:e0:9c:d2:d3:7d:13:21:2c:92:ee:
b8:1b:f6:21:16:64:77:2b:1a:6d:a2:51:c5:f1:7a:04:9f:46:
03:ba:e7:2f:eb:fa:db:5e:bc:fd:57:71:d0:ea:e0:21:7c:1e:
6a:1e:6b:ef:c8:9e:6f:96:28:ac:57:af:af:7b:85:06:41:b1:
62:87:13:2b:42:a1:da:23:6e:59:02:fd:84:4d:d2:2e:7a:85:
3a:c2:9a:ed:3b:b0:57:83:1f:67:80:0c:1c:9f:9e:1d:38:9e:
fe:cf:11:9e:ce:c4:69:aa:0f:f9:67:10:3b:a5:9e:75:53:64:
ae:ff:80:29:3a:39:50:55:19:b3:21:9c:fb:5e:c2:84:d1:8b:
4d:8f:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:18 2026 by rpki-client