Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: azWX9PYPeU2lbs/ybo9oc7NlfBGQymoCAQErIjWqKik=
Subject key identifier: 18:98:34:60:05:95:D1:D6:4A:05:0B:34:5D:15:25:19:4F:08:2C:21
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 01A0DA287E48CC0182B46459C2B9E21A87B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 19C2
Signing time: Fri 25 Sep 2026 20:01:21 +0000
Manifest this update: Fri 25 Sep 2026 20:01:21 +0000
Manifest next update: Sat 26 Sep 2026 20:01:21 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: 3VUBWun40LPADQx/tsngNVPsfK3UbWZsZAb/duWmMtQ=)
2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:7e:48:cc:01:82:b4:64:59:c2:b9:e2:1a:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Sep 25 20:01:21 2026 GMT
Not After : Sep 26 20:01:21 2026 GMT
Subject: CN=189834600595d1d64a050b345d1525194f082c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:c5:53:54:18:34:6f:f2:aa:8b:19:82:b7:
c1:b0:5d:83:eb:8b:ec:72:68:9c:62:68:ed:7d:c7:
6a:80:38:78:6b:76:77:a0:62:20:7f:f5:be:92:f8:
87:30:f6:2e:f6:49:93:d1:28:1b:78:9c:10:2e:82:
24:f0:a9:67:a7:22:df:94:11:da:75:ec:14:f0:b7:
b6:d7:a6:22:1e:4a:90:09:b9:d6:4b:1d:77:ab:b0:
26:53:26:35:51:ac:fd:13:34:ae:ae:b6:8c:e1:e7:
b7:d4:b2:0e:a5:ea:28:ee:dd:eb:32:7f:e5:37:47:
ab:12:2b:10:ff:40:91:07:a6:0c:1a:d7:5e:0f:3f:
d8:f4:fc:15:80:9d:bc:d4:8f:1f:2c:0f:bd:9d:0e:
58:b8:2a:96:62:a3:88:ac:21:f6:42:c8:fb:8d:16:
e6:ef:39:a4:44:7e:cb:a9:a5:a2:da:ff:f6:48:04:
b5:00:10:f5:ec:2d:ec:8a:c5:d7:1b:07:8d:f9:ba:
5f:ae:2f:ad:45:d0:78:be:6b:5f:b3:17:f0:e3:67:
85:41:a1:61:ae:42:af:9d:6a:b3:dc:c7:ff:05:f3:
7a:3b:ef:cb:89:b1:39:00:fd:99:92:34:6f:63:73:
37:f7:33:3e:de:80:94:af:98:02:89:a8:1c:24:4a:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:34:60:05:95:D1:D6:4A:05:0B:34:5D:15:25:19:4F:08:2C:21
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c8:bf:d7:b0:9c:19:28:63:93:88:82:49:71:a8:11:a6:5d:
ff:da:d7:d3:9e:7b:d3:97:d8:dc:d4:ae:99:08:17:83:18:de:
ff:b4:75:26:fe:02:66:63:5b:38:66:ff:69:4e:30:ad:b0:8c:
52:53:d6:a1:fb:f6:e4:e0:74:56:16:23:b7:36:57:e5:97:e0:
b2:bb:4d:5d:bf:f8:db:34:32:b6:32:de:e7:67:84:da:3a:ad:
aa:ab:a1:87:97:3e:3f:c5:88:07:d8:5e:48:ac:47:ba:c3:78:
9d:91:2d:6e:b9:86:94:68:7b:42:7a:1b:f4:66:ac:d2:a1:1d:
6b:3b:af:cb:ac:55:b0:c4:08:c5:ff:61:92:35:9b:03:8a:51:
b1:a0:1f:a1:c8:a6:9a:27:f4:14:c4:91:4a:28:97:a0:68:71:
09:d0:b1:85:dd:8f:a5:f0:0c:03:3e:f5:c8:0c:1f:7e:ad:00:
9c:42:9f:53:bd:d9:5e:b4:02:dd:74:03:33:e2:2b:ad:28:4c:
bd:cc:1e:d6:24:3a:6b:07:36:15:6a:f8:f5:0c:5c:67:cf:f3:
56:c4:ff:13:04:0f:17:29:4e:51:e9:d0:26:23:8a:f6:92:a6:
ac:60:b3:4c:52:71:bd:98:ed:75:18:22:37:8d:7f:ea:73:f8:
3a:94:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:26:42 2026 by rpki-client