Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: 7f2EZhbSCtpDvsRlP4RhiBfjqO9lSf6CO2h+REGs1uA=
Subject key identifier: 8C:E0:3B:BF:AC:ED:D3:DB:B6:BF:81:97:D2:9F:3F:A1:71:BE:D2:8C
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 019FA907B966EFDB17BBFE46D35540C864CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0FC0
Signing time: Tue 28 Jul 2026 14:01:23 +0000
Manifest this update: Tue 28 Jul 2026 14:01:23 +0000
Manifest next update: Wed 29 Jul 2026 14:01:23 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: ngzGLVYaWBY+97CgWP7jtWNXJYzjg1gkIyCJog98ER0=)
2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:b9:66:ef:db:17:bb:fe:46:d3:55:40:c8:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Jul 28 14:01:23 2026 GMT
Not After : Jul 29 14:01:23 2026 GMT
Subject: CN=8ce03bbfacedd3dbb6bf8197d29f3fa171bed28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:73:bc:17:11:ff:12:4b:f6:0b:69:45:8c:
5d:92:cd:1f:f4:e8:b2:51:5d:f1:a9:af:ee:c2:81:
f5:2b:46:3d:ef:6f:87:a2:46:ab:b4:9c:47:49:45:
7b:7f:b1:ac:12:90:35:62:46:24:5e:af:b1:37:cb:
1d:47:fa:b1:26:05:dd:cf:08:a6:87:8e:30:a5:7d:
32:6e:b2:d0:55:2e:ea:e8:78:33:9c:cb:61:b6:e3:
3e:6a:22:7b:0f:00:86:1a:ba:e1:d8:29:21:df:71:
0e:31:a7:8f:8c:2b:df:77:a9:15:56:ea:2f:1b:7c:
e7:0b:b7:47:03:36:93:46:e5:4e:f0:9d:12:27:00:
e8:54:ac:32:46:b0:b4:e2:3d:b6:57:99:73:37:1b:
a0:95:22:d0:23:a5:3a:45:74:43:7c:d9:4a:1f:3e:
09:b2:d7:10:48:b2:12:30:6c:b6:3a:73:94:4d:54:
bb:a1:60:31:83:d7:23:f3:1d:5a:2b:0a:ef:ae:5c:
2c:33:2c:44:ef:6f:e6:07:7b:81:29:b3:55:33:21:
b1:34:a7:aa:bf:c9:e7:39:9a:ac:16:3f:34:63:c8:
ad:bc:91:19:21:ec:8a:6a:79:71:ec:27:54:8c:96:
1e:91:e2:c3:7f:0a:9e:8f:23:9f:0e:5c:42:1b:cb:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:3B:BF:AC:ED:D3:DB:B6:BF:81:97:D2:9F:3F:A1:71:BE:D2:8C
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:8f:91:01:79:e9:51:0d:43:82:e5:14:d5:a1:e4:43:7b:
1d:64:ca:59:54:8a:1f:b7:c8:22:19:14:03:ed:e6:d0:b1:47:
ec:1f:55:ca:2b:8a:22:88:60:a9:48:fa:55:4d:9f:30:26:47:
6c:a2:62:d5:cc:2a:09:4d:d5:b5:d8:d0:69:00:76:05:8f:ae:
9d:9a:09:f2:c1:a7:9b:d4:86:38:8b:e5:01:d0:61:9c:46:1f:
8b:f8:8c:55:e5:1c:7b:bb:05:13:2c:ec:31:38:09:83:7b:8f:
af:41:84:3c:19:83:b1:f4:63:ef:c1:ca:40:ff:44:2c:b0:d6:
8a:a7:cf:a2:11:4f:6d:a1:b0:89:a4:6f:4f:41:89:4d:14:13:
99:59:d5:f1:f7:ab:f0:04:99:67:21:25:9d:68:dc:6a:a9:8b:
1c:c2:5c:9a:e3:db:8d:6a:e7:a4:72:cd:e6:69:af:c7:01:6f:
88:30:68:50:cb:9a:5e:e4:42:fd:53:52:63:4a:8a:b6:76:7b:
87:12:e6:a9:70:4e:2e:ae:e5:bd:d0:97:34:65:1f:4f:24:02:
ed:d1:35:cb:eb:bc:ea:8e:aa:1a:30:fa:53:10:7a:50:fa:40:
f0:c6:33:c7:44:a7:29:28:b5:1d:aa:cb:e8:03:49:7b:3b:8b:
93:c6:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:19 2026 by rpki-client