Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: 6gNrOM91HIN221VWJB7P7ibAQC94SwDQexCAK+6UYy8=
Subject key identifier: F3:83:61:19:FC:3A:FA:35:9C:33:9C:8D:2C:7C:CE:1F:CD:8D:F9:EF
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 01A1DEDEA5C699AF6396BE19008437D35F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 10E5
Signing time: Sun 15 Nov 2026 11:01:35 +0000
Manifest this update: Sun 15 Nov 2026 11:01:35 +0000
Manifest next update: Mon 16 Nov 2026 11:01:35 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: aHPCh0wcvefNIJ95RHJt5EnoHVj9LyqRPsH2721lOTc=)
2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:a5:c6:99:af:63:96:be:19:00:84:37:d3:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Nov 15 11:01:35 2026 GMT
Not After : Nov 16 11:01:35 2026 GMT
Subject: CN=f3836119fc3afa359c339c8d2c7cce1fcd8df9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:a2:56:80:82:7a:bc:ce:19:a4:af:c5:4f:
77:a0:03:a4:b3:77:d5:79:57:14:a4:74:76:2a:37:
55:17:72:2c:9a:cb:90:e7:ea:7a:f7:1c:7b:f1:27:
40:67:12:b8:0a:79:e6:2b:33:b2:8c:4e:96:e5:10:
26:03:88:b4:f2:35:91:a7:db:91:6f:e0:c7:f8:f1:
20:28:37:8c:c8:6c:d2:3d:ac:75:d5:f8:ba:3a:a2:
a8:3d:1f:fc:e1:ea:90:1c:3e:fe:72:5b:74:d9:a5:
6f:a8:3e:b1:b9:90:c7:fb:b1:34:87:66:4c:8e:c8:
cb:46:17:dd:5a:e8:fc:41:17:7a:1d:ce:2a:93:77:
64:f7:fb:d9:59:17:c4:bb:a5:a2:81:34:ef:62:0c:
cb:1b:ce:0b:b5:85:2a:24:ae:f5:f2:13:20:ea:04:
e3:0f:64:06:40:1b:ae:db:37:c9:bb:4d:16:82:9d:
cf:51:84:12:7b:3a:61:2c:3c:c9:13:39:b1:80:61:
bc:a8:fb:99:91:44:de:bb:14:52:7d:ea:45:f0:42:
42:72:43:aa:df:31:e4:31:93:a2:39:78:60:ae:d1:
dd:85:e1:6d:5a:c3:40:55:2a:3b:9b:51:41:db:41:
e5:61:8c:cb:02:2b:25:27:3c:20:57:4b:3f:a7:74:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:83:61:19:FC:3A:FA:35:9C:33:9C:8D:2C:7C:CE:1F:CD:8D:F9:EF
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:81:91:41:a7:1a:b8:30:93:17:0f:be:48:90:43:1b:63:80:
76:fd:f5:23:9b:32:d3:3c:9d:89:62:7e:5f:42:9b:45:38:a6:
42:ef:f7:de:8b:df:62:1c:be:2c:8a:dd:7c:4d:86:39:00:eb:
20:49:30:68:00:09:b9:84:c3:ba:cb:97:98:d4:e7:b0:52:e4:
96:2c:6f:27:b4:9a:8e:d1:c4:e6:b7:95:d3:41:22:36:c8:ff:
6c:c4:22:83:b9:8f:11:84:2a:dd:de:d3:c8:3f:22:c7:f7:3a:
31:24:05:d8:ed:8b:87:26:09:93:92:cf:97:fc:bb:13:a7:a4:
49:32:9f:d0:7a:c7:3a:5a:2d:49:cc:70:4e:ff:2b:53:56:e1:
ec:c8:14:35:de:57:9d:88:d7:a4:cd:07:68:15:2a:ef:fc:42:
c6:5f:2a:77:70:db:85:d9:c1:bf:c3:13:f2:42:8c:11:29:57:
8d:d8:92:bf:2e:16:ba:40:9e:af:ee:0a:19:be:fc:38:bc:30:
ed:61:29:0e:ae:3c:1a:42:bb:a7:8b:37:c1:4f:0c:cb:e2:a8:
6d:cd:80:9a:75:6b:c1:f0:98:19:49:75:29:e9:c9:56:dd:d7:
05:3e:24:17:16:93:c5:54:e0:e1:13:91:e7:ca:23:6d:b2:36:
65:ce:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:55:28 2026 by rpki-client