Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: +Ek13djVkesIsX/VbICXpGJZaGkspmWzHSVNM+aDJxA=
Subject key identifier: CB:A4:C4:F0:7E:78:23:35:99:AA:BE:7A:E5:56:11:51:56:D6:C1:48
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 01A0C10D4AEB60CA114B69F0CB66763D1E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 0AEB
Signing time: Sun 20 Sep 2026 23:01:08 +0000
Manifest this update: Sun 20 Sep 2026 23:01:08 +0000
Manifest next update: Mon 21 Sep 2026 23:01:08 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: 0OVAcIJ9CvCI4/ymcgvvhJNK63m2t6Pm7S4pqzdqZR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:4a:eb:60:ca:11:4b:69:f0:cb:66:76:3d:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Sep 20 23:01:08 2026 GMT
Not After : Sep 21 23:01:08 2026 GMT
Subject: CN=cba4c4f07e78233599aabe7ae556115156d6c148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:94:55:74:9c:f6:88:20:61:e3:a7:cb:4f:
dd:dd:b5:30:cd:99:65:ea:e5:f0:e8:48:7f:cf:90:
6b:0a:fd:3c:3a:bb:37:75:11:50:6b:d0:c8:30:ac:
5e:86:a2:01:52:12:95:fa:be:38:36:1b:22:d6:d0:
6d:f7:73:26:75:58:bb:67:5d:18:0a:7c:41:25:b7:
e0:da:19:4e:6a:d1:e5:e7:cc:cb:03:d8:34:b1:a7:
8b:23:fd:bf:c8:48:2c:c3:63:7c:80:49:8f:a3:6e:
8d:26:c0:d4:6b:55:53:5d:ae:dd:e3:50:fc:07:21:
5d:51:09:bd:20:f4:45:00:6e:26:10:96:cb:9f:6e:
af:ba:51:67:23:9a:a0:63:0c:dc:c1:47:ee:e2:d6:
5d:eb:f3:d0:7f:ef:01:94:8c:bd:6f:5b:2d:b5:a3:
91:5d:03:72:c2:2e:15:fe:f6:d8:ee:fa:29:2f:0d:
ae:ed:2a:f6:11:1b:42:61:68:ab:7b:38:7f:a5:71:
8c:57:cd:8e:a4:bc:b4:af:ff:14:70:bd:05:60:71:
57:96:67:35:d8:ac:04:c9:f5:40:4c:5b:d9:67:55:
4f:3a:86:10:32:4e:1f:ca:bb:26:41:40:9e:c5:d5:
59:d0:d1:89:3e:7c:ea:1f:32:fb:a0:8b:01:b3:99:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:C4:F0:7E:78:23:35:99:AA:BE:7A:E5:56:11:51:56:D6:C1:48
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:59:46:3f:ea:f6:65:d9:d5:93:9b:77:4f:df:90:ef:3d:
c5:35:80:25:fa:ad:3a:0d:fc:90:c3:06:fe:8b:e2:8c:c8:70:
98:63:b8:4b:11:77:8d:b8:48:87:d7:c7:9e:2c:0d:54:a6:8d:
ea:88:fc:c0:fa:4b:f5:34:9b:5b:b8:a0:fb:8f:e8:59:40:f9:
a0:ff:e6:71:8f:2e:34:9b:b6:a6:e9:bb:1b:92:2a:6c:9d:b0:
c8:eb:02:c2:49:c4:45:cc:ec:36:1b:56:b9:fb:1a:65:a6:4e:
3e:16:8b:39:f1:e7:4b:fb:4a:27:3d:13:c6:a5:ef:0c:9a:82:
61:79:a3:01:ea:6b:0e:2b:77:df:45:63:6f:27:49:2d:67:48:
94:77:ad:6a:d8:ab:5b:c6:44:6e:4f:76:66:b0:fd:2b:00:9f:
9c:e1:c0:fe:4b:e8:c9:33:bc:78:b8:38:76:35:d6:0a:1d:ab:
9b:37:89:7d:fc:20:92:ac:5e:ae:e8:28:32:ee:e4:f4:43:b5:
98:46:b1:5f:a7:be:45:0d:5b:90:16:85:b0:dd:ab:99:e4:2a:
b9:32:de:7d:ee:75:a1:75:7c:53:95:7b:a3:d4:9f:48:3a:20:
1b:01:3c:c9:31:7e:e9:3d:51:a3:ce:34:94:cd:30:fb:d3:91:
20:a9:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:54:27 2026 by rpki-client