Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: Zu3yEIy+pHNRz5sX47ghR3o9ECKaOdmvMbdwKLbwT2A=
Subject key identifier: 2B:F9:72:2E:4B:07:1B:A0:C7:CE:69:8E:AA:20:7B:C7:E8:21:BB:95
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019F94A50F6A230F2293C46354555399BD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 109D
Signing time: Fri 24 Jul 2026 15:01:12 +0000
Manifest this update: Fri 24 Jul 2026 15:01:12 +0000
Manifest next update: Sat 25 Jul 2026 15:01:12 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: xh6SQLoHURCKLrhXSJCBDIQuMb+4N2JvT1B/2JG02R8=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:0f:6a:23:0f:22:93:c4:63:54:55:53:99:bd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Jul 24 15:01:12 2026 GMT
Not After : Jul 25 15:01:12 2026 GMT
Subject: CN=2bf9722e4b071ba0c7ce698eaa207bc7e821bb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:bb:5b:ee:6e:0d:56:02:8a:55:15:8c:80:
3a:21:60:64:77:9b:d1:f4:fd:07:21:29:af:14:6b:
d1:58:a7:81:ba:dc:35:df:97:ea:73:db:ae:96:41:
02:c7:3d:b1:5e:85:7b:24:56:2e:b5:7c:e2:95:77:
ec:fb:4c:db:7f:d3:8a:82:f7:db:97:5d:a5:ec:cb:
b7:b0:f1:73:ed:16:67:55:5e:a3:ce:f9:03:07:62:
aa:f4:4f:e1:67:fe:53:04:ed:8b:66:ca:98:e3:0c:
2a:1f:d3:5a:92:db:d9:ad:e8:fa:cd:51:eb:54:bd:
ee:d9:c6:79:6f:0c:87:3d:b1:f6:04:30:86:94:38:
11:c8:c5:8d:bc:82:e1:9e:f9:07:54:b8:5a:63:03:
cd:98:07:42:2f:ef:81:0b:69:cb:52:46:14:f6:db:
79:47:d4:d5:63:32:61:ca:80:ae:bf:d4:41:6a:6b:
14:23:d5:82:0b:0c:cb:15:e8:5c:6b:19:61:ad:b6:
f5:c3:b3:6d:44:9d:b9:66:97:7f:14:af:04:75:29:
2a:52:f0:cb:6f:95:fb:70:e7:61:2b:31:42:48:63:
69:78:0d:bd:cd:6e:05:d9:0d:33:85:6f:10:d8:ac:
39:37:e4:29:98:1f:2c:4a:b9:ee:75:86:cb:d3:df:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F9:72:2E:4B:07:1B:A0:C7:CE:69:8E:AA:20:7B:C7:E8:21:BB:95
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:09:ed:7a:44:a8:4e:cd:b7:56:5c:2a:4b:9d:4a:96:26:53:
fb:c2:81:93:5d:56:1c:2e:b6:0c:c3:06:b5:3c:aa:e9:43:1d:
ef:65:4c:4a:bc:07:4c:60:63:92:32:e9:96:7d:99:26:0a:6c:
12:ec:2f:f7:20:3a:19:16:55:b4:56:aa:10:d4:24:f6:a7:49:
9b:f8:77:d8:fe:28:7e:79:3c:d5:e5:e6:73:3a:af:f6:2f:fa:
84:22:d1:14:52:5f:a7:ba:f1:20:93:d1:90:af:fe:4c:17:3e:
7e:14:de:f3:d4:6c:1c:72:ab:96:0c:e0:d2:3a:e3:fd:94:f5:
40:bf:fa:f7:6d:37:a3:8e:ad:5c:eb:10:56:8f:88:ba:62:ff:
41:2b:07:90:4b:a0:a5:22:96:fe:2d:e3:55:b8:67:7b:a2:7d:
90:75:c5:93:ef:a1:a4:2b:f8:a9:7f:62:76:6a:5c:7a:52:dd:
9c:91:14:1a:cf:d3:fd:8f:ff:01:e6:9b:be:ec:fa:c2:64:e3:
92:cc:91:b1:64:3f:ab:09:8e:1a:0d:c7:0d:84:f0:2d:b7:d4:
c8:a5:5f:47:61:c7:cd:1a:20:06:e3:e9:10:db:ec:5f:14:a1:
6c:26:d9:fc:6a:82:46:6d:31:b6:0e:f6:54:e1:61:19:bd:30:
0b:79:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:39:00 2026 by rpki-client