Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: cRGZx2wqry7Eaqb/LvxIej9X2pokzu9JisOWXYku7Yw=
Subject key identifier: 5D:DE:7C:CF:A4:2D:96:BC:1D:0B:57:22:C1:46:8D:EE:46:7B:8A:43
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019E1C0FBE40A812384F36B046C045AF17C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0FDA
Signing time: Tue 12 May 2026 12:00:54 +0000
Manifest this update: Tue 12 May 2026 12:00:54 +0000
Manifest next update: Wed 13 May 2026 12:00:54 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: WdLy6xT5OrCoiBprIuuBE6jQ/vinWTXUwUcFjX+vUl0=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:be:40:a8:12:38:4f:36:b0:46:c0:45:af:17:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: May 12 12:00:54 2026 GMT
Not After : May 13 12:00:54 2026 GMT
Subject: CN=5dde7ccfa42d96bc1d0b5722c1468dee467b8a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:2f:f3:b8:c4:9b:4e:8b:aa:1f:65:96:e6:
39:72:08:9d:cc:36:b1:9a:96:ce:36:85:5d:d7:bc:
92:f0:55:6f:50:fb:7f:e8:af:77:b2:b7:00:33:95:
83:db:ac:f0:6b:3e:e2:81:2d:54:0b:cd:e3:64:4e:
98:de:d8:a7:89:af:f6:84:86:93:64:ea:9f:00:a2:
38:2d:4e:c3:8c:33:52:c3:34:c5:d8:b5:f7:66:ea:
72:2c:21:94:c4:17:3d:c2:a2:44:cc:aa:22:f0:ce:
28:fc:bd:46:ab:21:b9:95:85:b9:0f:9f:7b:32:d5:
34:da:4f:c2:eb:2f:3b:18:7e:f9:6a:87:bd:3a:4e:
5d:be:31:b1:14:64:55:8a:67:fb:bf:40:ae:6c:27:
6c:09:15:f7:ad:18:8a:7a:9f:04:cc:f5:25:45:a5:
aa:59:7e:ec:9b:e7:5d:9e:22:14:6e:d6:5a:02:68:
60:c3:66:c6:f1:6e:38:77:97:1b:8b:53:96:ff:eb:
37:00:65:e8:20:5a:56:47:79:8e:8e:cb:ea:cf:af:
e1:a8:3b:61:b4:aa:58:fc:d2:86:2e:b6:f1:7c:12:
44:4b:ff:86:76:17:36:44:60:60:64:0a:6a:c1:2a:
77:99:3f:bf:02:0f:bc:3a:81:5a:a7:9d:83:15:b4:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:7C:CF:A4:2D:96:BC:1D:0B:57:22:C1:46:8D:EE:46:7B:8A:43
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:7a:b2:08:dd:54:ce:dd:47:88:02:3c:ba:ba:95:20:8d:60:
66:9e:d1:f7:ba:4f:54:e5:48:9b:ba:36:8e:91:01:ea:f9:23:
5c:1c:53:e3:4b:c1:e1:5a:f2:1e:cf:8a:0b:5d:06:88:a1:a5:
ce:c2:0f:40:93:65:eb:f6:93:93:a1:da:a8:46:37:7c:4c:67:
18:04:27:b7:fa:1f:0f:e5:af:90:68:67:8e:32:36:4e:07:44:
00:9e:94:5b:b6:f5:05:db:3d:eb:3b:19:6d:62:c3:19:8c:84:
80:e3:d6:5a:ce:1b:42:3f:14:9e:27:4b:ed:31:65:d5:72:f9:
5d:ad:47:4f:5d:2d:5a:fc:fb:d7:36:4d:81:e1:f1:fd:52:e7:
44:41:67:ee:63:dd:ac:de:3e:f1:f6:7f:28:d1:ef:e5:d6:3d:
54:f3:d6:64:96:04:ad:d1:32:5a:da:60:b1:7a:ea:23:11:c5:
22:37:66:94:bc:46:09:78:f2:3f:c6:dd:d3:c2:32:38:d3:c3:
dc:68:05:b6:ff:b6:8f:59:a8:b1:15:1c:47:b8:3d:21:d8:e1:
83:eb:0f:03:47:3d:f4:07:81:e6:28:f6:2b:e0:7b:3d:fb:f3:
50:a1:b7:77:f6:2f:06:f5:80:d5:de:8d:09:c4:14:2c:d3:57:
4c:5f:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:52 2026 by rpki-client