Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: Z6iFamPy0FbOlys01JDfUxRce6MiTLGrd1kVPB9q7TA=
Subject key identifier: 6E:04:0C:61:84:94:83:1C:B0:17:47:CB:D1:72:C3:1E:88:4F:E2:76
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 019CAB6BD2839C9319C768DA29A99611E37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0C9E
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: 3cJcWyoLRUkk1+uobr40GJMliSyoeVScy1tvAsZdKlU=)
2: ThzwdKdKn1Xy5a4JKmMojrXgu40.roa (hash: lIi2RxL8LrPV+57y38KO3DW0z4++WwpkT83uTb32e/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d2:83:9c:93:19:c7:68:da:29:a9:96:11:e3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=6e040c618494831cb01747cbd172c31e884fe276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:bb:65:52:71:07:13:c1:b0:ad:d2:3c:fb:
fd:38:a7:ed:d6:02:bc:91:ef:c7:55:d9:04:fb:94:
f7:cb:29:0d:f6:f4:e7:19:1e:de:9c:1b:23:8d:f5:
9a:3d:ca:ef:ca:2c:8c:42:3b:e5:01:db:d4:6e:8b:
50:26:71:28:d0:4d:ee:a3:35:8b:a6:12:eb:9c:26:
90:8e:a6:d1:b3:22:92:31:bd:39:8b:c3:d4:8f:38:
7b:36:32:1b:b2:6c:cb:35:5a:55:e9:58:f9:1e:c0:
1d:51:ca:28:3d:6f:ff:b7:4c:f9:fd:4c:8a:b1:11:
2b:7f:96:cd:fb:41:ba:d5:35:ae:21:bf:66:9c:75:
0f:0f:75:11:55:d8:ef:40:c7:6a:ac:03:47:73:8a:
63:d8:24:82:31:aa:7b:63:ad:c9:91:33:25:78:46:
6f:c2:07:9b:2e:9c:e9:b2:ea:48:ff:f6:fe:27:21:
0d:0e:de:7b:5e:be:94:82:5d:7c:74:36:13:71:1c:
03:ca:ce:b5:cd:33:51:39:3f:04:72:54:45:34:83:
be:c1:72:9a:88:dd:6a:18:c1:7c:61:64:10:cc:d7:
89:6a:0a:b6:75:e6:d8:07:11:4e:43:fa:44:53:8e:
1d:1e:c1:ef:95:81:62:88:00:a2:82:ca:80:92:9d:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:0C:61:84:94:83:1C:B0:17:47:CB:D1:72:C3:1E:88:4F:E2:76
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:62:15:94:68:5a:68:38:b9:d1:3c:ef:ff:fe:60:00:1a:d0:
75:27:aa:c8:1a:64:fa:f1:bc:2b:ee:21:3e:41:53:c6:a1:2e:
1d:96:2a:48:57:e6:80:d8:78:c2:bd:3e:87:c7:95:e3:2c:97:
a4:84:86:5b:5c:a6:3e:5a:b2:48:9b:6b:46:fd:f1:d3:92:d6:
ba:ba:7c:99:c9:e3:a7:84:f6:49:8d:f2:ff:0b:2b:af:9b:36:
c4:05:96:8c:49:48:3b:d9:e3:2c:70:62:d2:11:aa:d2:be:65:
c0:4b:b3:6e:3d:a9:d3:62:f3:95:39:d8:35:35:9a:c1:cd:40:
db:99:0c:0e:75:f8:4f:25:11:5e:aa:65:8b:1c:b4:62:27:c1:
c3:0d:e4:08:45:92:83:40:41:df:8f:68:41:9f:31:4a:45:5f:
93:38:e9:05:48:79:30:d2:3d:68:41:2f:28:e0:c8:50:ec:c0:
7a:4e:e2:b4:53:8e:ab:33:00:42:41:ce:1d:fb:68:03:eb:72:
a8:aa:9c:af:a9:01:be:a0:53:ed:23:e0:50:6e:ab:f0:4a:ba:
69:00:06:7a:30:3b:18:31:33:45:74:a8:8c:10:12:e8:6b:8a:
8d:8f:01:e8:75:7b:be:99:f4:be:85:bb:80:cf:f1:6d:f1:f5:
e6:e2:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:06 2026 by rpki-client