Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: dTP35kz37AuMD1DNgqLlf8prDVk0ycH1J7OgHL/3t80=
Subject key identifier: ED:7B:2B:3F:BC:C6:0D:54:AB:47:D3:47:5E:AD:44:4F:E0:D7:8F:52
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 01A0CCA35341570A277B6E03CA6FA2D46693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 1057
Signing time: Wed 23 Sep 2026 05:00:50 +0000
Manifest this update: Wed 23 Sep 2026 05:00:50 +0000
Manifest next update: Thu 24 Sep 2026 05:00:50 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: 11Ycq2jwIeDKrClocBQ0A51+7V4ZREAzCm54g6aCTe0=)
2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:53:41:57:0a:27:7b:6e:03:ca:6f:a2:d4:66:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Sep 23 05:00:50 2026 GMT
Not After : Sep 24 05:00:50 2026 GMT
Subject: CN=ed7b2b3fbcc60d54ab47d3475ead444fe0d78f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:7f:b1:e0:0c:ff:75:2d:b2:2c:73:40:ed:
49:51:e6:6f:73:ba:3d:cf:e6:b1:a5:1b:41:5b:70:
38:1c:90:ff:80:31:22:3d:41:ef:49:df:52:d0:81:
73:5c:24:01:b5:27:00:db:ab:d2:22:b4:a2:d3:89:
98:60:9a:e3:a1:01:0b:4a:80:85:11:c5:f8:78:0a:
c6:7c:06:bd:4c:b8:ba:91:7a:9b:09:4f:93:3f:73:
34:20:89:5b:31:49:20:b7:5d:4e:87:a5:19:60:c5:
c4:be:2c:e4:d1:5d:41:55:68:94:97:3e:69:ea:46:
cd:cb:73:0c:42:bf:25:63:b7:64:d6:b4:bf:59:03:
5e:dd:f9:bb:5c:a2:22:eb:0c:f3:0d:69:e0:21:9b:
49:cd:6f:cc:6a:31:f0:e8:fe:e9:86:0d:a9:ff:e4:
1e:55:fe:ad:26:cd:4d:b4:29:46:02:25:14:fd:61:
87:66:88:68:c3:42:b3:a7:6c:e4:22:85:d4:52:be:
5e:dc:59:9a:69:70:6b:c5:6c:ef:f3:1e:43:12:c4:
fd:34:72:13:d1:9f:22:ab:0a:3d:d4:4d:cd:a3:8b:
a8:04:1f:ca:67:0f:a8:76:97:76:35:15:d3:31:75:
78:fa:17:bc:55:72:d5:4e:d3:49:05:bc:dc:47:e4:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7B:2B:3F:BC:C6:0D:54:AB:47:D3:47:5E:AD:44:4F:E0:D7:8F:52
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bb:72:85:57:fc:49:c3:55:c1:52:79:69:fe:02:6f:ac:a5:
6b:06:47:bf:03:8e:f9:67:e3:17:e7:70:94:b8:98:ea:dd:24:
b3:12:bf:c5:20:fa:75:9f:34:11:71:7a:94:48:22:91:f2:39:
e0:9a:e1:ff:d0:52:a2:9d:b6:33:d0:16:22:24:5b:5f:90:88:
97:38:ea:96:40:a1:43:87:6e:ad:78:96:66:8c:c8:15:b1:7d:
51:06:3a:55:04:4f:64:50:91:dc:b5:c8:76:49:f6:58:8d:9b:
77:64:21:40:30:af:c0:a9:ab:55:65:50:36:86:9d:1a:5f:4f:
ee:aa:38:0d:6e:3d:de:ef:93:1d:5f:3e:79:48:ee:f4:ac:2b:
3a:35:f2:ac:a9:5f:d9:63:f9:61:f9:07:bd:f1:b5:e2:b5:62:
b8:8d:29:6b:e9:a7:61:71:10:4b:0f:c6:9e:ef:54:4a:28:3c:
43:87:a1:05:95:48:dd:91:93:f7:7a:69:a6:4b:46:2a:53:92:
01:f7:f3:ac:21:a3:de:b8:b1:00:79:5b:ee:67:85:30:a5:6c:
d5:21:67:42:bb:e0:9e:29:99:d7:90:20:9b:0f:38:36:ce:b7:
e2:29:01:cd:ec:fa:e9:0d:7f:dc:27:79:4f:b3:21:2d:56:68:
9e:6a:fc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo1NBVwone24Dym+i1GaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2E2MjBiMmFjYzhmYzMwYjhjNGQ1MThmOTI5N2UzZjdj
OWE2MGEwHhcNMjYwOTIzMDUwMDUwWhcNMjYwOTI0MDUwMDUwWjAzMTEwLwYDVQQD
EyhlZDdiMmIzZmJjYzYwZDU0YWI0N2QzNDc1ZWFkNDQ0ZmUwZDc4ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOh/seAM/3UtsixzQO1JUeZvc7o9
z+axpRtBW3A4HJD/gDEiPUHvSd9S0IFzXCQBtScA26vSIrSi04mYYJrjoQELSoCF
EcX4eArGfAa9TLi6kXqbCU+TP3M0IIlbMUkgt11Oh6UZYMXEvizk0V1BVWiUlz5p
6kbNy3MMQr8lY7dk1rS/WQNe3fm7XKIi6wzzDWngIZtJzW/MajHw6P7phg2p/+Qe
Vf6tJs1NtClGAiUU/WGHZohow0Kzp2zkIoXUUr5e3FmaaXBrxWzv8x5DEsT9NHIT
0Z8iqwo91E3No4uoBB/KZw+odpd2NRXTMXV4+he8VXLVTtNJBbzcR+QSWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO17Kz+8xg1Uq0fTR16tRE/g149SMB8GA1UdIwQY
MBaAFNM6YgsqzI/DC4xNUY+Sl+P3yaYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpwaUN5ck1qOE1MakUxUmo1S1g0X2ZKcGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yYTRlZTMtZDc2ZC00OGJlLWFkZDYt
NzhmOTkyNDc1ZTFmLzEvMHpwaUN5ck1qOE1MakUxUmo1S1g0X2ZKcGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yYTRlZTMtZDc2ZC00OGJlLWFkZDYtNzhmOTkyNDc1ZTFm
LzEvMHpwaUN5ck1qOE1MakUxUmo1S1g0X2ZKcGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbtyhVf8
ScNVwVJ5af4Cb6ylawZHvwOO+WfjF+dwlLiY6t0ksxK/xSD6dZ80EXF6lEgikfI5
4Jrh/9BSop22M9AWIiRbX5CIlzjqlkChQ4durXiWZozIFbF9UQY6VQRPZFCR3LXI
dkn2WI2bd2QhQDCvwKmrVWVQNoadGl9P7qo4DW493u+THV8+eUju9KwrOjXyrKlf
2WP5YfkHvfG14rViuI0pa+mnYXEQSw/Gnu9USig8Q4ehBZVI3ZGT93pppktGKlOS
AffzrCGj3rixAHlb7meFMKVs1SFnQrvgnimZ15Agmw84Ns634ikBzez66Q1/3Cd5
T7MhLVZonmr8wA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:09 2026 by rpki-client