Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: IpGH+0dLWVQAW/iOysxjJltXhQ8kFxvMCoPHjUYjGSc=
Subject key identifier: AE:AA:D7:03:5E:B5:39:BC:99:46:D8:BA:D7:FE:20:46:21:46:92:C8
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019E1CB4E86D4E7A15659517B8A3F0BFA1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 11ED
Signing time: Tue 12 May 2026 15:01:18 +0000
Manifest this update: Tue 12 May 2026 15:01:18 +0000
Manifest next update: Wed 13 May 2026 15:01:18 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: +zB7j70QOSNHGkR3wcamZ96Nbe6ll8LTGganOKwnHlo=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:e8:6d:4e:7a:15:65:95:17:b8:a3:f0:bf:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: May 12 15:01:18 2026 GMT
Not After : May 13 15:01:18 2026 GMT
Subject: CN=aeaad7035eb539bc9946d8bad7fe2046214692c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:ed:9a:df:62:71:65:5d:c8:f7:22:f6:1b:
df:15:90:2a:fc:0c:07:76:eb:94:58:f5:68:b0:80:
74:ea:73:cf:d6:11:7a:3f:39:ae:6d:6e:8f:64:77:
f4:27:6a:10:4c:3a:36:3a:4c:0d:b5:b8:fa:09:86:
52:de:31:91:62:f2:93:55:cd:c5:d4:49:98:24:e6:
13:bc:69:88:b7:63:81:de:32:fa:4e:3e:cc:35:d6:
82:81:e0:08:62:86:6a:68:3b:cb:aa:2c:2e:db:4e:
5c:ae:cb:07:5b:19:0c:d1:89:0e:5c:bc:f3:7d:31:
b4:85:4a:9e:5f:ea:8c:91:8a:b0:1b:8c:ab:73:b3:
ca:bc:2d:e7:49:f0:2c:a1:f8:0d:4e:a4:65:f5:87:
3d:3d:b9:b5:87:97:af:b8:aa:99:5c:00:00:86:42:
46:5a:5f:4a:de:05:84:7b:19:d3:ef:b6:a6:83:2f:
66:09:82:93:1d:71:81:da:6d:7c:e6:4d:4e:bd:f7:
9f:07:29:24:75:99:c4:57:a4:b2:7c:7a:00:f2:ef:
a9:37:97:a5:a7:fc:d0:e4:56:23:05:de:33:8a:99:
5c:be:63:e2:13:25:2f:70:63:ae:1e:b8:09:88:d4:
13:07:14:79:f3:bf:da:ae:fa:2e:44:85:fa:b2:1a:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:D7:03:5E:B5:39:BC:99:46:D8:BA:D7:FE:20:46:21:46:92:C8
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:ef:66:54:a4:60:ac:6e:6d:3c:36:ef:b8:fd:a1:c6:fd:
d0:bb:73:4f:f8:a5:0c:86:13:36:5c:bc:a2:39:b4:22:b0:4f:
fd:d4:9a:73:d6:78:ee:6a:6d:22:93:4b:28:4b:82:fc:4f:74:
ff:f8:a9:af:76:d9:04:3c:fd:e9:6b:c1:c6:2c:5a:5d:01:f3:
c2:a4:48:52:f0:e1:4b:36:c1:8a:5b:7a:b0:f1:9e:2b:9f:97:
a7:5d:a2:20:63:09:35:85:5c:3e:bd:6e:51:52:b2:22:18:c5:
1a:49:3d:86:e9:98:d7:16:38:57:b9:8c:58:6e:d1:e6:c0:11:
78:ed:08:49:9a:64:e4:3d:7a:6c:3e:2e:58:22:26:8c:1f:3c:
da:aa:69:69:d0:18:55:20:f5:d0:7a:40:40:b5:53:a6:2f:f2:
6f:a7:c0:5f:a8:b3:6f:b4:e0:af:ce:38:1b:8d:0e:4e:25:bc:
dc:be:f1:22:45:3c:f1:e1:14:8b:d5:38:8b:c0:90:d8:44:2e:
0a:f7:6c:1b:e8:14:26:5a:7d:89:c5:7c:e7:5a:5e:2b:8f:25:
97:78:2c:8b:a4:e6:8e:5a:01:85:ef:fd:cc:f5:34:1b:52:50:
a8:b5:22:6b:ac:40:32:15:70:48:2d:ec:83:e3:84:62:fe:8b:
40:b6:af:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctOhtTnoVZZUXuKPwv6GkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3
YTg3MmMwHhcNMjYwNTEyMTUwMTE4WhcNMjYwNTEzMTUwMTE4WjAzMTEwLwYDVQQD
EyhhZWFhZDcwMzVlYjUzOWJjOTk0NmQ4YmFkN2ZlMjA0NjIxNDY5MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sPtmt9icWVdyPci9hvfFZAq/AwH
duuUWPVosIB06nPP1hF6PzmubW6PZHf0J2oQTDo2OkwNtbj6CYZS3jGRYvKTVc3F
1EmYJOYTvGmIt2OB3jL6Tj7MNdaCgeAIYoZqaDvLqiwu205crssHWxkM0YkOXLzz
fTG0hUqeX+qMkYqwG4yrc7PKvC3nSfAsofgNTqRl9Yc9Pbm1h5evuKqZXAAAhkJG
Wl9K3gWEexnT77amgy9mCYKTHXGB2m185k1OvfefBykkdZnEV6SyfHoA8u+pN5el
p/zQ5FYjBd4ziplcvmPiEyUvcGOuHrgJiNQTBxR587/arvouRIX6shrFiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6q1wNetTm8mUbYutf+IEYhRpLIMB8GA1UdIwQY
MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It
NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk
LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRvvZlSk
YKxubTw277j9ocb90LtzT/ilDIYTNly8ojm0IrBP/dSac9Z47mptIpNLKEuC/E90
//ipr3bZBDz96WvBxixaXQHzwqRIUvDhSzbBilt6sPGeK5+Xp12iIGMJNYVcPr1u
UVKyIhjFGkk9humY1xY4V7mMWG7R5sAReO0ISZpk5D16bD4uWCImjB882qppadAY
VSD10HpAQLVTpi/yb6fAX6izb7Tgr844G40OTiW83L7xIkU88eEUi9U4i8CQ2EQu
CvdsG+gUJlp9icV851peK48ll3gsi6TmjloBhe/9zPU0G1JQqLUia6xAMhVwSC3s
g+OEYv6LQLav0w==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:11 2026 by rpki-client