Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: CjhMWNZS7xBykX7dr8fbSphmoUtxWqbYAlP1GeU86OY=
Subject key identifier: FE:0E:E4:C0:36:3E:E5:2A:45:AD:99:C4:47:F9:FA:27:DE:51:E7:AC
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019CAAFD0B035E4F924563EF6043B2C44D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: 8IikGxJ/OnZr0ggdJkrZofC3wu3tkcb2jEZQ4X3MQbk=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0b:03:5e:4f:92:45:63:ef:60:43:b2:c4:4d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=fe0ee4c0363ee52a45ad99c447f9fa27de51e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:7a:4e:b3:c2:ae:fd:36:97:7e:65:3d:ec:
ef:84:d8:1e:7c:d4:5b:d8:cf:2d:7f:8a:99:51:98:
57:dd:35:93:8a:9b:e2:67:0a:ff:66:4e:08:e3:04:
e0:08:c5:a0:35:a8:7d:51:de:2f:d6:39:9d:a9:7b:
cb:49:b1:4e:29:f6:15:0c:6a:56:88:d3:f8:d6:d2:
d2:1c:55:58:47:e8:80:6a:7a:06:bd:35:00:7c:ad:
e2:b1:ba:46:d3:83:ee:29:00:0a:97:19:4d:d4:33:
18:38:2f:bd:e0:85:9f:9a:f0:e5:c2:c0:2c:75:8c:
cf:c0:56:fa:e4:52:7f:45:0e:32:56:1f:23:53:12:
6f:23:4e:96:16:02:36:b3:bb:88:81:0e:a4:16:4c:
c3:13:62:1c:4e:58:a2:bc:50:85:44:59:c5:4f:bc:
44:24:3e:29:c0:6d:f2:c1:75:e9:41:23:8f:da:be:
a4:0d:bb:85:43:b2:05:f7:9c:5c:40:3e:2b:bd:3d:
c2:d5:27:2e:cb:bd:e5:ab:8e:f3:ac:52:17:53:14:
f4:9e:27:ac:ae:24:c3:30:dc:21:31:b7:f3:11:86:
af:0b:68:06:fb:31:8d:ee:95:fa:7a:93:ba:82:47:
7d:25:fe:b9:62:9b:0e:b2:36:91:6c:d7:c4:41:7b:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:E4:C0:36:3E:E5:2A:45:AD:99:C4:47:F9:FA:27:DE:51:E7:AC
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bd:46:59:41:c0:e4:31:e1:ee:dd:e2:03:72:0c:f7:f1:22:
18:6f:99:43:84:79:91:c3:db:4a:73:5f:a1:c2:2c:01:82:1b:
43:5f:8d:fd:fe:47:95:0b:1f:3f:80:fb:c9:04:9d:25:f7:ca:
54:01:1f:78:33:b3:60:bd:58:98:7a:6f:7d:f8:ed:a1:06:7f:
80:13:b5:c0:e1:ec:0f:25:7c:1c:4f:83:60:05:d8:2d:45:74:
a5:c0:7f:6f:6c:8f:e5:72:9b:61:83:7b:77:9e:44:ac:2d:56:
2d:44:e0:7f:1c:df:58:7a:c4:8e:87:58:a0:e1:d2:98:25:8d:
1a:ec:9a:ae:7e:5a:19:3e:4f:2e:ec:39:1f:c1:53:a8:39:f2:
b5:62:56:a9:94:4e:5d:04:11:94:d5:62:0f:70:f0:43:21:9b:
77:5e:c6:c8:8b:2b:67:db:2b:91:b3:9e:1b:14:97:2b:c2:22:
b5:1e:19:0f:eb:6b:4b:98:0b:9b:d1:4b:e3:ad:a6:82:fc:f1:
1a:5d:4b:46:5f:6b:b0:37:d8:da:89:38:17:99:6b:14:26:e5:
ad:a1:6e:b0:88:57:32:a9:42:d2:38:46:93:81:39:82:d2:38:
45:db:95:08:95:12:cc:cd:58:4c:44:e6:f8:66:78:83:eb:80:
d4:ea:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:16 2026 by rpki-client