Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: WL81s1Aa6QoYuEenZ9MxMrtezTo9k7BehoHGJdjvn8U=
Subject key identifier: D8:3A:3D:5B:02:4F:43:02:6C:CA:47:56:27:D8:3B:2C:7C:89:BA:45
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019CAC475875D19F8D9A676529E8594D2109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 1798
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: daQ4CZ7vZEgL5OnnCf5Dt+YRHIgzsLibq3BjGT7bW6E=)
2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:58:75:d1:9f:8d:9a:67:65:29:e8:59:4d:21:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=d83a3d5b024f43026cca475627d83b2c7c89ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:b9:61:51:ae:a0:13:65:0d:2c:27:8a:d2:
eb:b9:bc:94:33:46:77:83:31:78:8d:45:9e:75:8f:
97:3e:d3:17:30:fe:93:25:c8:ee:f8:d4:0b:56:c1:
9f:d4:77:ff:c4:9e:e6:b3:b6:d4:70:a8:17:80:e3:
5a:dd:71:71:a1:84:ac:00:56:b9:f9:02:38:3e:77:
77:75:c3:8e:53:e0:53:0d:d1:1a:7b:51:38:b4:f1:
32:37:a9:0a:4f:2f:29:15:53:7c:a4:e8:8c:2e:1f:
16:89:7e:9b:89:e7:b1:6e:3e:67:59:63:89:4c:0d:
ba:03:2b:d3:1a:53:cc:4a:26:88:7d:43:58:34:a5:
f0:9d:fa:7a:c2:a3:81:fb:d8:43:6d:ee:4b:7f:95:
95:6b:37:6e:c7:1d:3c:d5:42:29:e6:de:75:f6:9c:
0f:a9:b8:1a:1e:e6:cd:f9:fd:b9:66:dd:b2:f2:53:
25:6b:19:e9:a7:65:ba:c3:82:b2:7b:f2:0d:d7:40:
c4:44:21:48:96:88:74:11:87:78:b2:46:78:2d:b3:
c3:88:da:55:81:dc:a6:7e:54:59:46:e3:b8:a9:a1:
00:98:e5:f3:68:ea:3d:b0:40:85:6b:94:12:d9:00:
31:db:33:62:e5:d8:5a:a7:ae:3f:ff:78:78:7a:02:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:3D:5B:02:4F:43:02:6C:CA:47:56:27:D8:3B:2C:7C:89:BA:45
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:63:5e:b7:6e:59:f3:a4:8a:e8:cb:66:7a:83:2b:d9:1d:f0:
c1:d6:66:e4:09:d7:02:e3:d0:35:18:e6:a8:43:a4:8b:2a:7f:
6b:e5:f3:98:bf:8b:48:83:7c:b2:59:3f:b3:98:22:2b:1f:a6:
b2:4b:cf:ee:90:fe:83:35:00:60:42:88:a5:1b:fc:87:15:e7:
c9:88:21:7a:aa:e2:d9:30:0d:19:1c:a4:c8:06:8b:e2:eb:7c:
20:2c:bc:2b:70:1e:1a:1d:86:3f:1a:f5:21:33:e2:59:19:4b:
f0:f3:98:9f:26:14:5b:eb:61:d8:72:7d:1c:a0:16:f2:74:ff:
8d:5d:4f:fd:eb:84:1f:d2:33:16:5f:f9:f4:66:74:29:13:35:
4b:c3:4a:23:fd:18:6b:33:0e:f4:ad:a8:ad:57:e4:dd:03:07:
72:4d:d6:91:f8:2a:be:dd:ad:14:1d:49:41:fe:cb:46:70:e6:
34:b5:1b:2c:6a:20:5c:32:42:b5:7c:d8:69:05:20:7f:4f:eb:
36:a1:e3:68:91:47:26:40:75:45:e1:ac:55:67:6e:61:56:bf:
23:84:22:91:e5:4b:62:d0:68:ed:80:5d:b1:a8:c2:8f:30:3d:
92:f8:90:27:bf:02:ff:81:6c:90:e3:1a:48:ab:bd:32:2d:69:
93:7d:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:31 2026 by rpki-client