Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: f0eFwH/WK003NZuUt795YvZRit0hwrmjwhoG15acT7U=
Subject key identifier: F6:BD:39:01:3C:41:21:33:E1:BF:4B:6B:3D:4F:8C:3A:17:63:99:57
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019CAA589426E7750C5A8CD798A15A5DDA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 08CD
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: KfmaAhFgkPwzE5e7gDdRUMeI/A9PVxVhvtpabRBH1bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:94:26:e7:75:0c:5a:8c:d7:98:a1:5a:5d:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=f6bd39013c412133e1bf4b6b3d4f8c3a17639957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:62:d8:ea:7f:24:e5:cd:a6:88:26:7c:7e:
c5:f5:da:6f:86:18:9a:29:a3:bd:f5:8a:4a:8b:bb:
ba:83:6a:28:1d:e6:44:a1:66:34:e0:43:aa:2f:61:
67:b8:71:ee:4b:05:b0:4b:80:f7:07:8d:f0:9d:7c:
49:f5:6a:c5:77:c8:f2:5d:61:66:a5:2c:88:13:c5:
ca:63:84:0a:76:97:88:aa:24:2a:12:3a:da:39:95:
57:9e:78:c9:5a:c2:34:5e:c3:59:a4:25:fe:fa:42:
b3:f5:a1:9c:5b:aa:3f:c9:49:12:12:b3:b7:8d:6a:
0d:76:5b:ae:69:0c:f0:e8:b8:6e:39:54:20:83:0b:
0c:a6:2e:2b:74:c8:61:0b:c7:33:c7:d0:50:81:00:
a8:cc:38:21:f0:7a:b0:ea:08:37:17:3a:b8:6f:9d:
ba:a7:13:ca:4c:23:61:74:c1:6d:52:82:b8:36:62:
39:dd:5c:28:5e:6b:86:10:d2:4a:2b:56:8f:f2:60:
82:b5:34:f7:6c:7e:83:49:c9:42:74:f0:c8:65:7d:
3c:76:c0:a6:21:89:cb:e8:5d:d3:20:e2:1c:97:72:
81:2b:dd:b7:0c:9f:70:58:93:c9:9a:14:1e:e8:bd:
8e:31:20:6f:5c:af:d7:2c:4b:bd:46:fe:07:58:8a:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:39:01:3C:41:21:33:E1:BF:4B:6B:3D:4F:8C:3A:17:63:99:57
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:79:bb:47:a1:21:c7:d6:04:1b:0f:eb:28:01:76:54:aa:92:
4f:48:54:3d:d2:50:54:96:ba:e5:50:72:49:30:a0:ef:cc:44:
c5:c0:72:86:1a:cf:bb:de:5f:26:84:1e:77:95:df:db:85:46:
f5:86:38:27:6c:7d:04:fc:9b:ca:13:d0:6e:d7:7d:26:05:f7:
5f:f4:5f:b1:07:4a:44:ec:b6:e5:91:bb:d2:bf:e2:4a:68:da:
ec:bd:3a:9d:29:43:7f:2f:04:89:ea:f3:22:0e:ad:0a:7a:09:
87:70:62:42:0b:3a:eb:64:21:10:0c:f4:25:98:e7:99:65:2b:
4e:2d:de:74:d5:b0:4a:06:57:ac:7c:79:58:23:1e:d8:22:a8:
08:e1:07:cd:a5:69:f0:7e:41:cc:b8:c8:c2:1e:c1:c2:5d:db:
2a:cc:0d:8e:bb:16:52:2a:19:6d:a0:c2:2b:3b:a4:a6:e1:d6:
12:88:65:2e:ed:7c:b0:f1:63:3d:a3:d0:21:63:11:fb:6e:c9:
21:26:a9:9c:9c:c4:c4:0c:51:aa:be:37:7c:40:58:9d:ca:42:
ae:3c:d7:6d:1d:43:96:f7:86:21:e4:b3:0b:a0:f6:78:b1:e9:
79:7e:a3:8d:37:ba:48:b9:66:72:0e:7c:96:d0:39:cd:1b:4d:
0d:fa:d7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJQm53UMWozXmKFaXdoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw
NTMyYjAwHhcNMjYwMzAxMTcwMDU3WhcNMjYwMzAyMTcwMDU3WjAzMTEwLwYDVQQD
EyhmNmJkMzkwMTNjNDEyMTMzZTFiZjRiNmIzZDRmOGMzYTE3NjM5OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMBi2Op/JOXNpogmfH7F9dpvhhia
KaO99YpKi7u6g2ooHeZEoWY04EOqL2FnuHHuSwWwS4D3B43wnXxJ9WrFd8jyXWFm
pSyIE8XKY4QKdpeIqiQqEjraOZVXnnjJWsI0XsNZpCX++kKz9aGcW6o/yUkSErO3
jWoNdluuaQzw6LhuOVQggwsMpi4rdMhhC8czx9BQgQCozDgh8Hqw6gg3Fzq4b526
pxPKTCNhdMFtUoK4NmI53VwoXmuGENJKK1aP8mCCtTT3bH6DSclCdPDIZX08dsCm
IYnL6F3TIOIcl3KBK923DJ9wWJPJmhQe6L2OMSBvXK/XLEu9Rv4HWIorYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa9OQE8QSEz4b9Laz1PjDoXY5lXMB8GA1UdIwQY
MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt
ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy
LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXm7R6Eh
x9YEGw/rKAF2VKqST0hUPdJQVJa65VBySTCg78xExcByhhrPu95fJoQed5Xf24VG
9YY4J2x9BPybyhPQbtd9JgX3X/RfsQdKROy25ZG70r/iSmja7L06nSlDfy8Eierz
Ig6tCnoJh3BiQgs662QhEAz0JZjnmWUrTi3edNWwSgZXrHx5WCMe2CKoCOEHzaVp
8H5BzLjIwh7Bwl3bKswNjrsWUioZbaDCKzukpuHWEohlLu18sPFjPaPQIWMR+27J
ISapnJzExAxRqr43fEBYncpCrjzXbR1DlveGIeSzC6D2eLHpeX6jjTe6SLlmcg58
ltA5zRtNDfrXfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:46 2026 by rpki-client