Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: b38Uw7gph0xeYLachOcPwK100ypcbHYzhkiaeDNtcrk=
Subject key identifier: D7:6B:D5:8B:5A:F1:CB:BE:FF:39:9D:39:83:4E:75:BD:0F:AA:C1:C0
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019F8F7E41E857E8FF88905FB5C19CF3DEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 12AD
Signing time: Thu 23 Jul 2026 15:00:43 +0000
Manifest this update: Thu 23 Jul 2026 15:00:43 +0000
Manifest next update: Fri 24 Jul 2026 15:00:43 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: 7wX/khfqOvydfZr+hldTkz3QbUwFQu8JZgEx/17mMAM=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:41:e8:57:e8:ff:88:90:5f:b5:c1:9c:f3:de:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jul 23 15:00:43 2026 GMT
Not After : Jul 24 15:00:43 2026 GMT
Subject: CN=d76bd58b5af1cbbeff399d39834e75bd0faac1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:f5:d8:fa:94:6b:ce:cd:2a:6e:ad:41:19:
b7:8f:a9:99:f5:8f:2a:6f:0f:35:34:8b:ae:1f:ec:
bc:3d:b5:fa:39:f8:b1:f5:31:a1:25:b2:b7:87:05:
4f:f6:56:e0:3e:f4:8e:5d:5c:73:93:06:ce:da:6e:
2e:46:d3:73:c2:a0:b5:d8:d9:6a:72:cf:77:7e:4b:
db:6c:b8:cb:86:ba:04:ed:81:0f:24:3d:7a:95:a6:
f0:56:1f:8f:ae:b3:d6:67:b1:2d:59:3c:ad:18:cc:
26:6f:c7:c0:f7:98:f7:eb:d6:ab:36:f4:45:9a:5a:
4e:f0:88:ae:f4:af:05:2f:26:b7:03:0f:f5:5e:aa:
1e:51:8a:b5:03:2c:0c:4e:9a:5a:04:51:66:da:d4:
d8:93:62:1e:81:18:71:ff:5b:47:98:4e:51:3e:f8:
42:3c:4f:49:1c:53:e7:52:fe:b2:ed:e0:44:2e:3e:
63:6a:f1:b2:6f:23:e7:63:e8:60:06:98:e0:31:87:
48:e3:f2:35:33:dd:49:ea:3d:ac:f0:fa:6c:2b:5c:
70:23:c1:c2:54:27:af:03:2c:1f:8a:66:2b:25:92:
c0:40:00:f0:7c:b9:91:f7:df:c9:6a:c9:c3:bf:c2:
54:02:67:64:bd:14:9e:10:81:4a:65:45:91:54:5a:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:D5:8B:5A:F1:CB:BE:FF:39:9D:39:83:4E:75:BD:0F:AA:C1:C0
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:70:03:bc:e4:6c:6a:8f:db:bd:95:be:54:e1:c9:44:45:f3:
a3:43:96:b0:73:d4:da:4d:b4:63:3b:e3:62:18:04:cb:b1:ce:
e1:ac:75:70:9c:b8:cf:41:08:17:d1:22:20:35:64:71:a7:80:
19:8a:c2:5e:bc:2d:ac:f4:90:04:d9:22:a0:33:80:4a:8b:e0:
bc:2c:2b:a7:d3:7c:14:bc:fa:da:f5:22:c1:c5:ad:3a:3d:b8:
97:8d:5a:c1:b5:94:f1:50:03:b0:46:9a:db:d1:5c:10:40:61:
7a:87:6b:b3:6a:1a:59:76:92:c6:a8:a3:91:b7:1b:c2:48:95:
40:25:a0:20:73:21:51:30:f2:d5:0b:0d:35:1e:5c:07:ed:13:
ad:f3:31:82:be:77:6f:9c:f2:34:ea:37:29:75:e6:fc:46:6b:
02:f6:66:b7:ad:a3:9b:f3:2f:cd:73:86:da:14:46:e6:f0:df:
c9:83:dc:56:c2:78:a8:48:7b:63:f9:57:1d:dc:a3:cc:04:08:
4d:29:27:1b:55:55:64:f8:42:f3:5b:f7:bf:38:72:72:83:f0:
f6:df:ea:f3:7e:01:cd:97:9c:0f:87:11:28:82:4e:17:b1:27:
9a:e5:64:71:34:83:39:33:26:7d:88:38:b4:e0:9e:10:84:42:
28:56:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:44 2026 by rpki-client