Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: 92Ha57uzt3DlesFK4IiVbjcr91G3/J+BEOdaPF8VJhE=
Subject key identifier: D1:85:02:B6:7C:75:58:1F:C8:12:BB:56:8F:7C:4A:42:61:73:F6:D3
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 019CA90EFDADAE60EC7EF38798FBFA7B1EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 179D
Signing time: Sun 01 Mar 2026 11:00:57 +0000
Manifest this update: Sun 01 Mar 2026 11:00:57 +0000
Manifest next update: Mon 02 Mar 2026 11:00:57 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: KnvNCwK0j1z5aJYhoaBrz1xx0scNKevtC5v7nyX0cMI=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:fd:ad:ae:60:ec:7e:f3:87:98:fb:fa:7b:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Mar 1 11:00:57 2026 GMT
Not After : Mar 2 11:00:57 2026 GMT
Subject: CN=d18502b67c75581fc812bb568f7c4a426173f6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:d5:1a:0e:68:25:9e:91:38:39:64:79:ae:
a0:a8:5e:81:65:38:b2:76:d8:5a:87:18:52:c1:61:
61:ea:66:32:36:f0:69:d9:54:7d:44:3f:2c:71:67:
68:47:69:09:c5:b8:a2:39:55:06:c3:70:52:c6:fc:
7d:35:f5:0e:98:05:68:68:d3:68:5d:2c:3e:fc:20:
24:44:82:72:ca:a2:95:2d:e3:c0:16:75:56:60:a7:
2f:ea:3f:a5:1b:09:a9:e5:77:cc:be:11:cf:fb:79:
15:71:5a:f4:49:f7:87:14:df:cb:bc:70:8a:02:2c:
7e:96:e9:58:b5:40:7e:80:76:dc:d2:82:e7:3d:84:
a1:28:e6:da:ab:64:bb:ef:b7:eb:ce:25:6d:52:53:
7d:4f:8f:0e:fd:34:c7:47:46:a5:52:4c:d9:0a:89:
09:c1:53:f7:d2:ab:dd:a8:05:cf:0c:cd:9d:c7:b8:
9b:c4:f0:97:d6:f0:5e:83:b4:9b:f8:3b:fc:28:59:
ea:86:6d:d4:c3:d7:16:8f:3e:73:9b:f4:bd:1e:a0:
e1:b7:94:60:44:ca:10:3c:ce:ba:72:31:a7:9e:1b:
cc:26:78:6b:12:6f:c7:32:37:f3:ed:0f:67:df:e2:
58:bc:88:fb:78:34:c7:35:8b:21:08:2f:81:d4:2d:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:02:B6:7C:75:58:1F:C8:12:BB:56:8F:7C:4A:42:61:73:F6:D3
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:1a:6a:e2:fe:ee:74:33:f2:d8:43:e3:4d:02:87:44:d2:
f1:ee:7a:10:cf:7f:19:dc:f3:e8:3a:32:08:e0:8d:78:09:ea:
e4:0b:87:fa:ca:26:b0:89:0a:cb:ab:38:1e:05:63:2c:a2:77:
06:7b:71:2b:10:eb:d1:5f:53:29:79:a5:1e:24:15:19:db:c4:
5a:57:7f:16:00:46:14:f0:e5:fb:26:82:42:65:00:34:67:bb:
d0:f5:98:99:16:59:52:95:34:d4:76:47:a2:e9:de:a0:75:90:
ac:b9:d3:58:1c:04:3e:6f:8f:c2:5b:58:d3:09:b7:58:b7:dd:
4b:4c:8c:44:8c:24:a0:e7:76:b8:8e:bd:3c:96:84:b5:27:6d:
67:4f:e1:2a:9b:9c:82:21:31:d3:fb:9e:ab:5e:ce:00:a1:0f:
ac:d7:c0:63:8f:9b:d2:f4:8d:a5:c4:52:6e:9d:16:01:36:a7:
67:a1:35:58:a3:b1:e5:c8:fa:e8:e6:af:5c:f3:14:11:ea:55:
31:74:09:4a:7b:88:88:3c:f7:3c:60:51:5a:c4:66:0b:23:18:
b5:f6:b0:e2:47:77:f3:71:3a:a7:20:8b:65:a2:06:9c:85:6f:
d9:dc:64:4c:b1:be:f9:dd:40:87:57:ce:bc:4e:7b:95:c0:44:
5e:c9:78:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDv2trmDsfvOHmPv6ex66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTY1MzQ4ZGMxM2M4NTQ5OWM3Nzc0ZDE1NjYxNGMxMjAx
MThhYjUwHhcNMjYwMzAxMTEwMDU3WhcNMjYwMzAyMTEwMDU3WjAzMTEwLwYDVQQD
EyhkMTg1MDJiNjdjNzU1ODFmYzgxMmJiNTY4ZjdjNGE0MjYxNzNmNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstbVGg5oJZ6RODlkea6gqF6BZTiy
dthahxhSwWFh6mYyNvBp2VR9RD8scWdoR2kJxbiiOVUGw3BSxvx9NfUOmAVoaNNo
XSw+/CAkRIJyyqKVLePAFnVWYKcv6j+lGwmp5XfMvhHP+3kVcVr0SfeHFN/LvHCK
Aix+lulYtUB+gHbc0oLnPYShKObaq2S777frziVtUlN9T48O/TTHR0alUkzZCokJ
wVP30qvdqAXPDM2dx7ibxPCX1vBeg7Sb+Dv8KFnqhm3Uw9cWjz5zm/S9HqDht5Rg
RMoQPM66cjGnnhvMJnhrEm/HMjfz7Q9n3+JYvIj7eDTHNYshCC+B1C1URwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGFArZ8dVgfyBK7Vo98SkJhc/bTMB8GA1UdIwQY
MBaAFNDmU0jcE8hUmcd3TRVmFMEgEYq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYt
MGRiMGVjMWU5NDVjLzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYtMGRiMGVjMWU5NDVj
LzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuAaauL+
7nQz8thD400Ch0TS8e56EM9/Gdzz6DoyCOCNeAnq5AuH+somsIkKy6s4HgVjLKJ3
BntxKxDr0V9TKXmlHiQVGdvEWld/FgBGFPDl+yaCQmUANGe70PWYmRZZUpU01HZH
ouneoHWQrLnTWBwEPm+PwltY0wm3WLfdS0yMRIwkoOd2uI69PJaEtSdtZ0/hKpuc
giEx0/ueq17OAKEPrNfAY4+b0vSNpcRSbp0WATanZ6E1WKOx5cj66OavXPMUEepV
MXQJSnuIiDz3PGBRWsRmCyMYtfaw4kd383E6pyCLZaIGnIVv2dxkTLG++d1Ah1fO
vE57lcBEXsl4Ig==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:04 2026 by rpki-client