Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: hFNGxoOMHafO/rVlUNmJCpo67xNZoZPX40J8/x16W5E=
Subject key identifier: D7:53:E1:F7:13:43:10:EA:6F:B3:7E:A4:76:A6:45:4D:1D:31:04:C8
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019D25F197004EDCA9D5570263A23F53691E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 17:01:22 +0000
Manifest this update: Wed 25 Mar 2026 17:01:22 +0000
Manifest next update: Thu 26 Mar 2026 17:01:22 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: 1AU4cjdcXTFso1QCnGcZUkTMCRXItJqIZxmuI0KmGgc=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:97:00:4e:dc:a9:d5:57:02:63:a2:3f:53:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Mar 25 17:01:22 2026 GMT
Not After : Mar 26 17:01:22 2026 GMT
Subject: CN=d753e1f7134310ea6fb37ea476a6454d1d3104c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:bb:15:c2:75:f9:2c:f6:4a:4a:93:b6:c4:
df:1c:65:1b:1d:47:95:04:62:d5:fe:6a:fe:34:64:
33:8a:79:f3:26:87:ec:f6:f7:bf:84:14:61:89:b9:
0d:49:1b:97:96:0b:42:88:ae:36:26:ba:42:38:bd:
2e:a9:39:83:5c:fa:57:6c:04:b6:99:b8:20:09:52:
de:7a:ff:5f:34:89:ab:70:75:1f:b1:05:8e:b6:72:
a3:fc:e9:96:d0:fe:82:f1:37:8e:5a:cb:c7:43:52:
28:f0:7e:40:60:4e:cc:03:38:82:e0:1a:e3:78:bc:
f7:0a:95:4a:32:64:02:4e:2e:00:b2:05:65:3a:a8:
c5:50:12:f1:1b:09:3b:87:e7:a9:62:de:2f:a6:0a:
1e:a7:87:f0:d2:70:24:ca:aa:72:8f:a2:65:cd:45:
6a:5e:ef:89:70:db:bf:88:7d:c4:53:37:77:a0:10:
c8:de:91:04:31:4f:ce:17:5f:f0:32:05:be:aa:e8:
4a:a9:52:d8:0d:46:d9:2c:e5:65:7f:2c:8d:6f:01:
d5:d4:d4:92:37:9c:9a:3a:22:c0:60:e5:f0:76:b3:
f0:f4:46:0e:ad:51:43:40:e4:de:3b:b3:da:14:b5:
52:43:7c:ce:6e:92:48:aa:a0:85:9b:12:4c:a8:9b:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:E1:F7:13:43:10:EA:6F:B3:7E:A4:76:A6:45:4D:1D:31:04:C8
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3c:36:c7:5c:37:64:cc:b1:1a:91:79:bf:6b:15:6e:b7:a5:
f0:b1:5d:4c:bc:4b:27:a2:58:d2:b8:c0:a6:ef:db:ae:b2:93:
b9:5a:02:fb:d1:39:ad:66:3b:6c:1c:59:7a:84:28:99:17:a1:
cd:b0:67:1f:22:82:48:83:c9:2c:a6:e5:e5:f8:a2:ca:a2:9a:
f6:be:49:26:a1:c4:91:47:8c:35:e8:f8:f8:34:e3:98:69:23:
5e:5b:cb:e3:c3:b3:29:f1:56:aa:49:7d:be:57:ef:c6:bd:94:
8e:ef:d9:6e:d1:9f:b4:5b:cf:02:c9:94:d9:5f:0e:1b:df:0b:
9a:31:59:b7:fe:81:af:a9:6d:c8:f0:2f:ab:79:0b:9f:40:e8:
e2:70:1c:85:1f:82:3b:f0:91:3d:d0:5b:5c:36:b5:65:fa:a4:
7d:95:cf:7f:e2:b4:6d:3f:a7:fc:d8:25:a8:68:a3:f9:5b:7b:
82:63:08:d3:35:8d:8d:a7:9e:91:7f:be:f4:49:f9:a5:51:3c:
00:69:f0:9e:3a:25:d6:d0:58:1b:97:1b:7d:af:8b:73:11:a6:
61:b0:97:25:8f:0a:77:3d:8f:98:e6:94:1d:02:b8:d7:00:50:
8f:b8:b2:ed:7c:32:f4:de:fb:30:9a:c3:91:76:3d:63:dc:80:
c9:6b:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:17 2026 by rpki-client