Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: qmPq14PrBfpRbeeVuiagrrOxpOCwT3B2mnaf4Gh2sBw=
Subject key identifier: 15:9C:B6:2C:5B:32:F2:94:B4:38:6A:3F:25:F9:DE:AC:05:A4:81:BD
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 019D9C2C6BA854186A667A0E89CA1DD81C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 0BE5
Signing time: Fri 17 Apr 2026 16:00:49 +0000
Manifest this update: Fri 17 Apr 2026 16:00:49 +0000
Manifest next update: Sat 18 Apr 2026 16:00:49 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: H1VVjpjpRpUILFPVIefduEjqbLZWQyEKAMUzWuPrZCU=)
2: bxRzuQ7bASGe-s-sdD1--Cz8P4M.roa (hash: +XM1cLvQITLL+hcYwm0/qg57RFddihfSN5qfe1ousHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:6b:a8:54:18:6a:66:7a:0e:89:ca:1d:d8:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Apr 17 16:00:49 2026 GMT
Not After : Apr 18 16:00:49 2026 GMT
Subject: CN=159cb62c5b32f294b4386a3f25f9deac05a481bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:28:94:b3:19:1d:74:b5:dc:6a:94:a5:c3:
99:38:26:2a:fb:87:74:51:1f:cf:4f:da:96:b2:15:
68:72:0c:d0:b9:8b:8c:42:95:28:69:70:45:0e:3d:
11:60:af:cc:5b:19:13:2b:c6:bf:68:4d:52:45:73:
41:3b:88:c2:61:0b:ba:d0:0c:e3:a2:a7:e7:19:a7:
9d:d7:ff:83:33:f4:fa:cf:3f:29:47:9a:f7:1c:c1:
9d:5c:6e:1e:0d:09:64:cd:51:8f:53:0b:21:ea:36:
14:50:83:d0:1d:89:c4:93:fe:6b:2c:96:89:e8:87:
46:9c:ce:19:58:74:ca:75:4e:58:c5:11:eb:1b:33:
94:05:f3:ad:1c:b4:ec:c2:f0:7c:8a:d3:ba:68:2c:
c6:af:0b:22:a9:4e:11:24:08:99:88:67:6b:93:b7:
39:2f:a5:bd:c4:56:ad:89:a9:db:1f:bf:44:f8:8c:
b5:e1:47:f3:55:24:63:ae:9a:a0:9b:cb:9c:be:01:
9a:ef:bc:76:8f:b7:16:08:c9:fa:44:b6:ca:fe:88:
fc:11:97:d2:4e:64:73:a4:77:9d:c9:d1:7a:e2:57:
7f:82:70:38:df:b4:de:28:6f:59:df:83:17:e9:e9:
d6:96:17:df:4b:04:71:cb:3b:f7:9a:d6:c0:40:3e:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:B6:2C:5B:32:F2:94:B4:38:6A:3F:25:F9:DE:AC:05:A4:81:BD
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2e:f2:e4:0c:fb:34:b3:3d:16:bb:34:9a:d3:46:08:e5:24:
c1:ad:12:78:30:25:53:b1:c6:77:d6:ee:20:23:9c:fc:50:85:
8c:83:89:8f:32:1d:0e:69:fa:64:ee:15:53:46:63:7e:58:e9:
d0:82:3b:fe:c9:5b:7b:4f:0b:62:bb:b3:7f:26:f4:dc:f6:48:
46:07:c0:f7:ee:d2:26:5f:c3:84:01:90:47:08:2f:a1:b8:49:
06:4d:8c:bf:91:4d:d9:e3:5e:b5:fa:91:fd:98:6a:17:7b:27:
2e:e5:6e:42:08:0c:cc:0d:3c:8c:6b:a5:02:9c:2d:ba:51:84:
b8:2e:67:2e:d2:88:5b:d1:d5:b6:56:2a:4b:bd:eb:cc:39:89:
d8:86:60:fc:d9:e8:29:7e:3c:fa:98:c3:df:9c:f1:fb:93:c2:
c3:f2:04:66:6a:f8:90:9b:7e:32:42:d8:51:af:b0:83:bb:35:
29:62:3d:7e:86:e5:93:21:de:52:35:32:1d:b4:54:53:82:31:
a1:e1:09:a2:b9:9e:93:00:23:80:dd:ca:3b:cb:39:fe:9b:4f:
9d:db:96:4d:18:1e:27:8a:b3:79:3a:e7:f5:ab:09:b3:76:5c:
fd:ae:8e:05:ba:20:20:b0:be:4a:61:61:4a:e8:ff:5b:95:33:
80:21:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:18 2026 by rpki-client