Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: L9rz6ia8jncavkS3tz8WVU7T9UPW3OloHxQPswtwjLk=
Subject key identifier: DB:C5:00:10:49:35:A3:F6:FA:F7:5B:DD:E4:4D:58:2E:C5:10:8F:C8
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 01A0D804B1DEFD62FE37DD4BF271875D1A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 0BE0
Signing time: Fri 25 Sep 2026 10:03:01 +0000
Manifest this update: Fri 25 Sep 2026 10:03:01 +0000
Manifest next update: Sat 26 Sep 2026 10:03:01 +0000
Files and hashes: 1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: i4vCRwm3Sv8qGOp1rImVMqyzBlZ/zVjjm5LCKNAOBZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:b1:de:fd:62:fe:37:dd:4b:f2:71:87:5d:1a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Sep 25 10:03:01 2026 GMT
Not After : Sep 26 10:03:01 2026 GMT
Subject: CN=dbc500104935a3f6faf75bdde44d582ec5108fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:15:87:01:5a:3e:1e:9f:ea:49:69:76:f4:
46:a0:cb:af:e5:13:bf:b2:37:be:0e:54:95:59:8c:
c2:c7:7c:ca:de:ff:bc:06:8c:f2:75:9a:13:70:fa:
f3:c3:38:4c:4b:b2:6c:1d:91:da:63:a9:a3:57:f7:
62:3c:32:c6:23:f5:5a:7c:15:99:c9:42:2d:90:fc:
a2:1b:3a:76:a8:00:39:da:45:80:00:22:dc:1b:6d:
83:9a:1c:cb:ba:3d:3f:10:95:a0:5b:e7:4e:3c:6c:
36:19:1e:34:5f:4f:db:2a:19:59:e5:ff:fd:5e:44:
c2:b3:b1:a1:98:af:a2:d6:4a:91:ec:1f:6f:e6:8d:
9c:4f:51:49:79:54:66:33:ea:a1:b3:9f:bd:03:3a:
cc:7d:4e:4e:0f:1f:78:69:cc:07:b6:a3:21:ed:b6:
b2:69:1d:5d:a6:c6:c8:35:6a:15:41:d2:08:14:f1:
d1:36:0d:19:38:c2:ec:29:fe:1f:d4:be:27:ee:18:
a5:cf:41:9b:db:53:9f:47:61:e5:fa:1e:b3:d1:41:
66:40:e0:06:f6:60:e1:1e:58:34:d3:08:bc:8c:62:
73:a1:6b:d2:3c:9b:eb:59:3f:26:cb:ff:a3:b8:a0:
68:6f:53:83:f7:7a:15:71:4a:39:f7:23:8f:89:c5:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:00:10:49:35:A3:F6:FA:F7:5B:DD:E4:4D:58:2E:C5:10:8F:C8
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ae:1e:1d:bf:40:5e:64:90:bd:3d:36:ee:15:8a:81:f1:96:
2b:2f:5f:d4:59:a5:2e:7a:53:89:2e:79:b1:a7:44:68:a7:b0:
0d:1d:f6:ed:31:af:8c:aa:6e:d4:09:c7:1a:c4:01:07:61:98:
84:55:73:df:ee:60:8e:ea:09:ca:0c:ff:5c:ca:8e:f7:c4:99:
50:73:60:88:25:14:14:68:04:62:ec:d2:0c:c8:aa:9e:4a:fa:
54:2c:57:9d:e5:33:bb:7f:28:8f:40:43:f6:40:b4:3d:36:8e:
51:ae:ef:be:9f:26:20:69:3d:9f:8d:79:95:16:2e:b4:4c:18:
6c:71:4e:34:44:37:c8:ce:7a:38:1b:fb:57:d9:34:86:53:00:
e5:0f:db:d6:58:f3:6f:81:0a:dd:97:da:7d:9a:01:b1:2d:8c:
d7:96:2e:f4:a7:88:8f:d3:e2:e2:0a:e2:43:2b:4b:fe:7e:ed:
5d:6f:c9:6a:cf:9d:2a:bf:3f:ae:49:58:03:f3:dc:10:70:71:
e5:58:84:ff:2e:b6:19:79:eb:db:2b:20:bb:43:51:f8:24:98:
fa:21:32:2a:f9:26:3c:96:6a:21:c0:8b:0f:b6:5c:72:39:27:
23:90:e8:fb:e7:b5:d4:0e:e5:7f:de:ff:03:e3:16:d4:b6:17:
a6:ab:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:11:09 2026 by rpki-client