Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: g7r+j7b7ZGTAvxKYnba7jYkEhpayxlipwjXZSi2S7wU=
Subject key identifier: 7A:D0:3C:7A:16:01:5E:23:91:9E:AD:72:38:C4:C1:C0:99:1D:8D:86
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019D25F12BAFA2A64DBC54E5D0E804007063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 090D
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: rgy/O4uDmaWjaIBjKwDpzLr/lN1UHSJtF22T9mqqhnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2b:af:a2:a6:4d:bc:54:e5:d0:e8:04:00:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=7ad03c7a16015e23919ead7238c4c1c0991d8d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:b1:2f:d8:1b:69:16:ba:42:4d:11:83:fc:
33:fd:84:87:97:33:9f:77:e8:06:2b:e5:8d:94:b6:
e4:a1:39:a6:d5:db:00:c1:23:b1:c0:58:da:7b:26:
d0:d1:42:aa:74:a3:f0:19:95:b5:5f:c4:4f:c6:67:
80:02:b0:af:c1:d9:12:ff:81:0b:bf:95:b4:b8:cb:
93:8b:83:35:86:25:3f:4c:f5:19:98:8f:02:34:e1:
8f:ab:a3:c5:f3:ef:ea:9f:91:15:3e:a7:5f:00:95:
b3:6d:46:ed:99:6c:ae:31:92:01:77:2b:f2:1e:14:
0b:7b:da:4b:f1:8a:9c:44:4f:2a:e7:c5:de:5f:73:
46:46:b2:cb:ac:86:02:af:81:41:37:2a:d7:5e:bc:
8d:80:6d:5d:68:71:cb:12:dc:01:eb:34:0b:47:39:
3b:78:07:f1:f1:48:fd:57:e4:ee:5f:5d:f3:e9:5e:
45:df:6f:c6:14:45:a3:0b:08:8e:5b:c5:9d:f9:e3:
fd:12:d2:89:7c:4e:96:2e:b2:8c:2c:ae:a6:be:96:
71:e3:96:4e:3a:85:41:50:25:4d:9d:24:b9:98:47:
f9:d0:d7:53:4b:2c:2e:d6:be:49:c4:78:ca:fc:c1:
21:c3:01:9c:2a:b0:e1:71:45:b4:49:99:59:cd:2f:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:3C:7A:16:01:5E:23:91:9E:AD:72:38:C4:C1:C0:99:1D:8D:86
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:6f:33:dc:6f:48:00:e1:d1:c3:c1:33:d6:e8:90:ab:b5:
1c:55:d2:30:25:de:de:9b:bb:38:c4:cf:f7:c0:f1:2a:c3:e7:
15:31:e8:ee:ab:e5:fb:33:99:cd:a0:fc:71:00:ce:d7:ae:cf:
b8:80:9e:c9:33:4d:5c:45:44:58:e6:73:f3:6f:9c:ab:80:50:
fd:b0:3a:5f:7d:29:a0:29:17:ae:f2:00:6b:2e:35:1e:d9:0c:
4d:ea:61:46:79:d7:14:13:77:3f:71:e5:fe:8b:8a:a8:1c:67:
dc:a2:ce:4a:9a:d4:29:dc:9f:df:8d:6f:c9:85:62:d4:52:03:
e7:fd:15:db:83:a4:56:61:ac:6b:bd:0c:e9:bb:09:fa:ce:51:
29:ea:66:35:c9:c8:3c:57:e2:1b:6f:10:40:70:bc:c6:7a:c4:
5c:70:03:f2:8f:c5:be:df:b0:ed:94:e1:55:d3:69:93:88:29:
b9:e1:fe:da:87:30:1f:25:a0:05:0b:f8:97:1d:b3:61:98:fc:
9b:15:96:d0:40:a1:a9:03:95:b4:1e:93:10:96:6b:55:d9:ca:
d4:04:18:2c:94:17:55:ef:5a:7e:14:3b:0f:ce:08:5a:fc:30:
38:58:50:d0:6e:14:1b:e3:b4:29:02:e2:03:56:57:3b:9a:af:
fa:15:f6:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8SuvoqZNvFTl0OgEAHBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw
NTMyYjAwHhcNMjYwMzI1MTcwMDU1WhcNMjYwMzI2MTcwMDU1WjAzMTEwLwYDVQQD
Eyg3YWQwM2M3YTE2MDE1ZTIzOTE5ZWFkNzIzOGM0YzFjMDk5MWQ4ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4axL9gbaRa6Qk0Rg/wz/YSHlzOf
d+gGK+WNlLbkoTmm1dsAwSOxwFjaeybQ0UKqdKPwGZW1X8RPxmeAArCvwdkS/4EL
v5W0uMuTi4M1hiU/TPUZmI8CNOGPq6PF8+/qn5EVPqdfAJWzbUbtmWyuMZIBdyvy
HhQLe9pL8YqcRE8q58XeX3NGRrLLrIYCr4FBNyrXXryNgG1daHHLEtwB6zQLRzk7
eAfx8Uj9V+TuX13z6V5F32/GFEWjCwiOW8Wd+eP9EtKJfE6WLrKMLK6mvpZx45ZO
OoVBUCVNnSS5mEf50NdTSywu1r5JxHjK/MEhwwGcKrDhcUW0SZlZzS8E1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrQPHoWAV4jkZ6tcjjEwcCZHY2GMB8GA1UdIwQY
MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt
ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy
LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIlvM9xv
SADh0cPBM9bokKu1HFXSMCXe3pu7OMTP98DxKsPnFTHo7qvl+zOZzaD8cQDO167P
uICeyTNNXEVEWOZz82+cq4BQ/bA6X30poCkXrvIAay41HtkMTephRnnXFBN3P3Hl
/ouKqBxn3KLOSprUKdyf341vyYVi1FID5/0V24OkVmGsa70M6bsJ+s5RKepmNcnI
PFfiG28QQHC8xnrEXHAD8o/Fvt+w7ZThVdNpk4gpueH+2ocwHyWgBQv4lx2zYZj8
mxWW0EChqQOVtB6TEJZrVdnK1AQYLJQXVe9afhQ7D84IWvwwOFhQ0G4UG+O0KQLi
A1ZXO5qv+hX2aA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:07 2026 by rpki-client