Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: j+/bFGli7OAzrlFbP7DW1MDWK+f9+ip+PXwEbVQrQ6w=
Subject key identifier: BA:80:F7:D3:1F:F6:0F:40:CD:BD:A5:C8:C3:C7:26:25:F5:3B:74:99
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019CACEB73B749BAD7538AA8D694A3E3090B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0DBC
Signing time: Mon 02 Mar 2026 05:00:37 +0000
Manifest this update: Mon 02 Mar 2026 05:00:37 +0000
Manifest next update: Tue 03 Mar 2026 05:00:37 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: WuSjzX5hlYp/sE8pf6gpt+MwIJ9Uf8A5tXOcoW0u6kI=)
2: b4ywKBqNPFFV1vTj5hKhs2FJNNo.roa (hash: Xl3Oky1CBj0F9xsklIOKHfMBafTIaLBWaY5PspMnufw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:73:b7:49:ba:d7:53:8a:a8:d6:94:a3:e3:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Mar 2 05:00:37 2026 GMT
Not After : Mar 3 05:00:37 2026 GMT
Subject: CN=ba80f7d31ff60f40cdbda5c8c3c72625f53b7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:45:f2:36:4a:9b:36:69:dc:77:2c:7c:ab:
5c:5c:f0:eb:5b:01:f2:86:20:9b:0d:7d:56:f6:33:
4d:d1:7d:c8:da:77:3c:e2:64:da:9b:94:7b:25:84:
d1:4a:e0:77:b5:8a:72:23:dc:c4:41:7d:39:d2:c7:
12:bf:47:0a:29:69:6c:c7:44:2a:c7:19:d6:25:b1:
2b:02:85:01:82:32:be:a7:f8:31:90:e8:5b:46:6d:
62:0f:67:cf:29:69:43:2d:59:9e:9b:d8:c3:fb:51:
1e:aa:dc:a3:f2:bd:1e:54:73:9c:f4:68:e4:4b:68:
66:df:fe:c1:e9:96:6b:d1:de:99:4e:f6:32:5a:01:
05:ea:dd:a0:ea:e4:7b:60:ca:a0:4f:f5:2d:ec:89:
47:96:68:c8:f1:df:f8:78:91:4b:ca:bf:92:13:f0:
9a:3d:ae:ab:c3:04:d6:8f:8d:35:00:1c:9d:51:ba:
ed:bd:66:1c:9f:cd:f0:da:85:91:7d:ec:91:92:1f:
09:43:39:ce:d8:9e:cb:5f:61:d3:81:66:bb:94:5b:
04:09:8b:8f:eb:af:6b:82:5e:d8:78:9c:9f:ae:37:
43:c1:e7:92:c9:5a:14:67:19:f1:d5:95:2c:fd:8e:
43:b5:c0:cb:62:5a:f8:79:d8:ad:51:25:54:66:4a:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:F7:D3:1F:F6:0F:40:CD:BD:A5:C8:C3:C7:26:25:F5:3B:74:99
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e9:a5:ec:33:30:2d:ab:a6:ed:41:8b:74:ab:1f:06:29:58:
6e:5c:0d:8c:d7:94:4c:ba:a1:c3:bc:e3:ff:79:95:04:ee:d4:
c7:df:57:ed:d5:44:46:36:53:c3:8f:42:7c:90:18:f8:78:88:
b0:13:ee:c2:e1:57:e4:2b:a2:d8:a8:9a:40:12:ab:d2:a3:ff:
de:17:a0:67:5b:13:28:94:23:06:07:2b:e8:b5:02:2a:6e:73:
dd:3f:42:ef:9b:d0:08:5f:7a:d1:d1:48:53:b3:50:32:41:4b:
af:d4:ff:5b:22:b2:26:42:8a:d6:dd:7c:54:3b:78:db:23:8e:
67:8a:ce:84:fa:f9:96:cf:0c:21:57:83:0a:0a:30:df:73:6a:
a8:51:54:08:a2:f3:10:16:3d:e8:33:f1:4b:a5:c0:95:19:16:
70:1c:91:54:20:31:6c:70:c8:fa:e7:64:55:64:b5:8b:a2:47:
35:77:17:dd:d2:4b:f7:89:68:4a:c6:e6:e8:c3:40:bf:09:1c:
6e:52:7f:b5:92:24:3e:e9:f2:dc:d5:f3:88:46:e6:97:e6:fb:
ad:fe:fb:40:a2:90:23:bc:a9:06:11:fe:68:9c:88:32:38:ae:
d2:e9:cc:ea:5a:76:67:c3:49:c5:e1:3c:aa:1b:15:6a:a8:7c:
61:40:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:31 2026 by rpki-client