
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: pdTs6kQc50l8kUFLWnRrdGp6Hm40Nk5wJldVKwPZ+BQ=
Subject key identifier: 2B:C8:72:A9:11:F5:A9:09:E4:5C:5C:BD:71:07:AF:4E:3C:E9:17:E6
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 01A0D7CCE008497C6726146E9BBB224292EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0FE5
Signing time: Fri 25 Sep 2026 09:02:03 +0000
Manifest this update: Fri 25 Sep 2026 09:02:03 +0000
Manifest next update: Sat 26 Sep 2026 09:02:03 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: 2EbhjxcPhZbbQrcmzFMZGfb1etK2+Ks0iWkYKadBotM=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:e0:08:49:7c:67:26:14:6e:9b:bb:22:42:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Sep 25 09:02:03 2026 GMT
Not After : Sep 26 09:02:03 2026 GMT
Subject: CN=2bc872a911f5a909e45c5cbd7107af4e3ce917e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:78:dc:9d:4a:f9:1c:94:f6:ed:14:c6:51:
04:aa:98:28:10:b4:9f:ca:b4:27:3c:50:a7:41:a9:
95:42:0a:2c:55:c7:b4:bd:2c:4c:86:99:73:f8:d4:
ee:9d:bb:18:2c:c2:77:40:ed:15:b3:e1:dc:0e:78:
ed:47:b5:74:5d:8d:33:67:9c:a1:bc:a6:56:b2:ff:
3c:87:cb:fb:c4:7e:4e:13:b3:36:0d:24:15:09:0a:
ba:a4:81:5e:fe:ee:d3:7d:64:5c:8d:03:2b:74:3d:
3c:12:cb:f8:47:b8:b6:6c:3e:a7:c0:01:f5:12:d3:
4e:73:fe:82:36:46:9d:5a:11:dd:0c:d3:1c:de:f2:
2a:ee:1b:04:d4:86:96:a4:c8:fe:55:0e:72:c7:c0:
73:15:15:18:35:41:4c:81:09:05:80:d0:97:af:15:
84:bf:c0:04:f7:da:a7:aa:75:0c:02:0f:88:2a:84:
bc:4e:03:19:33:23:dd:82:af:e0:f5:4c:bd:e5:91:
3c:4c:10:b9:1a:f9:41:9f:09:1f:0f:f9:86:ad:b3:
0c:db:65:28:28:73:01:5d:66:e5:64:fb:72:37:5c:
73:91:5c:4d:20:fb:48:b7:c2:d9:ab:f0:5f:6a:38:
37:4c:30:73:be:ec:7a:0e:9b:19:3d:7a:ae:22:f7:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:72:A9:11:F5:A9:09:E4:5C:5C:BD:71:07:AF:4E:3C:E9:17:E6
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2c:67:74:fa:b0:a9:19:6d:26:e5:b7:24:7b:4d:f2:b2:22:
84:15:c2:b2:81:f7:f1:aa:0b:fe:4b:e6:ad:81:bf:f8:50:1f:
46:7d:fc:92:bd:1e:69:96:9e:75:7b:52:30:89:4f:da:29:3f:
79:c1:28:5d:84:ab:df:1d:34:d5:a3:ae:6e:92:ec:63:40:e6:
c4:01:6e:aa:a1:75:e1:f0:ce:65:6b:53:15:36:a8:22:17:40:
58:11:2c:42:96:c3:9f:c4:20:e5:a8:96:4d:69:76:91:eb:d4:
2f:69:54:8c:2c:41:51:74:7f:25:6b:fa:1a:32:75:c4:59:de:
a8:a6:7b:4e:d9:64:1e:d3:2f:13:b6:df:0e:98:37:71:73:74:
c2:2d:ab:6f:7d:bb:25:28:95:5b:80:93:66:c1:c0:bd:4e:0d:
e5:6b:c5:7c:eb:cc:ba:b3:17:83:2a:aa:86:b6:b9:c2:af:1b:
4b:72:4e:3e:72:83:84:82:c6:00:6b:ab:a0:fc:cf:be:32:81:
c9:ef:72:d1:56:42:c9:59:db:15:67:80:50:97:59:db:2d:a5:
5b:a7:45:87:fe:bd:4a:bf:fc:79:60:38:a8:4d:e8:28:18:f6:
f1:ae:7a:85:cb:2a:b8:bf:42:88:8a:34:86:1b:97:33:f8:17:
d0:1e:55:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzOAISXxnJhRum7siQpLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2
MDE3Y2UwHhcNMjYwOTI1MDkwMjAzWhcNMjYwOTI2MDkwMjAzWjAzMTEwLwYDVQQD
EygyYmM4NzJhOTExZjVhOTA5ZTQ1YzVjYmQ3MTA3YWY0ZTNjZTkxN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS943J1K+RyU9u0UxlEEqpgoELSf
yrQnPFCnQamVQgosVce0vSxMhplz+NTunbsYLMJ3QO0Vs+HcDnjtR7V0XY0zZ5yh
vKZWsv88h8v7xH5OE7M2DSQVCQq6pIFe/u7TfWRcjQMrdD08Esv4R7i2bD6nwAH1
EtNOc/6CNkadWhHdDNMc3vIq7hsE1IaWpMj+VQ5yx8BzFRUYNUFMgQkFgNCXrxWE
v8AE99qnqnUMAg+IKoS8TgMZMyPdgq/g9Uy95ZE8TBC5GvlBnwkfD/mGrbMM22Uo
KHMBXWblZPtyN1xzkVxNIPtIt8LZq/Bfajg3TDBzvux6DpsZPXquIvciAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvIcqkR9akJ5FxcvXEHr0486RfmMB8GA1UdIwQY
MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt
NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl
LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVixndPqw
qRltJuW3JHtN8rIihBXCsoH38aoL/kvmrYG/+FAfRn38kr0eaZaedXtSMIlP2ik/
ecEoXYSr3x001aOubpLsY0DmxAFuqqF14fDOZWtTFTaoIhdAWBEsQpbDn8Qg5aiW
TWl2kevUL2lUjCxBUXR/JWv6GjJ1xFneqKZ7TtlkHtMvE7bfDpg3cXN0wi2rb327
JSiVW4CTZsHAvU4N5WvFfOvMurMXgyqqhra5wq8bS3JOPnKDhILGAGuroPzPvjKB
ye9y0VZCyVnbFWeAUJdZ2y2lW6dFh/69Sr/8eWA4qE3oKBj28a56hcsquL9CiIo0
hhuXM/gX0B5VDg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:46:19 2026 by rpki-client