Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: tQiX8S4pFmZbEg0JEqLNdTnTlWHhfrhzCdTXcqYqaMg=
Subject key identifier: 3D:B8:5D:8C:7D:24:23:82:B5:0F:BA:2D:F5:F1:08:A0:F0:76:E0:F3
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 019CAC7DDBEC4777F3F2D0ADF7EF771CE436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 06A0
Signing time: Mon 02 Mar 2026 03:00:55 +0000
Manifest this update: Mon 02 Mar 2026 03:00:55 +0000
Manifest next update: Tue 03 Mar 2026 03:00:55 +0000
Files and hashes: 1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: Ck+GxpNqKxvWATWj1qCfZzUKpaCB4/C7KV7KeWWKCKM=)
2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:db:ec:47:77:f3:f2:d0:ad:f7:ef:77:1c:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Mar 2 03:00:55 2026 GMT
Not After : Mar 3 03:00:55 2026 GMT
Subject: CN=3db85d8c7d242382b50fba2df5f108a0f076e0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:d1:5a:8e:1b:e1:6c:5c:03:ae:42:23:69:
ca:42:9b:69:27:7b:57:ca:68:a9:07:0b:27:8b:92:
10:d9:1e:7b:83:a4:d4:77:60:e7:39:e3:58:e8:91:
f6:00:fb:50:78:74:35:24:ad:35:36:38:94:b9:19:
2c:ba:9e:84:b7:18:f7:09:53:93:57:c9:bd:bf:54:
1c:96:ff:01:89:b3:c9:5d:3f:b6:c6:b8:13:18:ca:
65:10:e6:88:b2:59:b0:41:d8:c4:3f:07:55:34:81:
56:da:fb:ef:5d:b2:68:58:82:3c:9d:5d:78:bd:fc:
de:1c:b5:a6:ba:7a:15:78:76:d9:10:14:4b:5a:9b:
2b:9c:d3:7b:3b:06:b9:9a:28:45:e2:ba:bb:6a:33:
0a:8a:99:c7:b3:10:8b:46:60:9c:9c:ee:03:5e:75:
4e:fb:1f:66:17:4b:e4:74:59:79:ed:d5:87:f7:ab:
8e:34:c8:8f:b1:27:83:33:44:27:5b:d1:51:18:98:
63:8c:7f:3d:dc:38:4f:61:77:0f:d9:d4:14:dd:0d:
fd:9c:01:9e:b4:27:54:d9:a9:ab:2f:6e:34:e0:dc:
2f:6f:d4:e3:91:4b:98:e6:b6:58:6e:c4:c3:a1:4b:
e8:b1:a2:8c:6a:b7:78:96:7d:19:b8:04:38:d2:50:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B8:5D:8C:7D:24:23:82:B5:0F:BA:2D:F5:F1:08:A0:F0:76:E0:F3
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:0a:44:11:a0:46:2b:c9:44:87:42:c5:36:8d:5f:43:9a:
a2:08:68:95:65:c8:13:3b:0e:45:58:65:ff:04:86:fb:a6:73:
a5:74:7c:b3:f3:88:76:14:17:08:f6:45:88:8d:5e:55:69:49:
70:74:e4:fc:43:61:a7:63:30:57:50:3c:13:12:1a:24:7a:74:
e8:58:f0:ea:c7:52:a4:62:80:5e:d9:32:b5:20:c1:9f:6c:7c:
c4:6d:fe:f9:40:dd:8f:05:46:78:d3:a3:5d:6c:32:e7:18:52:
1c:91:88:22:49:67:b0:3f:c1:8b:9a:27:5f:d7:39:e7:52:b4:
ee:34:55:c6:40:7e:77:26:a3:95:9b:d9:d3:9f:29:b5:d9:72:
34:a2:29:4f:c4:9a:f2:05:e0:8b:2f:f7:f1:8e:92:a3:4b:4d:
c5:ce:bb:d2:51:5e:07:ae:32:42:5a:da:df:21:8a:0f:be:75:
7e:8e:7d:4b:d7:12:6e:60:9d:ce:10:4b:6f:a1:96:17:24:c3:
2b:a0:77:16:cf:7b:11:fd:4d:f2:4c:a5:b5:b8:a4:97:6f:54:
7b:1f:28:c5:62:ba:b1:16:da:d7:3e:ad:17:72:da:b2:1b:1c:
3a:e2:a2:81:48:0c:36:86:78:a1:62:06:bc:cd:a9:bc:be:d1:
c5:44:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:37 2026 by rpki-client