Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: TfahiWDDoPqGF1JyKy0II5hoTTh5UOkCU+WcESo7wDQ=
Subject key identifier: FB:81:3F:05:00:CD:14:6F:56:2C:91:3E:E7:73:47:F3:B9:62:47:5F
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 01A0C28E3B0D1E0B95582A6E0179F709FF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0FDA
Signing time: Mon 21 Sep 2026 06:01:36 +0000
Manifest this update: Mon 21 Sep 2026 06:01:36 +0000
Manifest next update: Tue 22 Sep 2026 06:01:36 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: yK1DPwxhfmcM15FcMoV6iYoZdV2A/eb6GKI/+ulax5Q=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:3b:0d:1e:0b:95:58:2a:6e:01:79:f7:09:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Sep 21 06:01:36 2026 GMT
Not After : Sep 22 06:01:36 2026 GMT
Subject: CN=fb813f0500cd146f562c913ee77347f3b962475f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:d6:ad:b0:81:d8:ef:67:6e:89:73:76:15:
90:b0:75:ec:7f:fe:76:a7:23:18:12:3a:bc:2e:80:
9a:18:6c:10:b3:3e:f6:ba:8f:c3:d0:e9:88:55:2e:
a2:99:27:70:0c:09:52:4c:12:88:15:26:aa:3b:20:
ad:15:62:9c:e6:c7:ea:78:84:66:33:fd:93:3e:e2:
f2:f6:46:c2:84:95:5f:bb:22:3b:4c:24:7d:ec:09:
61:75:e2:6e:7a:6a:e6:92:57:d6:23:33:a7:4c:42:
dd:44:ea:d7:d9:87:5c:99:5c:ad:80:dd:88:0d:9f:
e0:73:2a:d2:a8:82:cd:7f:1c:a1:8d:ee:d0:9f:43:
ec:41:43:76:23:2f:a4:0e:82:6a:1e:53:d8:5b:16:
7a:20:fd:65:b5:c4:91:01:37:aa:fe:6b:d6:a3:1b:
d5:3f:44:f7:b2:e1:a6:d7:bb:28:d4:dc:7f:5b:1c:
30:52:f5:9d:e4:e5:3b:e0:9b:60:dd:3a:1f:43:84:
88:ca:dc:8e:d9:4c:2e:4a:7c:0e:55:73:ca:90:1f:
dd:9e:1d:32:24:4c:dd:66:9a:8b:78:34:a4:d4:fe:
4c:70:81:aa:df:eb:7a:16:38:9f:ac:40:6a:a1:fb:
87:17:f7:8b:98:b6:4c:2f:00:f8:04:1a:9e:9a:b8:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:3F:05:00:CD:14:6F:56:2C:91:3E:E7:73:47:F3:B9:62:47:5F
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:78:84:34:dc:48:7b:59:aa:5c:1d:86:47:98:72:b5:08:0f:
d7:27:ad:10:17:60:84:90:ee:19:f9:23:e5:34:8e:bd:3c:62:
56:3d:2c:87:2c:e9:38:58:c0:0a:6d:4b:d7:09:71:74:09:52:
3b:9a:3a:31:95:48:97:12:81:4f:24:00:88:df:c6:d7:15:f8:
3b:11:1b:c3:2d:c6:17:83:4e:0e:ab:80:15:ca:8f:ef:cb:d0:
9d:ad:bc:9e:ab:1a:43:af:53:2c:41:bd:82:32:74:8f:ba:31:
b0:99:4a:5a:07:7c:b3:d8:93:2c:c4:d4:a4:19:30:5f:ee:61:
29:29:06:ea:8b:51:94:1b:b7:e8:0e:6a:7a:cc:32:02:01:04:
22:5f:e6:3f:24:a3:51:00:82:13:93:e6:1d:3b:39:72:0a:21:
40:cb:5d:38:4c:6e:10:79:52:08:fd:c7:5d:f5:31:af:f2:d6:
aa:03:ab:d2:0b:14:2d:20:d8:cb:47:c4:7e:cd:65:23:70:a3:
77:42:db:50:70:5e:5c:f9:5e:05:16:2e:3b:72:5f:eb:52:3a:
60:e3:1a:28:a8:ec:5b:1c:b4:95:a7:a0:e4:71:d7:e6:a9:72:
e7:52:95:86:8b:00:dc:11:a4:74:74:2b:a0:91:e1:22:98:58:
ef:45:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:31:12 2026 by rpki-client