Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: JspAufjVY2q458wUKUMoFiwB/MZkpoaPoWeqpLBgPhQ=
Subject key identifier: A1:C2:0C:F2:6C:74:5C:85:F2:4B:FD:3F:D6:5C:11:41:41:ED:06:B2
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019CAA21B4D3EDBDE2D22CDF79E6729D4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0731
Signing time: Sun 01 Mar 2026 16:01:01 +0000
Manifest this update: Sun 01 Mar 2026 16:01:01 +0000
Manifest next update: Mon 02 Mar 2026 16:01:01 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: 5cs2y40CH/EfndpLtado1usS2XGVucC7oDsJ1WceIkc=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b4:d3:ed:bd:e2:d2:2c:df:79:e6:72:9d:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Mar 1 16:01:01 2026 GMT
Not After : Mar 2 16:01:01 2026 GMT
Subject: CN=a1c20cf26c745c85f24bfd3fd65c114141ed06b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:0b:e0:94:68:9c:14:dd:fe:3c:85:08:60:
7e:88:c3:16:f4:54:9f:52:84:b6:33:3b:28:1d:89:
fe:eb:0a:41:21:3f:bb:00:7a:66:ea:cc:02:0f:c6:
9d:81:06:35:53:09:0c:4a:f5:a8:74:85:53:b6:77:
42:04:69:0c:01:41:06:87:53:d0:7c:08:6b:82:be:
85:96:06:a7:12:c1:b2:36:9e:94:fd:c7:b8:88:80:
94:22:6a:35:56:b9:77:47:ff:d8:42:f3:a2:cb:c2:
18:21:05:45:55:cd:44:d1:97:97:f3:b8:0a:bc:eb:
7f:5c:95:2e:18:b9:59:be:e0:c6:80:43:31:c8:f7:
39:24:75:da:2b:eb:43:d9:ae:d8:4a:a0:d5:2c:ad:
b2:b3:0b:7c:0d:0d:c9:18:23:77:2c:e3:a4:29:5c:
73:c6:c0:6c:23:0a:06:75:24:cb:9a:47:df:1d:48:
49:6c:07:38:f4:c9:c7:b3:d8:9c:e3:15:68:4c:4b:
ed:23:61:a1:f1:e2:a9:ee:11:f2:64:d4:75:af:0e:
40:38:9b:00:02:1f:8c:25:e8:94:8e:da:1d:9a:22:
d1:b1:2b:e4:da:65:85:5f:d8:fb:1f:2e:35:6d:06:
19:26:d6:09:11:d3:04:73:51:99:3c:f5:42:e7:ae:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:0C:F2:6C:74:5C:85:F2:4B:FD:3F:D6:5C:11:41:41:ED:06:B2
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:a2:cf:4a:37:f3:d3:92:a1:5e:a3:86:c0:84:bf:fb:e4:
23:d2:12:03:37:d0:79:95:c5:df:fe:45:5c:7b:52:53:16:43:
1c:f3:ed:46:29:ca:81:b1:7a:ed:57:b0:ed:7a:63:7f:5d:0f:
91:6d:7f:12:0c:4b:68:dc:4c:ea:29:fd:52:25:b7:4b:45:b8:
ad:2a:e2:43:61:74:1c:30:2a:81:1f:52:cc:f3:77:ff:30:e6:
d5:37:94:71:63:ce:9c:31:17:5b:5f:bc:c8:c5:d9:65:cd:e2:
eb:71:83:03:80:cd:2c:39:0f:ec:b7:6e:d7:b2:f9:d9:88:ae:
7d:7c:29:10:59:be:c1:91:0e:44:61:de:2c:0d:af:5c:4d:24:
11:97:7a:56:bc:38:8a:9f:25:b5:78:8a:8d:3f:b6:72:a6:78:
c8:03:ae:01:90:e5:e1:b3:7b:0a:e8:a7:2e:68:6b:0e:22:c0:
5f:c2:0f:ae:f4:54:33:bc:e6:5a:bc:34:53:1c:b0:4b:90:30:
6e:88:3e:a0:08:1c:ef:95:c1:76:31:c3:4a:39:4e:11:f7:a3:
19:1d:af:6d:a7:b2:43:a5:42:bb:ae:f6:85:13:fb:27:de:83:
64:19:c3:5c:40:42:da:11:ac:d7:5f:e8:fa:56:61:19:92:c1:
a8:59:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:49 2026 by rpki-client