Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: CKP9J2QQYnKyKLZQ00Gj3zY7F/ImJqogMny2xiWnPLE=
Subject key identifier: 10:E0:DE:34:1B:88:23:9E:F8:DD:9B:F5:48:79:01:C6:D9:97:0C:FF
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 019D2703A0D146DEB09C8768315B247E7E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 13C9
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: 6X5WvXogdJpaC6udLuISeJOoL4Ard+xdVs8Gmeg/veg=)
2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a0:d1:46:de:b0:9c:87:68:31:5b:24:7e:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=10e0de341b88239ef8dd9bf5487901c6d9970cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:25:42:71:d0:0f:46:26:12:be:d1:b7:d3:
4d:d6:70:94:d0:7b:09:af:4e:e1:fe:a7:fb:c1:1c:
44:ab:03:3e:90:d6:72:a2:b8:3e:b2:70:4b:ea:ee:
6b:7b:6a:40:74:06:2a:03:64:93:74:5f:73:70:71:
33:a2:dd:65:05:b2:2e:52:4e:4f:ec:84:56:33:fb:
d3:aa:71:6d:41:8a:3e:dd:cc:20:09:ed:6d:cc:ff:
dc:c0:bc:2a:87:54:09:eb:7a:9d:dc:e0:70:5f:48:
7f:7b:a1:11:df:00:2c:58:57:76:53:30:35:91:bf:
80:bf:01:42:05:53:8c:b3:89:39:15:d8:c4:9e:a4:
36:df:40:25:32:e3:01:79:2a:35:b2:65:9a:15:a9:
22:2c:17:cd:a0:05:99:49:85:92:46:c2:1c:18:8c:
24:32:c9:46:c8:b8:d4:3e:56:e7:b5:1f:79:0b:93:
b7:d6:9f:47:99:36:7c:0f:c2:ac:f2:fa:3a:0c:c3:
17:ae:2a:57:de:8f:06:48:59:55:50:17:ce:fa:65:
00:ad:a5:e0:9d:c6:5e:af:40:7f:30:cb:8a:63:82:
6d:a1:d6:ef:50:a3:c2:8f:1e:7a:ca:81:2d:33:79:
05:a6:b3:9d:dc:3a:ea:d4:70:d2:49:64:2f:7b:d8:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:DE:34:1B:88:23:9E:F8:DD:9B:F5:48:79:01:C6:D9:97:0C:FF
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:81:23:13:dc:e5:06:1d:da:9f:82:4e:a2:b4:80:6b:ef:
a3:2d:81:96:0c:74:00:88:e5:08:c6:c7:4b:df:fb:42:81:03:
f4:a1:3d:a0:e1:b2:cb:ce:27:07:e5:44:dc:d4:e7:b2:e7:1d:
7b:4c:9a:0d:c5:6b:84:49:b9:18:33:dd:6b:ce:a1:b6:a5:12:
99:57:58:99:8f:db:86:25:c9:45:27:f9:16:8d:68:20:cd:59:
4b:54:88:1a:e7:ba:90:18:3b:8b:d2:ec:18:a2:e7:8e:b8:64:
91:9a:e5:0c:52:e9:51:2c:c4:0a:91:94:75:f6:cc:17:8c:48:
bb:ff:11:5b:a2:b0:25:0d:fe:c2:5b:85:cb:d6:af:65:51:c2:
d7:8a:88:b7:27:c7:ed:85:45:ed:3f:9e:b4:1e:d9:cc:af:a0:
4f:ab:9a:ec:db:2f:69:86:27:bb:03:e5:1e:2e:c6:4f:7c:31:
42:a2:00:69:69:56:e4:ec:23:32:bd:0f:92:5f:33:a0:60:42:
ca:99:03:52:2d:5b:bd:fd:98:d9:4a:3d:1e:ff:ce:f6:c6:79:
2e:4a:b3:6a:5c:f9:6d:e2:e3:77:a4:dc:32:dc:17:67:52:6c:
43:4e:6b:9c:66:5f:33:46:8a:73:f0:da:76:0a:c9:89:ed:14:
6f:55:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:33 2026 by rpki-client