Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: WxdJpDKgy0emtS+a3aqIu8Cspm4QpfPxgnlk8ggObxE=
Subject key identifier: 4C:ED:EB:DE:E7:75:24:27:98:31:A1:4A:11:C8:4C:48:85:5E:B3:3F
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019CA9EB1981003FFC3367ECD195724A6EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 112D
Signing time: Sun 01 Mar 2026 15:01:22 +0000
Manifest this update: Sun 01 Mar 2026 15:01:22 +0000
Manifest next update: Mon 02 Mar 2026 15:01:22 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: pG6rj6zrouUBjK3dfr94oxKhBLhnrIkdKqttdB2rUSU=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:19:81:00:3f:fc:33:67:ec:d1:95:72:4a:6e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Mar 1 15:01:22 2026 GMT
Not After : Mar 2 15:01:22 2026 GMT
Subject: CN=4cedebdee77524279831a14a11c84c48855eb33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:58:8e:32:9d:4b:d1:3a:dc:d4:47:74:ec:
dc:ca:98:04:74:47:0c:48:cc:29:c8:06:b1:6f:d7:
a5:25:f2:c9:28:1a:9b:c4:b1:1b:ae:c3:64:b6:ec:
4d:d2:5b:f4:0d:87:c8:c9:4c:ac:88:eb:28:4d:38:
e4:e5:b7:e0:84:52:38:46:1b:3f:8e:7b:6e:e3:b7:
20:07:f3:28:80:c6:0d:04:ba:24:2f:d0:e2:07:4a:
f7:ad:c9:99:20:a0:fa:cd:ca:ab:52:e1:4e:3d:70:
63:ba:0d:55:7e:66:f5:8b:c3:8d:c4:67:23:e0:fb:
7e:56:3f:e1:34:58:71:8e:67:c2:28:44:48:e5:95:
33:0e:92:0c:41:2d:3e:dd:6c:56:84:72:3f:9c:19:
5e:6c:b2:36:c2:55:be:9c:49:c5:ad:bf:6a:4e:28:
91:4e:7e:34:d7:a5:a1:de:92:7c:c5:dd:f2:66:91:
ee:cb:c7:e2:ee:74:bb:5f:c7:b7:50:87:39:25:45:
5d:62:5f:b1:14:9f:3a:c8:1f:3c:ee:70:cd:90:c1:
5a:80:da:80:2f:7b:30:12:41:fb:60:5a:2b:f0:ef:
f1:4b:60:6f:7a:b9:33:b3:6f:b0:6c:e2:0a:97:c5:
34:b8:8f:a4:82:10:5f:64:6d:49:9a:a0:7f:28:7f:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:EB:DE:E7:75:24:27:98:31:A1:4A:11:C8:4C:48:85:5E:B3:3F
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6b:83:18:ce:9f:22:4f:0b:5f:2b:aa:76:30:62:1d:c5:15:
1e:bc:92:fb:eb:44:f4:4a:c3:1e:e9:94:37:51:b0:60:3f:10:
ab:dc:17:6f:0b:0c:76:be:d9:c5:28:a7:25:2e:ec:c7:34:ba:
e0:b7:fd:03:0a:ba:f1:8a:60:ca:c1:c5:68:a6:42:bf:b0:44:
14:51:50:17:99:1e:21:c0:c4:50:6a:39:fe:09:6c:d8:4a:e1:
7f:0b:37:8d:dd:85:10:b1:c4:6e:45:51:75:74:47:73:62:66:
f5:c6:cd:17:71:55:ec:7b:61:c7:c7:87:34:5a:74:d7:1f:27:
73:80:b8:76:34:bc:2f:5b:14:d9:47:a9:fd:13:ad:f0:4c:3d:
c6:76:37:e0:01:dc:c6:6d:bf:8a:25:0c:8a:00:c9:af:a0:0f:
38:ca:db:5a:57:3e:3a:71:5e:64:30:35:3b:38:2e:01:ce:55:
7b:91:7e:c0:83:75:46:8a:4d:7a:a0:b5:6a:37:22:dc:56:bb:
67:33:81:e8:cc:f0:ae:1b:c5:2c:99:f5:83:45:9a:0d:e0:7d:
74:40:88:dc:ca:d0:b2:d1:7b:2f:f2:8c:11:0c:35:45:e2:d0:
97:c3:74:4d:89:ca:b3:30:f0:75:bc:77:3a:59:b8:1c:e7:95:
d6:df:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:33 2026 by rpki-client