Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: xOP0AeZ1i0XEu8Gf6OOPgiFxbaYlCauUgdfUg1HFdws=
Subject key identifier: F7:18:91:A6:DE:81:3E:C6:A9:F8:02:BE:93:A8:36:EF:FB:7B:AE:91
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019CAB6B707A1F439EAE4CA8F73FFAD4481D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0B6A
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: UDK/or/D10F3jRED6ThDfyphMi6NmIINz5MwjORJMX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:70:7a:1f:43:9e:ae:4c:a8:f7:3f:fa:d4:48:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=f71891a6de813ec6a9f802be93a836effb7bae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:18:61:de:e0:2e:14:75:0b:82:78:fc:ae:
96:50:27:26:99:39:be:0d:94:9e:06:b8:fe:a4:1a:
c0:e9:78:97:34:eb:9b:4b:c2:c2:87:11:23:27:64:
81:f6:82:e4:c2:25:da:78:0f:a7:f1:d1:9d:a1:b0:
0f:c8:d2:e7:c5:5c:0c:97:b7:f8:e3:29:0d:7d:42:
40:22:46:02:af:bf:8b:b6:dc:bf:86:35:58:d9:b6:
1f:b5:92:17:6c:2e:ed:fa:83:fd:a1:df:e3:4f:52:
7c:98:bf:4f:8e:02:e7:42:1e:78:0e:a0:04:ee:22:
58:99:d9:04:c6:04:54:6c:ab:c4:c5:42:7c:da:f8:
3d:eb:3b:85:df:9f:dc:4f:46:84:f6:d6:41:a6:05:
25:c2:60:ec:24:b0:6b:1d:4d:6c:00:41:ee:ba:b0:
28:b1:17:54:2f:2a:1e:b0:36:4c:8f:24:ff:8a:45:
9e:cd:69:e9:0c:02:16:0a:6c:1f:c8:d7:8f:69:70:
6d:34:a3:c6:0a:2d:a9:82:72:22:16:4e:15:de:7f:
3a:eb:e4:de:bc:c2:44:13:2d:dd:8a:39:24:89:64:
71:a7:c7:23:53:27:18:fe:f5:76:bd:b0:64:a3:89:
83:2c:b2:6e:43:65:5e:18:20:8a:e3:0c:4a:ec:5c:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:91:A6:DE:81:3E:C6:A9:F8:02:BE:93:A8:36:EF:FB:7B:AE:91
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a1:23:ba:74:86:f8:86:be:82:d5:0b:3e:4d:d4:43:8a:04:
4e:69:64:90:db:15:fe:d8:30:4c:6d:b9:2e:a8:82:78:fd:d6:
f4:c5:23:02:17:6a:b5:24:95:92:57:78:a9:b9:19:bd:41:32:
24:f6:ba:16:5d:5b:af:fa:d9:df:c1:ae:e8:84:5a:85:bc:5b:
c7:fa:74:a6:47:bf:19:36:6b:98:b5:34:ee:73:51:d0:a3:75:
b2:08:ca:c2:b6:06:2a:f1:c4:55:0a:d6:f7:6c:ee:c8:73:a3:
ba:ad:83:c0:86:da:80:88:60:d2:c5:38:82:58:8e:ff:ca:47:
d8:5b:81:9d:cc:b5:00:b1:8c:bd:49:c6:49:36:a4:61:06:68:
ec:6b:24:7a:41:40:00:84:8b:5e:56:07:34:7b:59:20:a7:81:
d6:8f:e5:d4:58:3e:ba:4e:6d:c0:0b:9e:53:b0:e9:31:59:35:
f1:fe:d6:77:89:c7:d5:c3:ce:70:7a:66:1c:08:21:ef:d7:e8:
7a:e1:e5:21:fe:9f:d5:60:4e:ec:88:9e:21:9e:c5:ef:40:e6:
e8:53:b0:a9:17:fc:5b:63:8f:36:a5:cc:9e:c5:0a:86:77:ff:
b8:e3:8d:6a:e8:85:93:98:05:77:28:73:00:5e:cc:81:2c:be:
e3:79:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:08 2026 by rpki-client