Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: O9iKIKjP4KeIebT90DgQydoDqhH5Y+3nvpoBqQSSr9U=
Subject key identifier: C2:19:F2:AA:8B:03:B7:5C:2D:F2:AB:AC:78:1C:8C:46:5A:63:2D:E7
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019DA30AEC8AA85C6A71CC4A31B68F1DF740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0E3C
Signing time: Sun 19 Apr 2026 00:01:35 +0000
Manifest this update: Sun 19 Apr 2026 00:01:35 +0000
Manifest next update: Mon 20 Apr 2026 00:01:35 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: jg2xJZYj0IylioQ5Tl+9c8o5HeyOAt9zkAFiUBE0MWw=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:ec:8a:a8:5c:6a:71:cc:4a:31:b6:8f:1d:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Apr 19 00:01:35 2026 GMT
Not After : Apr 20 00:01:35 2026 GMT
Subject: CN=c219f2aa8b03b75c2df2abac781c8c465a632de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:f5:e0:fc:53:4b:4d:b4:d3:44:3d:29:2e:
97:b1:61:1c:54:a5:a5:d9:d9:60:7a:26:0e:de:41:
80:df:94:cd:58:a9:c7:fe:c9:4f:df:a1:20:89:f0:
ae:12:da:f8:73:43:ee:4b:41:b4:90:c9:d3:c2:6f:
a9:73:e7:82:46:a0:c0:18:28:58:e3:2f:d6:ba:14:
70:d6:22:7c:52:fb:30:b1:46:67:d7:e2:5f:00:34:
c0:2b:88:30:42:bd:ac:f5:aa:92:62:ad:08:aa:65:
bd:48:d9:ba:19:2a:01:be:50:f2:76:a6:47:ed:7c:
9b:9e:d4:7a:33:6f:1f:cd:ea:73:f8:3b:7c:77:da:
93:5b:09:b9:73:13:be:5a:68:23:8b:56:34:f3:9d:
dc:cc:7e:de:06:9c:36:01:02:c5:76:e6:de:84:03:
f2:c9:68:3c:9c:64:c2:39:2a:a6:ca:d1:80:56:25:
24:ed:9d:29:4a:52:51:3e:fc:fb:d9:08:f6:c7:55:
7b:c6:6b:90:dc:07:fc:4f:42:75:31:60:c8:1f:9a:
20:80:37:29:9e:52:c5:fd:5b:14:42:d8:9e:dd:3e:
69:5e:de:ea:75:56:09:b8:d6:32:e9:6f:8d:62:c8:
b0:6e:90:90:17:36:c7:42:98:92:b1:97:70:ba:ca:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:F2:AA:8B:03:B7:5C:2D:F2:AB:AC:78:1C:8C:46:5A:63:2D:E7
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:d9:38:21:48:9c:a5:0a:1d:f9:9b:91:29:d3:9d:65:6a:
ee:e6:b5:47:d0:20:6b:21:e2:1e:56:ef:81:41:4a:69:6a:00:
fd:7c:d9:ac:aa:11:2b:43:91:6a:1d:73:33:37:92:97:f2:b6:
e9:e6:70:54:c9:e6:80:af:ce:e1:15:42:56:36:cb:87:67:f1:
81:3e:22:16:fb:f8:16:61:36:3a:1a:91:49:2b:49:29:b6:32:
e3:28:93:8f:24:51:da:4a:84:d5:12:61:35:d4:75:f9:13:11:
48:61:b4:e1:0f:88:23:87:29:09:67:9b:2d:74:9a:da:46:b0:
9a:10:17:47:96:17:ba:89:2a:97:8d:e8:bc:4b:3e:ce:13:2f:
5a:f1:4a:4a:d5:b7:16:d5:f4:7f:87:5f:a4:b1:49:0d:09:05:
e6:db:45:a5:e2:72:88:5e:f2:43:c8:7d:eb:0f:ec:1e:3a:6d:
cd:8e:8b:4f:8e:b6:22:14:b4:e9:51:71:e6:f7:ab:db:15:1f:
c8:1e:85:ca:12:8f:4e:a8:3b:07:3a:be:24:1c:3b:94:e4:bc:
80:ff:44:c9:30:65:a8:f3:e9:35:f9:9a:d7:33:2b:5b:f4:ec:
a1:2a:8e:9b:ca:d4:3a:b2:c6:9d:18:93:8c:7f:f9:10:92:55:
e0:b6:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:09:10 2026 by rpki-client