Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: iN0Ow33BEnU0Mniigg3Wqxsbs9/SiojwvLdyeSTCpEs=
Subject key identifier: 72:B9:00:1B:78:08:5E:70:AA:D8:D2:54:8A:2C:5B:56:47:97:42:D4
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019EBFFF76BFE402E4092BAFD620818F8E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1355
Signing time: Sat 13 Jun 2026 08:00:50 +0000
Manifest this update: Sat 13 Jun 2026 08:00:50 +0000
Manifest next update: Sun 14 Jun 2026 08:00:50 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: OHYj9DO2cJDsXIMPnhCmAHKKYJZw6ZOph0PvHuE0D28=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:76:bf:e4:02:e4:09:2b:af:d6:20:81:8f:8e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jun 13 08:00:50 2026 GMT
Not After : Jun 14 08:00:50 2026 GMT
Subject: CN=72b9001b78085e70aad8d2548a2c5b56479742d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:de:2e:f9:68:3f:ef:fd:bd:3c:45:02:25:
5d:06:22:6b:e7:74:c0:87:d8:6e:05:e0:bf:c1:5e:
55:e3:b3:9b:c7:16:d6:a1:97:1c:8a:86:8b:90:57:
e6:37:ba:ee:e4:07:3c:8e:fa:1b:77:2d:b2:18:6a:
ec:33:26:f3:dc:30:24:72:92:7f:08:1b:69:9a:d0:
db:06:03:10:27:f4:e7:23:a7:5d:c6:a7:b6:8c:60:
2d:5d:71:bf:de:d0:d3:62:a4:ac:82:c5:6f:36:e7:
60:73:b0:f5:4e:20:53:88:60:23:4e:4a:d1:99:f2:
b7:92:eb:b2:c9:12:60:d7:bd:9a:a1:c1:d6:3f:e9:
91:d5:ac:e4:e8:d8:a2:94:77:1f:95:18:78:9e:5e:
61:b6:97:af:a4:f4:37:d8:c5:79:5f:fb:14:59:56:
d0:a7:3c:40:82:31:4e:f5:ec:d9:dd:d0:7a:4c:fb:
35:d0:5e:d8:70:f2:81:4c:67:73:3c:30:b1:10:f8:
10:e1:6f:e4:59:f4:06:f1:55:b4:6d:d6:ec:6f:38:
d7:60:57:09:28:fb:56:00:a1:53:38:9b:85:15:7f:
42:8e:fa:b6:dc:fa:38:41:2c:51:42:90:e6:ed:b2:
47:3b:ca:d0:da:13:c1:07:49:b5:e0:1d:ce:fc:bb:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:00:1B:78:08:5E:70:AA:D8:D2:54:8A:2C:5B:56:47:97:42:D4
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:b1:e6:8e:39:28:06:7e:fb:01:d7:62:22:2b:d5:95:5c:
f4:a6:fc:a8:f3:16:40:be:f8:d0:50:ed:c9:4f:96:cc:27:bd:
98:6d:33:73:f2:fd:2c:12:91:09:43:01:ce:8a:7e:8c:44:77:
1f:93:04:8a:41:fb:71:46:08:98:2f:65:e6:59:7d:a9:9c:4b:
32:c7:08:96:a2:93:4a:84:ce:9f:f7:0d:06:d4:2e:86:fa:88:
e2:d6:ac:cd:f0:b2:de:96:d9:ce:01:b1:03:54:ab:ab:7e:0e:
79:4d:61:4a:ca:27:90:d8:13:a0:cd:4d:52:81:77:43:74:bd:
c9:97:a7:10:1e:c1:7e:cf:cb:5e:2a:77:1b:df:ca:20:c6:5a:
41:67:8c:a6:c8:4e:6c:7f:ed:38:50:49:9b:9d:56:1f:69:70:
70:66:43:9b:6b:4c:c6:68:2b:5b:7f:eb:49:b0:62:b6:af:01:
66:da:6e:53:3f:a7:d0:80:d5:91:88:fd:5e:78:92:9b:d0:43:
93:0a:dc:ea:fe:1b:67:3f:07:97:d4:0b:2a:83:dd:82:da:01:
2c:9a:95:63:f4:3f:40:a9:f9:f4:e1:84:fa:c1:80:03:2f:4d:
63:c3:42:4d:9c:ea:16:c9:22:02:fd:9e:ab:e5:db:93:b8:d1:
43:ae:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:11 2026 by rpki-client