Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: XFLk7HnaQYKqzJppETYPL+AOIQ6ugMIlodJwo/KgCAo=
Subject key identifier: 49:CA:05:02:98:A1:B9:7C:F6:6A:48:51:D7:BF:9D:6F:34:72:24:B2
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019D2772B2A621DC1BB42773135DA37A4F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 116E
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: TSFJuxMz+2NPZKFfILcdgcUt5YdN+wSjd+sNvcr5Oz8=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b2:a6:21:dc:1b:b4:27:73:13:5d:a3:7a:4f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=49ca050298a1b97cf66a4851d7bf9d6f347224b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:8f:08:f6:9b:2a:e6:07:a4:3c:52:7d:83:
36:35:ae:32:f9:96:0c:0a:99:60:d2:46:b7:c1:c2:
92:d8:0a:fb:46:33:ed:a6:4a:62:b5:38:7b:7f:ec:
db:8c:5f:2c:4c:af:2c:2e:a5:9c:e9:af:a7:d8:c8:
06:3e:15:f8:3b:5f:f9:23:6b:18:af:98:90:01:68:
14:3b:4b:a9:d4:14:48:e0:30:e3:cd:7b:a2:e1:e3:
b8:2d:76:35:f2:44:79:8a:9c:94:3b:a2:72:7d:22:
ac:83:07:2e:35:3c:02:2c:fc:4a:06:1b:de:ff:a2:
cb:c5:f5:16:7e:27:e9:37:ba:72:bf:c0:b7:82:44:
ef:4e:42:42:af:d0:25:a7:1a:9a:69:06:c3:52:10:
85:45:7d:3e:a5:7c:5d:f3:f7:43:3f:b7:fd:37:9f:
97:e2:3d:12:29:7c:3b:8d:be:b3:b4:5c:3a:92:9b:
2f:61:c0:85:00:43:05:16:bf:34:85:07:e4:d4:9e:
8d:8d:cc:6d:4a:2b:6e:db:89:94:98:5c:22:20:32:
93:0a:e2:f1:65:22:9c:60:87:dd:a6:87:18:68:1d:
c4:af:8a:c2:06:24:c1:a3:59:a3:da:19:a0:18:9b:
d4:3d:4c:c8:0d:cd:96:2c:f0:ac:ed:dd:9f:12:62:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:05:02:98:A1:B9:7C:F6:6A:48:51:D7:BF:9D:6F:34:72:24:B2
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:55:7b:a0:3e:09:3b:05:ee:da:a9:f0:7b:48:ae:de:85:30:
d0:61:36:d7:d0:ae:67:31:93:e3:17:f1:d9:ce:02:08:5c:10:
9e:34:31:62:2d:7e:65:95:58:02:91:5c:9d:34:ca:e1:b0:e5:
17:1f:29:4a:b1:31:87:c2:3e:f8:ae:a7:c7:68:86:8e:d2:2a:
3a:f1:bc:74:22:69:bf:e8:8d:a3:90:09:3a:5a:0a:44:e3:3f:
8c:ce:5e:4f:6b:28:86:6d:ee:e7:57:c5:70:94:2f:9e:55:91:
11:27:d7:cc:e0:37:6d:81:97:78:ce:e6:98:29:2a:b9:5a:9a:
c7:46:7e:22:36:c3:f4:91:70:09:60:58:05:93:67:f7:99:82:
5e:f5:fd:eb:dc:5c:a9:76:bf:62:65:86:e6:47:60:a1:12:09:
95:e8:77:0c:2c:bf:bd:3b:85:0c:7a:5b:24:17:2e:a0:5c:8a:
8b:8a:82:79:ec:98:84:bf:ab:e9:24:0d:20:fe:22:ac:24:ea:
6e:ba:22:1e:91:a0:a5:7e:ff:f3:b0:44:bb:3f:db:bf:bb:a3:
8d:19:cc:82:17:84:dc:ef:67:b4:36:d5:9b:ae:87:3f:f9:96:
fe:40:1a:72:18:ee:72:1e:8c:79:29:7d:75:5e:fa:b4:a1:d0:
c1:1b:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:44 2026 by rpki-client