Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: m0sMHdb8Wy3ZRkw6113Abj+vUdvhlezvWIlO7xUVESk=
Subject key identifier: 5B:F3:6F:ED:97:63:C0:1F:87:3C:82:8D:EF:10:BE:84:76:6A:09:07
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01A0D012CA4B2C9696E26A14AE8FAAFA020F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 1353
Signing time: Wed 23 Sep 2026 21:01:27 +0000
Manifest this update: Wed 23 Sep 2026 21:01:27 +0000
Manifest next update: Thu 24 Sep 2026 21:01:27 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: oEQhqlzS9ozhhDmxBJrooVgKIGBwYMQ/qHlB/EkNs/0=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:ca:4b:2c:96:96:e2:6a:14:ae:8f:aa:fa:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Sep 23 21:01:27 2026 GMT
Not After : Sep 24 21:01:27 2026 GMT
Subject: CN=5bf36fed9763c01f873c828def10be84766a0907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:fe:ba:9d:e6:52:4d:0b:8a:d2:86:41:59:
38:62:b0:6a:6d:9d:61:37:7a:92:cd:13:7a:4a:1e:
4e:f6:fc:d5:38:a1:b1:b1:7e:5d:78:7e:f5:41:86:
63:34:21:8a:ad:55:a3:3c:15:ad:96:2a:63:a3:f5:
ab:cb:f1:7f:4c:e3:0e:a3:38:8b:05:ee:99:8e:6a:
48:37:e2:18:2a:bc:94:b6:7a:53:a8:4b:2f:55:cb:
55:ef:5b:42:0f:fa:23:4b:9e:0b:58:54:54:e4:8c:
c6:fe:a9:ad:06:2a:b0:a9:78:06:56:62:1f:47:ee:
a7:1e:6d:c2:13:ac:fa:b6:c6:34:d6:0e:cc:9a:b8:
ab:ce:20:63:cb:fb:a7:87:34:5e:53:f4:73:68:7f:
7f:fe:1e:d3:04:31:6d:14:92:08:78:6f:7a:66:ec:
a5:57:49:6c:02:00:fb:49:6d:6a:5f:28:a1:87:22:
e4:4d:8e:c0:bc:78:03:4d:1b:21:60:37:2d:ae:ab:
d4:38:23:d5:33:a9:54:74:93:64:6c:d3:1b:a3:9f:
f6:a3:50:34:1e:f3:e4:32:a2:d7:f3:35:c5:62:35:
f3:74:a8:6b:05:46:ac:9d:92:fe:92:10:b0:42:3f:
91:41:b4:97:56:79:9b:e2:1c:49:48:36:fd:c1:fe:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F3:6F:ED:97:63:C0:1F:87:3C:82:8D:EF:10:BE:84:76:6A:09:07
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4c:cd:87:05:7f:86:96:47:ec:3c:15:00:5b:3b:07:7f:96:
b9:b7:7f:89:88:31:80:b7:2b:47:20:fd:70:50:8e:26:52:45:
59:43:01:13:47:d8:f4:0d:91:d6:c0:26:7a:25:27:a5:a4:7c:
73:7b:3b:8b:01:93:82:c7:42:4e:c9:76:9d:85:bc:69:b8:79:
51:04:10:99:d0:7c:0f:58:d8:b5:e7:30:2d:49:50:fd:f1:98:
2d:75:ea:70:61:69:c1:47:df:d9:7b:f1:19:8f:b7:c2:9d:54:
ff:e1:69:b0:7e:69:58:26:8d:86:fc:d3:7c:ff:b7:77:dd:62:
c0:e7:cf:8d:06:86:98:04:9e:7d:1b:93:73:18:d8:57:58:20:
f2:37:d5:0f:4e:dc:90:fd:07:c7:93:2a:a8:99:45:5c:44:63:
0a:c1:f1:b5:46:60:8a:0c:31:3e:cc:75:31:c5:2f:0c:c4:fd:
d6:fb:e9:1c:99:f7:1a:f6:11:f3:af:27:4c:23:0d:2d:64:c8:
b3:e7:9a:3a:79:95:9f:2a:4e:eb:57:98:51:52:48:be:0e:a4:
d2:e5:ab:b4:9b:52:a0:af:cd:ce:ad:17:3c:ec:0d:72:43:3a:
69:ef:47:d6:5f:f2:f8:c5:b5:59:83:7c:c8:e2:55:9d:f2:72:
3d:3d:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:35:20 2026 by rpki-client