Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: 41bXzriiwNwf+6gsUqK1RuOIwufBKVnjovBIaVdgk2M=
Subject key identifier: CC:8F:8F:32:1B:A2:FC:DA:8A:E0:20:19:60:2F:0C:89:47:C4:50:02
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019D97E267167E2BFD9F7ACB2E864317E9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 0948
Signing time: Thu 16 Apr 2026 20:01:30 +0000
Manifest this update: Thu 16 Apr 2026 20:01:30 +0000
Manifest next update: Fri 17 Apr 2026 20:01:30 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: cVVavXQ+u9Tc8lDr9VLxvsTPUXpZYBr/F1rk3qCaMuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:67:16:7e:2b:fd:9f:7a:cb:2e:86:43:17:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Apr 16 20:01:30 2026 GMT
Not After : Apr 17 20:01:30 2026 GMT
Subject: CN=cc8f8f321ba2fcda8ae02019602f0c8947c45002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:09:81:78:74:1b:ba:99:59:6c:95:3e:07:
e7:9e:be:c0:3e:b7:3a:81:43:59:b6:a7:1f:db:3d:
66:ce:15:6a:4d:e6:20:70:d3:c4:43:84:d2:04:62:
32:04:b2:9d:17:df:38:53:ac:7a:09:2c:db:4a:3b:
0b:84:13:7c:93:01:22:27:91:cf:ac:ad:da:e7:40:
16:40:c1:5b:3c:54:53:a0:b3:88:cb:35:1a:3c:bc:
d2:05:89:6e:05:17:fc:89:6b:28:bc:3b:86:28:f0:
75:88:a7:6c:65:1a:90:b3:52:2d:a6:22:20:c2:f0:
a7:1d:48:e3:1b:88:f4:5f:98:71:23:0b:5e:f2:2e:
e9:1b:e6:3a:04:7c:cd:91:db:23:73:de:22:dd:83:
f6:21:8d:4e:82:78:b8:43:fd:e9:5b:9b:62:64:ec:
eb:d7:ae:18:ac:2f:16:5a:ab:79:b1:7d:f2:86:03:
42:87:57:9a:a8:93:37:75:5e:eb:ea:b4:62:08:fe:
62:63:e9:6e:be:43:83:ce:de:16:65:5b:58:df:eb:
f7:74:7f:cd:b4:88:fd:c4:71:ff:f4:0e:ff:0a:6f:
ed:4d:09:a3:0a:b1:21:1c:44:70:25:b9:37:23:33:
5f:41:ca:ba:06:fe:7a:49:5c:3a:09:4d:9e:cc:8f:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8F:8F:32:1B:A2:FC:DA:8A:E0:20:19:60:2F:0C:89:47:C4:50:02
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:2c:8b:16:3b:34:7d:50:62:67:4c:68:0d:02:ce:91:1c:
80:3e:f7:6d:44:35:ca:12:f0:03:43:a5:92:ac:3a:b8:98:95:
1f:69:10:0e:44:61:22:2b:f1:57:07:92:71:b4:dd:6a:fd:ce:
15:8a:69:13:00:eb:08:cf:a6:a7:1d:d9:1d:28:f7:72:dc:3a:
90:b8:4c:e9:fa:94:86:d8:c3:31:2c:b5:6f:97:0c:0d:ea:86:
70:97:9b:f8:b6:67:34:d9:d3:bc:71:10:2c:98:fa:7e:8f:17:
7e:3f:94:a3:3f:72:09:90:46:b2:05:99:da:fa:d0:1c:74:a6:
2c:26:f0:f5:37:a9:78:7e:aa:01:dc:d7:62:18:c3:78:e9:81:
0c:c0:7b:88:72:fc:df:0b:56:1a:b6:60:cc:69:58:75:7c:71:
85:3e:24:60:fb:aa:f4:8e:5d:18:5f:24:a2:86:c6:3f:ec:5c:
b4:29:ee:0d:12:06:c2:b3:93:e5:3d:a8:b0:26:ab:b8:bb:a3:
e4:dd:18:d5:14:4d:22:24:df:42:f5:34:cc:7c:59:3e:96:c9:
48:29:df:dd:a3:be:b1:43:58:41:12:73:9e:e5:37:61:c6:27:
67:c2:b8:2e:50:96:4f:b8:f0:3d:f6:2a:cf:6a:14:6b:5a:cb:
de:cd:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:16 2026 by rpki-client