Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: /hPqyoMeqpGx9VgnT4Bcwu7ZL91qL5ejcO5s64n/UZc=
Subject key identifier: 7C:8C:45:1A:80:99:DD:84:96:15:8A:B3:DE:A0:F8:FE:00:06:1A:A6
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019D258456955E347476BFC9B64F450A2D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0DFB
Signing time: Wed 25 Mar 2026 15:02:02 +0000
Manifest this update: Wed 25 Mar 2026 15:02:02 +0000
Manifest next update: Thu 26 Mar 2026 15:02:02 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: WLbR1aawfN7On09ltfpYR15qIwR2uHsMe8FdZ7vLTv8=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:56:95:5e:34:74:76:bf:c9:b6:4f:45:0a:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Mar 25 15:02:02 2026 GMT
Not After : Mar 26 15:02:02 2026 GMT
Subject: CN=7c8c451a8099dd8496158ab3dea0f8fe00061aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:a6:8c:96:37:c1:0d:37:a0:cc:74:bf:d8:
87:ec:4e:b3:54:bb:1e:7e:db:63:20:e2:93:c8:b1:
6a:82:70:b4:8a:a9:df:9f:13:32:f8:3c:cc:c1:da:
8f:f1:c4:0b:75:55:9d:aa:3e:7e:da:aa:33:2c:62:
c5:eb:11:99:aa:92:22:2c:c2:06:5d:48:ff:53:32:
54:88:29:c6:6e:8c:90:2a:f3:57:cc:e3:da:58:b7:
d4:90:10:43:3d:dc:7f:79:cb:b4:33:25:55:e7:84:
65:df:6c:2e:f3:7d:02:85:69:13:78:2b:49:d0:60:
48:b7:ca:55:a2:90:ce:0f:cb:b9:ae:2e:2a:d7:9f:
7f:14:68:bd:21:41:97:dd:0d:53:3b:80:28:da:00:
45:2d:d1:b8:ef:66:1d:d4:90:5b:9e:eb:41:22:08:
9c:88:b5:c4:67:89:9f:62:be:0d:7b:83:b9:6b:4f:
c0:61:99:ed:39:a1:98:b2:dd:44:17:5a:93:b1:75:
8e:ad:83:e1:0a:12:58:23:a3:d9:b7:5a:a2:4d:04:
c5:fa:98:29:7f:9a:df:b0:09:35:43:6a:9d:c6:82:
d0:99:67:6f:4c:22:fb:c1:e2:25:82:d9:0d:67:e1:
3e:1a:89:e2:cb:af:6a:63:fe:73:8c:cc:4e:c9:9f:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:45:1A:80:99:DD:84:96:15:8A:B3:DE:A0:F8:FE:00:06:1A:A6
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:75:23:35:33:a6:00:06:8c:15:61:6a:ed:fb:22:7c:6a:b9:
42:e4:95:3e:64:7c:e3:b0:dc:30:77:98:8a:43:1c:66:1b:dd:
4e:0c:71:3e:de:ec:06:92:5a:c8:76:c8:1a:b5:5e:84:47:78:
d4:ef:65:86:7d:90:4b:90:b6:04:2a:80:bb:69:c7:29:7b:61:
f5:61:fb:f1:78:28:21:f3:1a:af:65:6c:64:4a:12:c2:02:75:
3f:78:98:a4:b7:a2:99:d8:62:04:7f:7c:64:db:e8:99:f0:6b:
b7:4d:8c:08:6e:6f:90:11:c6:f7:95:6b:28:ea:b2:5c:22:05:
99:a0:29:65:de:14:37:0e:a9:d0:3a:ba:eb:ea:61:82:c9:5a:
32:57:db:5d:a5:59:0a:6a:0a:85:cd:df:cc:27:fa:10:6a:bc:
b5:d6:68:88:fd:37:53:f3:1b:37:aa:8d:91:92:6a:69:ad:a3:
04:4c:e6:b5:8a:ca:9a:70:b3:fd:04:9d:42:08:85:b2:e0:17:
c9:49:2f:10:e3:82:25:37:22:68:e0:fb:15:f9:e9:84:13:1f:
2b:4e:62:60:9d:b0:6f:cd:f2:dd:d7:4c:2f:90:de:9a:5d:42:
83:03:df:11:5e:28:88:0e:0c:bd:23:d7:11:13:c5:b9:18:89:
8b:53:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:04 2026 by rpki-client