Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: DSdOFFnlQm6m5L9j4TDat+y4dlJ/RStWsruEtRdDYMc=
Subject key identifier: 66:7D:73:89:54:02:1D:76:DA:59:63:9A:DE:B0:13:32:1E:47:22:B6
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 019CAA5896EACE362EEA6A069BB877CB28EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0E33
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: IejPlN8K9RNdWdi193Tqh/XHfiuTwaIG0elQTLnDIJQ=)
2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:96:ea:ce:36:2e:ea:6a:06:9b:b8:77:cb:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=667d738954021d76da59639adeb013321e4722b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:91:40:55:f3:6b:fb:ef:fc:8d:91:6e:f8:
7a:94:ec:1a:36:ea:2e:3e:5c:d3:0c:cd:75:57:4e:
a8:5a:50:29:81:cd:f0:04:25:42:6f:84:4c:9b:bc:
bb:e3:6f:08:11:f1:f3:61:78:a8:de:94:61:45:48:
7f:36:2e:fc:db:7a:a9:71:81:f1:da:f2:8d:cb:b6:
9f:a7:78:e1:53:15:d9:2b:2c:1c:70:6d:a6:03:40:
de:e7:01:2c:18:2d:06:93:37:f0:a4:2b:5a:05:98:
e3:9e:95:63:1a:67:cd:fa:71:df:1f:a8:b0:7e:89:
1d:7a:b2:2c:28:26:04:f4:cb:3a:3c:9a:8d:db:f5:
1d:42:90:dc:d9:26:8a:4a:51:eb:40:e5:40:91:5d:
e4:71:65:ea:f4:5e:c5:56:87:03:fd:e4:50:90:fc:
01:e7:e1:24:2d:80:0b:b2:15:9b:85:3b:37:15:89:
f0:83:91:6f:a2:ca:1e:27:a6:62:74:ff:47:8b:30:
30:c0:1b:cf:d8:92:d1:bb:f1:b8:74:1f:c6:41:a5:
7f:14:87:c0:ff:a6:57:5e:99:86:52:60:f7:4f:15:
60:2d:28:24:9c:f2:89:45:8f:55:53:11:7b:5b:06:
74:d1:f2:c4:22:b6:9f:0a:1a:84:76:2c:96:81:c1:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:73:89:54:02:1D:76:DA:59:63:9A:DE:B0:13:32:1E:47:22:B6
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f4:97:d7:81:7c:51:dd:ec:10:6d:57:20:d0:d0:a1:78:85:
fe:5e:29:61:1f:0f:6e:86:17:9b:f5:fb:5e:0b:39:09:1f:4c:
7c:bd:6e:e6:a1:65:02:b6:6b:54:15:37:3a:51:2c:14:fe:3b:
09:d2:e5:80:48:9f:65:ea:de:3e:bd:f0:cf:ad:50:dd:1c:ff:
86:58:a5:a7:63:9e:4e:23:4b:38:7e:a0:80:dc:3e:3b:d4:68:
2c:ab:eb:c3:96:13:28:59:b1:83:e2:86:fc:7b:3e:40:0e:20:
13:c4:eb:0a:f7:74:87:c0:73:2b:44:91:5b:66:1e:fc:a5:24:
9c:a8:70:da:29:0a:8f:84:e2:28:40:89:3c:8d:77:4d:6d:9d:
5b:11:b7:ca:16:a4:15:4d:55:7c:5c:29:62:38:1b:f9:ea:6f:
27:47:b8:82:02:06:81:a2:16:79:54:2d:de:2d:f1:c0:d2:60:
e8:46:d0:c3:94:26:fd:9d:ee:68:48:44:23:ed:10:dd:26:79:
e6:a6:64:ce:7b:e7:a3:39:e0:98:5b:fe:cf:0e:b4:28:f9:b6:
77:13:ca:be:17:38:c6:ce:b8:b4:be:45:e9:dc:ef:36:17:b5:
01:5c:b7:e1:3d:bc:4b:61:d5:15:1c:4c:31:3f:b2:e9:ad:2f:
a9:7a:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:49 2026 by rpki-client