Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: YZgKMXXwJtEpDKo57QOJPh+c7dHUtxWdXgHi0eK4Zq0=
Subject key identifier: E4:79:EC:B8:63:CF:95:59:EB:4C:75:A4:AC:EF:29:06:7B:54:2B:90
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01A0E99BE56A6BE10B8EEC6D26A65AA99E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1A0A
Signing time: Mon 28 Sep 2026 20:01:42 +0000
Manifest this update: Mon 28 Sep 2026 20:01:42 +0000
Manifest next update: Tue 29 Sep 2026 20:01:42 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: LLXTIo8duFmYCZkbpkNWKICbhhgiSEAIxYCgxS722EM=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:e5:6a:6b:e1:0b:8e:ec:6d:26:a6:5a:a9:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Sep 28 20:01:42 2026 GMT
Not After : Sep 29 20:01:42 2026 GMT
Subject: CN=e479ecb863cf9559eb4c75a4acef29067b542b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:2b:78:d4:19:f9:1f:7f:bf:b7:ce:d1:2e:
31:89:9a:45:cd:95:10:49:73:3f:0b:9f:08:07:7a:
40:dc:e1:0a:21:dc:4a:3e:27:60:ab:e0:ef:d0:4c:
7f:1c:84:79:f6:97:96:18:44:61:c2:a5:29:03:78:
84:67:d1:ca:8d:0b:80:52:68:f7:7c:e1:6e:b7:c3:
c0:d6:af:2d:b3:53:6c:8c:0c:72:dc:2b:25:98:51:
6f:d4:0b:1d:c3:d9:d0:3e:da:98:12:9d:02:bd:1b:
ec:a5:f3:49:c9:59:35:4e:f8:be:f4:ed:f7:3a:37:
2e:31:2c:cc:ca:9c:d1:f9:17:94:52:86:a0:7b:71:
30:5d:e2:d7:ac:8b:05:76:df:e4:91:ef:d1:fc:f6:
00:a5:30:c1:3e:0f:c3:25:cc:49:2a:fb:af:d3:1c:
41:39:86:74:db:41:a1:e1:cd:51:25:a8:1c:86:22:
f4:e2:c6:3b:1c:9f:db:3e:1e:1a:e9:89:b0:bb:d1:
50:b0:31:44:4f:82:0b:8c:97:15:59:63:cf:c6:af:
7d:5b:49:ef:3b:35:35:68:c2:0e:12:40:6e:97:4c:
d9:73:0d:5a:33:ac:93:5f:cb:84:2f:9d:1d:3a:aa:
7e:21:17:5f:30:28:de:06:6a:49:d3:d1:28:42:6d:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:EC:B8:63:CF:95:59:EB:4C:75:A4:AC:EF:29:06:7B:54:2B:90
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:33:ae:ff:46:88:f6:0e:64:08:db:77:f3:b9:3c:4c:04:
f5:28:b9:7e:41:0b:df:06:2f:15:47:e9:25:1d:f1:0a:98:c9:
c7:9f:32:1c:f4:66:26:b3:e0:e5:e8:84:19:8c:da:87:98:77:
a6:c3:ce:09:e2:02:63:7c:75:93:99:76:14:f7:73:88:8b:1c:
07:22:32:67:bf:45:52:2a:4b:33:9c:76:d1:75:c7:cf:8e:40:
8b:62:75:55:72:b1:c2:ad:0b:82:0b:c7:58:79:3c:c5:12:a7:
7d:0e:3c:88:36:6f:0a:c4:c7:1d:6a:90:a0:bd:75:bd:d1:9f:
1c:7b:45:d6:bd:16:3a:ae:ed:0a:a4:03:81:2b:41:49:51:91:
50:b9:78:39:d7:92:62:5d:b3:17:cf:86:c8:a9:78:39:04:36:
af:ff:13:d9:59:45:46:54:b9:70:6c:54:4d:e8:5d:1e:e4:b9:
b1:94:ab:4c:19:a1:93:d3:77:4f:a8:56:6e:a2:b4:4f:5c:98:
05:c5:72:f7:32:b7:53:33:e8:a4:19:d8:e0:6b:15:1e:e0:18:
44:2a:50:50:33:dc:36:15:f6:04:5f:26:1c:38:b3:5a:a6:e9:
dd:fe:ce:75:1b:c2:00:ad:98:42:7d:f6:e0:64:ad:76:b1:03:
f2:29:25:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpm+Vqa+ELjuxtJqZaqZ4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz
NTcyOTMwHhcNMjYwOTI4MjAwMTQyWhcNMjYwOTI5MjAwMTQyWjAzMTEwLwYDVQQD
EyhlNDc5ZWNiODYzY2Y5NTU5ZWI0Yzc1YTRhY2VmMjkwNjdiNTQyYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvMreNQZ+R9/v7fO0S4xiZpFzZUQ
SXM/C58IB3pA3OEKIdxKPidgq+Dv0Ex/HIR59peWGERhwqUpA3iEZ9HKjQuAUmj3
fOFut8PA1q8ts1NsjAxy3CslmFFv1Asdw9nQPtqYEp0CvRvspfNJyVk1Tvi+9O33
OjcuMSzMypzR+ReUUoage3EwXeLXrIsFdt/kke/R/PYApTDBPg/DJcxJKvuv0xxB
OYZ020Gh4c1RJagchiL04sY7HJ/bPh4a6Ymwu9FQsDFET4ILjJcVWWPPxq99W0nv
OzU1aMIOEkBul0zZcw1aM6yTX8uEL50dOqp+IRdfMCjeBmpJ09EoQm01bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR57Lhjz5VZ60x1pKzvKQZ7VCuQMB8GA1UdIwQY
MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt
MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2
LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMI0zrv9G
iPYOZAjbd/O5PEwE9Si5fkEL3wYvFUfpJR3xCpjJx58yHPRmJrPg5eiEGYzah5h3
psPOCeICY3x1k5l2FPdziIscByIyZ79FUipLM5x20XXHz45Ai2J1VXKxwq0LggvH
WHk8xRKnfQ48iDZvCsTHHWqQoL11vdGfHHtF1r0WOq7tCqQDgStBSVGRULl4OdeS
Yl2zF8+GyKl4OQQ2r/8T2VlFRlS5cGxUTehdHuS5sZSrTBmhk9N3T6hWbqK0T1yY
BcVy9zK3UzPopBnY4GsVHuAYRCpQUDPcNhX2BF8mHDizWqbp3f7OdRvCAK2YQn32
4GStdrED8iklyg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:29 2026 by rpki-client