Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: 1PhBgGTXFS9/oByq48wP01Xrlu6Ue/WdxoiYEyWhIvQ=
Subject key identifier: 66:F9:18:42:24:87:95:3B:14:7F:0A:B0:A7:E3:5B:C5:A6:1E:0E:A6
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019FA9AC08811BBEB661B79513FCC13D6519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 13CE
Signing time: Tue 28 Jul 2026 17:00:51 +0000
Manifest this update: Tue 28 Jul 2026 17:00:51 +0000
Manifest next update: Wed 29 Jul 2026 17:00:51 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: s+5msE+sekRDOEnOYXPDw3DgmxJok34OaCzHNlvfK9I=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:08:81:1b:be:b6:61:b7:95:13:fc:c1:3d:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jul 28 17:00:51 2026 GMT
Not After : Jul 29 17:00:51 2026 GMT
Subject: CN=66f918422487953b147f0ab0a7e35bc5a61e0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:6f:ec:ad:89:ae:7b:e1:68:c8:3f:2b:e7:
60:f7:c0:a9:e6:11:65:07:5a:93:fa:95:6f:44:11:
b2:ab:86:23:47:12:46:80:60:cc:ad:c1:ba:38:3e:
78:1f:c6:cd:81:e5:c6:8f:78:6c:a3:21:83:fb:25:
d6:c6:27:c5:a6:be:f3:e3:6e:a0:6f:48:98:e8:76:
61:90:5b:25:29:48:f6:15:00:4d:84:53:e0:92:22:
8b:69:cb:31:f8:e2:e4:2c:e5:79:a1:1b:21:ce:47:
ca:16:74:11:b5:b9:29:0d:81:39:29:b1:18:56:88:
08:83:88:fc:df:0f:93:06:c8:8c:20:ee:51:72:7e:
a4:d9:10:b6:56:a9:20:3f:a3:fd:54:64:cc:3c:89:
4a:4b:4f:fc:04:48:74:0e:28:e1:8c:46:fa:fb:af:
48:da:b7:f7:56:ea:24:e7:01:70:3b:c2:ad:97:a7:
0a:cd:08:a1:2d:1d:20:6d:55:41:5d:f5:58:ee:e4:
01:41:60:d1:a7:a4:96:2f:ff:05:36:10:df:b5:2e:
0b:ee:89:e1:59:3a:1f:c6:94:ec:51:cf:be:ec:e4:
55:3d:ae:45:c5:0d:a9:27:d6:b7:54:05:60:4f:57:
99:c1:86:03:5b:6f:2b:31:f8:32:3f:10:dc:69:d5:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:18:42:24:87:95:3B:14:7F:0A:B0:A7:E3:5B:C5:A6:1E:0E:A6
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:0e:e0:ba:b1:47:6b:05:63:1f:0f:76:f4:28:eb:27:a1:
75:ac:1d:b1:51:90:87:52:c5:12:8e:4f:25:ac:57:93:1c:82:
ef:91:d0:f0:89:ba:c5:1a:29:50:bf:68:64:be:96:cc:44:37:
ab:a1:0b:ef:84:22:9c:97:ab:6a:fd:52:00:38:28:b2:5f:8a:
5b:40:32:93:3c:1d:3c:1b:02:64:19:3a:04:5c:9e:04:7b:c0:
e8:2a:52:3f:78:02:67:89:a2:b2:c7:85:fa:d5:5b:d7:4a:e4:
5e:85:98:3f:d9:b5:ab:1c:a4:26:cb:14:06:02:40:ac:79:80:
16:ef:3f:30:fb:ae:5a:31:d9:e0:5a:2d:bc:0f:7b:03:a8:cc:
11:06:f8:5e:8d:c2:16:e0:e2:97:c8:2e:92:c6:04:b8:94:b6:
d6:d8:23:5c:9a:9a:7e:10:1f:67:54:c7:6a:2a:0c:ba:f2:e0:
7e:b3:71:2b:5b:2d:54:0a:60:ff:11:b0:10:8b:b8:90:28:9c:
48:02:f7:87:7e:2c:ba:e6:68:5d:ad:86:39:39:b5:cc:c4:63:
7b:a0:e3:7d:74:5f:e3:cb:3c:25:59:f3:ba:8f:c3:fb:4d:9d:
7b:74:07:f1:ee:45:0f:c4:6f:89:cb:b1:75:6e:9a:ba:59:3d:
d1:5d:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:03 2026 by rpki-client