Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: o+QE85T67jGaRMb3TKnY1oEs7iGEtgxChVz+qvBd/uY=
Subject key identifier: A1:DE:32:52:C2:5D:63:24:DD:58:B1:FA:CA:46:DF:A7:73:A5:30:43
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019E1D222DB42A6493E20BEBCDE5A3507952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 098D
Signing time: Tue 12 May 2026 17:00:39 +0000
Manifest this update: Tue 12 May 2026 17:00:39 +0000
Manifest next update: Wed 13 May 2026 17:00:39 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: fhrk+C5IGGLdZHWRQenWFsiqrxShXxSLIZV8+xVwK7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:2d:b4:2a:64:93:e2:0b:eb:cd:e5:a3:50:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: May 12 17:00:39 2026 GMT
Not After : May 13 17:00:39 2026 GMT
Subject: CN=a1de3252c25d6324dd58b1faca46dfa773a53043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:a3:c4:e9:ea:3a:a2:42:73:4f:99:a9:5c:
96:12:a9:bd:68:c1:f9:42:a0:6a:1b:ec:7e:d2:0a:
da:ee:e0:28:c8:69:3c:86:4d:48:8d:0e:f8:5f:d3:
8a:e2:d7:af:b4:66:d1:ed:21:9f:25:d1:9f:fe:0f:
cb:1d:79:a7:86:c1:ff:21:6a:6a:3b:e7:4e:16:41:
a2:22:08:10:67:ff:3d:ef:c7:33:10:6a:d7:49:41:
fa:40:da:2e:ef:9e:66:08:ac:f2:5c:fe:a7:b5:16:
a9:af:e3:ba:c3:56:ae:55:bd:94:ba:f5:8b:18:cd:
f1:82:1e:e0:5d:71:9f:35:5d:01:d0:5f:31:79:d2:
c1:4a:2c:b5:55:0e:23:58:2a:cd:08:cb:0d:71:2b:
61:1c:5a:f4:8a:1c:05:f6:12:5f:d1:67:67:fa:db:
f9:cc:8a:b0:a5:98:13:ae:d7:95:fe:8d:d0:c2:c3:
5e:e4:14:42:dd:da:b0:15:47:a5:f1:6a:dc:43:1c:
fa:31:b8:d3:1c:72:af:27:7a:c5:07:bb:2e:82:93:
36:fb:61:d7:11:be:ce:db:32:21:17:ce:f9:ec:e0:
3c:28:a4:86:71:24:34:20:81:73:a9:4b:1a:6c:db:
99:4e:6b:bf:05:b3:58:6a:60:8d:10:a0:80:d0:a5:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:32:52:C2:5D:63:24:DD:58:B1:FA:CA:46:DF:A7:73:A5:30:43
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c2:03:70:a8:2b:d5:7c:af:42:86:50:21:ee:ea:f0:6c:2c:
e2:56:5c:cf:52:23:7f:0f:7f:c8:b7:28:b9:b5:93:c3:b2:17:
6d:14:da:a2:d4:12:ab:53:40:9f:12:b3:ea:93:6d:b5:31:8e:
d4:2c:4e:b7:d3:8a:0e:9d:f3:8d:26:ba:7a:d9:9a:32:f9:9c:
d3:fc:f8:e3:e6:60:4c:bd:18:f1:d1:01:cd:8b:13:c3:f7:89:
d2:ca:50:6d:55:6b:4f:7b:3d:5d:c3:f5:0d:aa:9e:57:22:09:
07:50:27:f0:59:4a:12:e7:97:f7:3e:0f:0d:49:56:50:ed:fb:
f0:97:df:55:16:e5:27:fd:53:14:ce:5c:da:d9:83:8e:03:e9:
17:38:d8:bb:e1:ad:62:e2:ce:16:d5:92:2c:14:f2:84:19:0e:
22:3b:8e:44:aa:7d:0c:e7:4b:56:a6:58:ed:f9:27:b7:8f:ef:
36:43:a3:05:15:72:7e:08:63:ae:a5:77:3e:42:1d:0b:8b:8f:
d9:69:43:1c:21:32:d0:c0:20:4b:2c:6d:a8:c5:a0:39:ba:7f:
ab:99:e4:56:1e:db:e3:ec:cd:7a:64:74:7e:c6:4d:bc:88:7c:
0c:4c:3d:1e:42:60:9e:f5:7f:cd:17:bb:ee:cd:e7:01:ae:d2:
33:eb:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:06 2026 by rpki-client