Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: /aSmtWfbUmW4KDSa6lwFUek6twTFwZHUfgBetKkhaMI=
Subject key identifier: 71:96:C9:EC:86:29:42:9D:EF:4B:E1:7C:EA:6B:89:B0:72:14:4E:79
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019FA89929B2590C9F1DB3A42685E35F700A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0F48
Signing time: Tue 28 Jul 2026 12:00:37 +0000
Manifest this update: Tue 28 Jul 2026 12:00:37 +0000
Manifest next update: Wed 29 Jul 2026 12:00:37 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: qI2TwltyQ3fOqSLaL7kvWLxtU84z22sTtjs6EkY9yNI=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:29:b2:59:0c:9f:1d:b3:a4:26:85:e3:5f:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jul 28 12:00:37 2026 GMT
Not After : Jul 29 12:00:37 2026 GMT
Subject: CN=7196c9ec8629429def4be17cea6b89b072144e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:4c:24:23:a2:94:77:69:44:3e:0d:78:71:
d8:26:ac:d3:85:40:bd:c4:48:0c:de:f1:42:58:e4:
e5:11:bf:48:6c:92:92:3d:c3:10:3f:1e:57:b6:01:
cc:8f:51:e9:8f:a2:31:c8:56:f2:ad:1d:43:f3:c3:
02:de:2e:00:5a:f3:03:f0:0a:e0:1c:72:35:ed:d3:
c7:e5:70:d3:38:7e:7e:dc:6e:7d:35:4d:bb:bc:41:
db:1f:7f:92:4b:9e:32:b3:39:e5:67:ea:fe:14:03:
be:dd:7b:40:fd:9b:0e:28:f7:29:fc:1e:9c:8e:f1:
62:5d:26:62:9d:42:ac:4d:96:84:58:f4:9c:6d:1c:
37:63:5f:fb:c8:c2:61:bf:07:e6:9d:29:01:af:36:
2c:6b:be:3e:01:65:f8:f1:1d:c4:dd:ec:c0:aa:46:
6b:a6:a3:9b:8a:d8:bc:47:ae:68:1f:4b:b1:4f:44:
00:2e:a9:07:d9:78:cd:1c:17:7a:bb:97:1e:6c:ba:
ff:ef:54:52:29:69:bb:4f:7b:d1:0b:5c:0d:a0:73:
15:ad:42:89:f1:27:14:d1:35:84:f7:82:99:19:71:
4b:4b:12:43:fe:71:5d:39:a2:a0:2e:ef:f6:0d:38:
b1:c8:2d:91:3f:c4:de:f2:89:ce:57:77:2d:96:f1:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:C9:EC:86:29:42:9D:EF:4B:E1:7C:EA:6B:89:B0:72:14:4E:79
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:35:ae:dd:91:f8:dc:25:12:b2:2c:63:fa:8e:c8:61:a8:db:
a5:53:1d:bb:d5:0b:c6:8a:c4:9f:7c:64:6f:c3:85:b5:c7:15:
89:ad:f4:98:18:31:87:09:cb:b0:dd:3d:bf:33:a4:29:51:3a:
93:fb:46:d1:3d:06:4f:6f:5c:93:7e:e1:ec:06:c4:88:d5:0d:
5b:b3:81:60:9f:16:4a:90:16:9d:83:3d:65:8e:8b:83:6c:07:
fe:42:a1:63:8d:cc:a4:e8:c9:dc:5d:1c:28:51:a3:9c:6c:42:
c8:e9:3d:09:61:8c:60:15:ca:86:85:3a:4e:f4:a6:b1:cb:f4:
12:32:5c:6a:35:64:30:65:e4:23:1c:a2:75:6d:a2:8b:52:f5:
97:97:fe:cd:43:99:f3:41:e2:5c:e4:77:11:1f:5e:1b:1b:e7:
92:23:2d:26:09:87:eb:c6:8f:be:14:e4:86:4b:0a:03:2c:7a:
ec:15:fe:d8:e7:c0:04:84:14:97:2e:71:77:a8:d9:d7:10:4c:
cf:dc:b6:00:73:25:a2:38:35:55:6c:ac:54:fd:12:7e:98:23:
2c:17:ee:94:cd:27:b9:78:dc:da:75:ae:cb:db:e9:17:52:c0:
4d:0a:70:87:93:79:9e:15:66:c8:d1:30:54:df:bb:4b:30:6b:
24:a8:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:21 2026 by rpki-client