Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: v3ycy1GnW5cpHOhzQjiA43lLYhg1b+5yhCCEptg/XjM=
Subject key identifier: 2E:46:6F:ED:62:8B:6E:8C:A1:25:59:AF:3A:81:FF:8E:93:55:E0:5A
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019D28BB2A7FFA82C79A017317E211DC220D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0F5C
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: 3v6FVoyZSR1IbpHNykPpR39f4nrDD0wYWBTUFO842Sc=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2a:7f:fa:82:c7:9a:01:73:17:e2:11:dc:22:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=2e466fed628b6e8ca12559af3a81ff8e9355e05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:9a:04:b9:f5:1b:50:ba:83:74:94:e7:7f:
5a:40:52:b7:b7:35:e7:db:83:78:0d:3e:44:8a:53:
8b:c6:89:9f:0b:d5:dc:3e:53:60:43:0d:17:41:2f:
4b:6f:b2:5b:4d:07:b5:8a:ef:9d:bd:f1:af:24:d9:
f0:f1:ac:93:f7:14:d0:67:87:10:f8:68:c3:05:cc:
19:fe:18:65:62:51:84:74:a5:1d:5b:b9:36:31:07:
84:12:95:e5:14:1a:31:76:18:f7:6c:00:24:d4:c0:
17:a0:66:80:e6:eb:6e:b6:88:91:31:6f:8d:74:67:
74:23:2b:27:bb:0e:46:94:d4:4e:8e:e0:fd:c9:c4:
fd:56:66:fe:15:5b:75:a6:29:75:47:cf:05:81:57:
e9:a6:7a:15:f3:f2:8e:7d:03:ef:48:c4:f0:12:28:
22:1d:f0:36:1c:51:16:d2:32:f3:86:ba:ee:9a:99:
e1:b7:18:96:fc:2a:bc:31:17:d5:fa:44:67:48:fd:
88:9a:66:70:fc:8d:1e:7b:18:49:32:1e:2b:e4:29:
43:d3:ca:fb:a9:7a:f8:47:d7:5a:ec:d5:9f:3b:90:
a6:bc:fe:c9:5b:7a:2c:48:0d:92:3f:5e:55:b7:3e:
59:60:90:a4:2e:28:08:ed:57:b9:78:ba:8f:71:df:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:46:6F:ED:62:8B:6E:8C:A1:25:59:AF:3A:81:FF:8E:93:55:E0:5A
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:cc:1f:5f:d4:83:e3:a8:78:0d:91:e1:62:f7:a6:79:3c:
46:f4:7c:10:af:98:35:be:38:d2:b0:e9:7d:58:79:73:4b:37:
8b:ee:c4:24:6f:55:46:6e:f3:f8:10:70:f6:ce:e2:90:77:69:
b9:bb:fd:0b:23:24:d9:d8:41:16:c8:dc:a8:7f:0c:fd:2d:5e:
7c:ed:04:d1:82:93:8c:33:cf:9e:b5:a1:97:bb:ea:7b:74:c6:
2b:c5:a0:49:25:b9:f8:36:88:65:00:41:2b:42:c4:2d:8c:6e:
31:f7:1a:b5:d0:4a:94:3b:d2:6a:b9:47:8a:00:8f:71:e3:84:
ab:6e:17:14:a6:54:3d:d5:3d:f3:69:cd:69:dd:08:56:1d:08:
68:aa:d8:8b:3f:1f:95:d7:f8:3a:f3:fe:d0:e0:67:dd:8b:d3:
bc:27:37:3d:2c:cc:8b:f9:30:ca:ea:17:0f:cd:b9:67:fd:98:
bd:cd:e9:67:cb:72:e4:d6:11:c5:b6:56:25:35:bb:4c:da:e4:
8e:82:7f:36:f0:e3:80:d9:9a:70:13:c6:ca:0b:ef:c1:b6:59:
d6:57:11:3d:07:b3:a8:1e:c6:32:6e:50:ea:0a:7b:88:96:73:
f9:58:68:e3:e7:86:46:4e:e0:ba:97:b3:23:03:17:3a:6b:75:
74:a5:3e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouyp/+oLHmgFzF+IR3CINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw
OWFkZTAwHhcNMjYwMzI2MDYwMDQ3WhcNMjYwMzI3MDYwMDQ3WjAzMTEwLwYDVQQD
EygyZTQ2NmZlZDYyOGI2ZThjYTEyNTU5YWYzYTgxZmY4ZTkzNTVlMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TaaBLn1G1C6g3SU539aQFK3tzXn
24N4DT5EilOLxomfC9XcPlNgQw0XQS9Lb7JbTQe1iu+dvfGvJNnw8ayT9xTQZ4cQ
+GjDBcwZ/hhlYlGEdKUdW7k2MQeEEpXlFBoxdhj3bAAk1MAXoGaA5ututoiRMW+N
dGd0Iysnuw5GlNROjuD9ycT9Vmb+FVt1pil1R88FgVfppnoV8/KOfQPvSMTwEigi
HfA2HFEW0jLzhrrumpnhtxiW/Cq8MRfV+kRnSP2ImmZw/I0eexhJMh4r5ClD08r7
qXr4R9da7NWfO5CmvP7JW3osSA2SP15Vtz5ZYJCkLigI7Ve5eLqPcd+RsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5Gb+1ii26MoSVZrzqB/46TVeBaMB8GA1UdIwQY
MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt
NjY1MTdhM2FjMTlkLzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk
LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJPMH1/U
g+OoeA2R4WL3pnk8RvR8EK+YNb440rDpfVh5c0s3i+7EJG9VRm7z+BBw9s7ikHdp
ubv9CyMk2dhBFsjcqH8M/S1efO0E0YKTjDPPnrWhl7vqe3TGK8WgSSW5+DaIZQBB
K0LELYxuMfcatdBKlDvSarlHigCPceOEq24XFKZUPdU982nNad0IVh0IaKrYiz8f
ldf4OvP+0OBn3YvTvCc3PSzMi/kwyuoXD825Z/2Yvc3pZ8ty5NYRxbZWJTW7TNrk
joJ/NvDjgNmacBPGygvvwbZZ1lcRPQezqB7GMm5Q6gp7iJZz+Vho4+eGRk7gupez
IwMXOmt1dKU+3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:50 2026 by rpki-client