Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: IczED2ufoaXZYD15TB7sOZHmyVFh+nWVnh3IxD7ui9g=
Subject key identifier: 17:AA:AA:25:BD:3C:BE:B0:02:76:76:95:AE:19:0F:D2:27:1F:B6:55
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 019CACB4E30CAE2DB94A9E054FFECE5E020C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 0B69
Signing time: Mon 02 Mar 2026 04:01:01 +0000
Manifest this update: Mon 02 Mar 2026 04:01:01 +0000
Manifest next update: Tue 03 Mar 2026 04:01:01 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: y8Wrmh6APZawlLpZv+8GSZbvKnO7YWygATbWz0Zxv6U=)
2: bxRzuQ7bASGe-s-sdD1--Cz8P4M.roa (hash: +XM1cLvQITLL+hcYwm0/qg57RFddihfSN5qfe1ousHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e3:0c:ae:2d:b9:4a:9e:05:4f:fe:ce:5e:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Mar 2 04:01:01 2026 GMT
Not After : Mar 3 04:01:01 2026 GMT
Subject: CN=17aaaa25bd3cbeb002767695ae190fd2271fb655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:4d:7e:e8:a5:52:db:ce:71:8f:02:bc:e5:
49:03:19:23:2f:19:9c:dc:ce:7c:93:5d:d8:ee:ef:
19:86:49:2a:9d:1e:34:52:a1:01:5a:29:2b:44:ea:
2c:fa:ad:77:35:5d:71:60:ba:7f:9d:57:1e:5d:a7:
2c:d8:a0:9f:4b:14:40:ce:20:ce:71:cc:d4:57:65:
c0:0e:a7:69:32:c1:1b:06:bd:a6:83:07:18:8e:74:
c7:3d:b3:47:3e:1e:c9:16:ad:c7:9f:b3:60:e7:ba:
fb:a4:1a:21:2d:5c:0f:94:e8:82:64:12:86:aa:ad:
b5:57:42:0d:5a:bd:cd:22:b0:61:23:dd:9d:b2:cb:
23:bb:28:5c:96:53:88:62:38:2f:bc:e4:82:7e:8a:
9b:d8:6e:1a:e5:e0:c7:3d:40:0a:47:85:43:5c:ba:
83:c9:cb:b0:42:85:57:7e:4a:8a:5e:c1:96:a3:af:
d8:8b:e9:79:da:a1:55:46:36:5e:fa:e5:1e:5b:3f:
b9:b7:eb:36:04:9e:01:f7:14:28:c9:21:6e:84:b2:
d1:03:fc:be:c0:cd:41:81:0b:43:57:01:f6:e6:05:
87:27:84:d1:83:e7:a5:a2:e4:4f:0b:67:c3:b9:83:
b3:f9:45:05:a0:ed:4e:cd:c1:d2:c5:7a:32:4b:9f:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:AA:25:BD:3C:BE:B0:02:76:76:95:AE:19:0F:D2:27:1F:B6:55
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:d9:e7:b4:01:63:63:ef:3e:fa:8e:b9:74:f1:8c:85:51:
c9:66:3e:da:b6:91:ff:13:e3:1a:86:68:c9:b9:6f:16:32:c7:
ff:ea:ed:58:07:c2:e0:55:ae:55:bb:db:80:2d:77:c1:df:76:
a9:b4:8c:e4:71:64:ce:30:d6:ef:ea:b1:11:dd:69:b2:46:8d:
d4:d7:12:c7:a5:75:5c:96:c0:88:0b:f0:88:7c:c0:97:33:a5:
7c:40:21:1f:a7:6c:49:f0:66:4b:0f:dc:1f:fb:de:4b:27:46:
c1:ce:e6:db:eb:83:f6:44:dd:1a:c1:40:09:bc:11:0c:6c:80:
f7:d9:43:21:2b:03:f3:db:b0:59:0e:73:df:cb:4b:02:24:0a:
b7:7b:58:70:b9:0a:f9:fc:43:68:8f:b9:a3:98:a9:f2:98:3c:
d0:1e:15:24:3d:0e:c7:12:54:ba:c5:bd:c0:d8:fa:23:27:c7:
87:0f:32:06:9c:a8:93:0e:2e:44:02:6d:19:37:3f:fa:68:36:
d4:0d:6b:13:1e:e7:0c:6c:f6:af:45:05:bf:0c:3c:c7:24:7c:
e4:33:53:c2:76:d7:4c:53:2c:e2:39:63:b6:39:c6:48:da:75:
bd:f1:c1:42:9e:d7:9f:f4:2a:97:7a:20:f4:cd:1c:ec:a1:73:
db:83:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:28 2026 by rpki-client