Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: UBYqG9SKTIKuPitTV9h55E7IIPcD0gUrHni9SVtRnGI=
Subject key identifier: 55:8B:40:3B:3E:57:6E:29:65:18:31:9A:24:A8:06:0E:BC:2F:B3:9D
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 01A0C1B1EF7A62AC8D122E25D9A8E852AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 19BC
Signing time: Mon 21 Sep 2026 02:00:58 +0000
Manifest this update: Mon 21 Sep 2026 02:00:58 +0000
Manifest next update: Tue 22 Sep 2026 02:00:58 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: qeSBIQQsuuIqCjjp7gd1kK7mAp3wExQjNdZLW9Nleos=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:ef:7a:62:ac:8d:12:2e:25:d9:a8:e8:52:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Sep 21 02:00:58 2026 GMT
Not After : Sep 22 02:00:58 2026 GMT
Subject: CN=558b403b3e576e296518319a24a8060ebc2fb39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:a4:6a:0d:04:f4:40:f5:7b:b8:34:1b:63:
4b:1b:d9:a0:8f:b3:61:53:44:30:e7:c9:68:b5:68:
a3:37:fc:74:db:34:ca:d8:14:4b:6d:a7:4c:a2:74:
5a:d6:f4:c4:fa:3b:26:f1:e1:5b:06:21:66:e3:65:
90:47:a6:19:57:56:c9:c3:76:10:f0:15:9f:b4:3e:
90:64:75:90:c0:fe:02:fb:31:da:8c:a3:99:62:fd:
10:d6:20:7c:58:7b:3a:50:a4:41:c7:c2:de:8d:e0:
e2:65:9f:26:7d:32:f0:90:60:ab:44:1f:c2:4a:8e:
ef:50:f2:a7:47:66:a0:59:32:e4:ff:75:a4:db:b2:
7f:e1:a2:3c:c6:75:57:79:5a:26:e6:d4:4f:5b:34:
49:d9:ff:43:4f:b6:83:ff:a3:af:08:1a:64:da:3b:
f0:3f:e3:d4:d2:ea:74:fa:b4:9b:f5:1c:c4:66:5d:
e7:e3:2f:2b:af:8f:ab:3d:37:66:2d:cb:6f:42:61:
3a:9f:b5:fc:d7:3f:98:cb:3d:68:f0:52:b3:be:3c:
a9:b0:eb:03:ab:56:e9:39:e0:9c:19:6e:47:7d:02:
f2:e3:19:e5:d6:2f:61:ab:4a:e2:a5:e1:f3:98:80:
53:59:ea:f3:95:68:bf:88:b3:78:74:79:33:ef:9b:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:40:3B:3E:57:6E:29:65:18:31:9A:24:A8:06:0E:BC:2F:B3:9D
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6a:1d:05:a1:a4:2c:e4:bd:22:15:03:14:f6:b7:4f:f9:3b:
80:f7:7c:f0:45:ee:80:91:d0:ff:ff:1e:8e:7d:4b:a6:8a:5a:
a3:0b:eb:61:4a:0d:b5:a9:64:33:e8:9a:cd:dc:d7:1c:2f:77:
88:5a:a1:e2:57:68:d7:b4:f7:53:f8:18:35:1d:fb:bd:d8:ab:
dd:68:29:44:4e:f6:a1:17:21:64:36:f6:d2:f9:37:22:4d:46:
d8:e6:3e:51:d3:48:be:5f:da:36:59:1d:ea:b0:fe:1b:30:c5:
b8:05:bb:2a:dd:69:d8:b6:12:15:ee:ac:fd:af:e6:51:17:63:
a2:6f:86:5b:2f:e5:76:8c:9a:bc:58:ac:9b:6c:d7:9a:80:46:
90:d0:63:15:9f:94:f2:f6:41:42:48:2e:ff:f4:c6:a0:e1:23:
43:8b:b6:0b:75:79:0e:02:a5:e7:80:5e:b8:9d:57:ed:7f:70:
3e:49:18:1e:89:30:47:7a:b2:59:84:29:c3:af:00:ed:5d:7a:
78:e2:80:6c:35:4e:fd:3a:ed:7b:00:ed:16:e3:08:24:ed:53:
4f:84:44:55:89:2f:1e:c5:5b:75:5a:a6:5a:b0:f4:12:d4:ae:
37:e1:a1:74:82:5f:a0:dd:0a:f7:5a:cb:1c:84:7c:c1:3a:77:
02:3a:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:42:42 2026 by rpki-client