Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: garrAtOaR9BSA9LWoJRHoseSP4zwTwWVbZ/+9tRbXzw=
Subject key identifier: 2F:A5:F6:98:DF:77:88:5F:4F:5D:E3:78:9B:19:91:D2:08:62:49:BB
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019D996219A8EC437C9A0CC7A6F9D561CDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 11A9
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: kj7kZaGwY2Hv7cdsdX0KBZN4rPCEZR54y7Y//2IeZgk=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:19:a8:ec:43:7c:9a:0c:c7:a6:f9:d5:61:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=2fa5f698df77885f4f5de3789b1991d2086249bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:d9:d0:46:8d:9f:36:d4:85:a2:3f:b8:90:
a5:59:81:9b:ff:88:3f:f6:0d:5c:fd:30:a1:85:15:
12:24:29:57:6c:bd:15:f1:32:4d:56:9a:dc:07:0a:
ed:82:aa:e9:d6:5f:60:01:d6:f0:5c:71:f8:0f:2c:
05:ea:99:08:98:fe:89:19:c0:30:f2:f8:96:23:f3:
58:b8:8c:9a:83:3d:62:48:8a:5f:6f:05:69:ab:bf:
25:e0:e5:42:c1:26:c8:e3:a2:61:53:1f:cd:5b:c3:
d7:b5:04:9c:2c:c1:2b:4a:ad:4c:14:1d:2f:a1:ea:
7d:48:9f:f8:19:d7:b8:56:28:20:50:55:21:df:58:
ef:cd:ef:5c:81:96:c5:1e:d2:23:df:eb:ff:81:e0:
ea:d8:df:95:6f:92:08:30:36:cb:e7:b9:79:64:77:
ea:5f:d8:52:f7:46:26:82:dc:6b:41:55:91:27:11:
80:65:dc:ff:b3:52:1f:04:6d:97:0f:41:dc:f6:64:
b9:7a:bd:85:63:21:ca:a7:59:19:94:8a:57:23:6e:
0a:f5:4b:80:a0:6e:88:e8:73:40:c4:bd:6c:85:23:
8e:31:02:03:13:32:3d:32:10:04:c5:65:2f:1b:b5:
f9:9c:ea:19:e5:43:71:c6:14:f5:44:d8:3e:61:9b:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:F6:98:DF:77:88:5F:4F:5D:E3:78:9B:19:91:D2:08:62:49:BB
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:62:6b:e9:f0:71:4e:96:02:45:ee:cc:27:4a:9e:9e:62:
7c:73:5d:8f:92:c4:6a:49:7a:80:e9:ba:ef:9f:8b:78:43:98:
15:a5:a1:77:72:15:0a:71:00:74:89:1c:51:71:00:94:74:51:
c2:a8:d4:b2:c8:d3:76:55:dc:29:35:34:00:df:3a:dd:a0:06:
62:2d:bc:9e:87:fc:f4:bd:24:64:01:89:02:92:fd:41:12:8a:
cf:bd:9a:e9:79:d0:f4:6d:b5:9f:4e:95:23:d3:35:7e:82:38:
4c:e7:3f:94:da:e4:08:e8:c7:13:9e:e8:9d:05:9f:9f:d1:5c:
f4:70:0c:00:24:f0:92:dd:32:53:b1:eb:63:cf:7a:78:0f:3a:
bd:55:3c:f6:df:06:c4:78:df:8b:64:16:86:14:3f:81:a1:52:
d3:84:55:aa:4d:4a:90:e8:2c:cd:b7:1b:0a:aa:62:46:34:aa:
00:03:b1:c8:f0:73:10:e9:f2:11:f5:db:5c:f3:25:13:45:c8:
02:59:6f:80:c4:ce:99:a5:2f:de:63:ec:53:ee:90:33:6c:9a:
0f:e9:b4:ee:89:45:0c:11:71:59:f0:39:31:81:a1:89:16:ed:
69:77:9d:96:4f:56:1a:11:98:46:44:dc:c9:b1:76:03:6e:c3:
07:e7:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:51 2026 by rpki-client