Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: K8cEowcVfi9IujGup79PEpbjtI+kmNF0xG3Upiaqtc4=
Subject key identifier: 89:63:E1:BD:1F:96:08:66:AE:0F:09:25:B3:C6:BB:7F:DD:8C:C2:1A
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 019D265FBE88839424BC100F3F50A617F0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 0BA8
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: d2WeIH/ZeSPt1rEe41sXhNWeKWawC8HrWxJCGNf713E=)
2: bxRzuQ7bASGe-s-sdD1--Cz8P4M.roa (hash: +XM1cLvQITLL+hcYwm0/qg57RFddihfSN5qfe1ousHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:be:88:83:94:24:bc:10:0f:3f:50:a6:17:f0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=8963e1bd1f960866ae0f0925b3c6bb7fdd8cc21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:80:52:b8:35:7b:bd:41:7d:d3:db:a4:e1:
06:c6:bc:cb:3a:a8:0d:3d:31:0e:8f:c9:e2:a4:28:
db:3e:8a:ae:cd:2d:ae:1c:31:90:78:4c:c4:76:74:
dd:d9:e7:52:cc:b5:82:c0:4b:34:0b:24:2d:fa:46:
33:d7:58:bd:1b:00:b5:be:44:03:03:6e:1c:24:5c:
99:a9:6d:d9:bc:5b:6e:af:df:da:b7:6e:a6:66:a7:
37:8a:17:c3:48:86:77:ee:c9:71:b3:c6:b0:de:16:
48:8a:94:9c:d7:82:2d:9a:16:20:41:c1:1b:30:7b:
16:75:fb:38:40:63:6f:aa:22:ba:68:f9:8d:92:1b:
d6:92:f1:8f:67:9d:34:5e:19:c6:23:58:03:bb:bd:
0c:34:43:bf:8e:5e:4e:03:0e:c1:3a:48:df:16:37:
45:74:ee:92:ea:a9:91:1b:a7:58:b7:c0:d9:b0:ca:
8a:58:d8:af:87:84:1c:69:70:a9:fb:25:17:97:08:
f4:87:4e:0e:48:e8:89:a2:15:2f:43:de:33:36:53:
08:33:11:14:36:50:8e:b0:16:f6:31:a9:36:99:38:
da:57:8f:eb:b2:57:ba:6b:f5:9f:9f:b9:3c:4d:7e:
d9:af:f5:a7:f2:ee:98:c3:57:c1:e6:da:20:13:7c:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:E1:BD:1F:96:08:66:AE:0F:09:25:B3:C6:BB:7F:DD:8C:C2:1A
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d4:e1:26:e8:76:59:a1:e7:34:0f:34:0d:04:8b:00:94:3f:
84:da:ec:dd:49:c2:bc:b4:81:bd:41:80:f2:94:ed:d5:16:8b:
82:76:e9:fe:37:96:8c:3d:14:57:f9:90:f2:41:e8:93:ac:b1:
1c:88:55:31:11:ff:f5:2a:45:38:84:df:f5:83:9d:52:98:5e:
35:a2:e0:aa:c6:70:1c:54:ee:39:d3:40:e3:2b:71:b1:fa:8f:
19:28:8f:b8:b6:f2:e2:a5:33:89:81:f1:77:e3:75:c4:27:99:
de:2e:e4:ad:f9:1c:9a:ab:35:a4:26:2b:c6:f1:1a:f2:0b:08:
28:29:a9:dd:50:e5:6d:b2:ad:f3:28:5b:46:fa:49:9e:a1:4c:
e5:6c:43:40:b1:2b:85:c3:4f:c5:86:4a:1d:26:68:bc:3b:62:
52:b2:e6:47:f2:c2:0a:ec:72:2d:e3:0d:86:29:c5:54:78:1e:
ba:b3:04:23:32:3e:db:9d:41:45:4d:82:5e:34:92:59:09:85:
50:f0:22:46:7e:33:c9:6a:b9:73:55:ec:c2:29:9e:38:d2:6f:
e3:47:a8:58:03:86:53:dc:1a:63:3a:b3:bb:88:ba:02:f9:fa:
f6:0e:58:24:9e:9b:4e:27:74:a2:a4:33:00:77:d9:0c:a4:19:
1d:de:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:25 2026 by rpki-client