Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: AeRUPzyUJ4C5JkupwElW5VaRuW5UXT9nDiT7FM1OLeA=
Subject key identifier: FA:C9:AB:4B:32:EA:76:D3:F5:31:3C:02:C0:C1:64:25:50:25:FC:C3
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019EC0DB66A7B7423A1711A57E6EBCEB1F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 1242
Signing time: Sat 13 Jun 2026 12:01:04 +0000
Manifest this update: Sat 13 Jun 2026 12:01:04 +0000
Manifest next update: Sun 14 Jun 2026 12:01:04 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: aaSBE4nx+ByL2GzKvOveLQrI/5fBPQ7ulDl8uU4aqtQ=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:66:a7:b7:42:3a:17:11:a5:7e:6e:bc:eb:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jun 13 12:01:04 2026 GMT
Not After : Jun 14 12:01:04 2026 GMT
Subject: CN=fac9ab4b32ea76d3f5313c02c0c164255025fcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:26:3c:09:e1:25:7a:7c:90:d0:88:83:58:
af:97:13:64:44:0f:91:68:5d:18:a6:17:0f:ab:c1:
6e:e1:cf:86:8a:b8:9a:a2:02:f5:55:ef:df:bf:bb:
50:a7:4a:91:cf:c2:ee:20:2f:1f:bc:c4:0b:c0:7c:
39:06:88:e6:8b:a7:00:b3:33:b4:7c:6b:4c:16:0d:
11:27:e7:0a:4b:4d:47:7b:d0:4c:80:a4:67:9d:95:
11:7b:64:ce:44:db:06:70:e9:db:7c:df:31:96:e8:
36:39:d0:13:f4:df:51:e9:1c:3d:f2:de:bf:84:0e:
10:bb:36:f5:ae:ee:de:72:2f:83:69:04:2b:e5:0b:
39:da:07:56:ae:7a:a2:88:62:e4:36:ab:80:a2:d7:
08:e2:87:04:96:19:7c:03:08:66:a8:37:6a:5f:7d:
99:56:18:e5:a7:13:c0:00:84:fe:4d:df:ac:53:d7:
98:6e:64:f2:4a:0e:67:18:37:83:7c:38:b8:8d:1d:
db:f6:7e:2a:e3:40:3a:81:f7:03:71:37:bf:54:94:
ef:2b:63:da:18:91:1d:45:da:76:cf:35:b4:18:0e:
fd:b7:04:2f:f8:fe:fc:14:74:3d:60:51:a6:b1:0f:
8f:08:22:ff:e7:93:38:85:0d:ea:72:d6:ac:86:ab:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:AB:4B:32:EA:76:D3:F5:31:3C:02:C0:C1:64:25:50:25:FC:C3
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6d:03:79:9b:87:69:38:a2:fb:7e:e2:1d:14:e3:a9:61:06:
76:7c:3f:13:b2:79:b1:ff:94:e0:0c:1a:44:97:14:c8:9f:84:
bd:33:e8:39:76:a1:d9:c8:6c:ed:ba:5f:f0:52:e0:f9:5c:f4:
15:a9:80:c0:29:d8:b3:e2:72:5d:a7:bf:8d:9c:4b:a1:5b:72:
ca:e8:14:7e:4c:f9:9d:ac:14:c0:3e:33:7c:e0:69:a9:2b:3c:
11:94:56:e4:7f:48:28:4a:1a:d0:27:6f:c2:18:61:c5:e0:b2:
fd:54:8c:a7:ad:99:a0:b0:4a:4b:7c:0f:b7:8e:b1:6e:21:ac:
14:6e:a7:c7:68:43:36:4a:ee:3d:b4:b7:fc:28:c3:0b:bb:8e:
3f:c0:bb:5f:4e:c9:c7:be:b8:69:ec:93:9a:4e:fa:a2:fb:a3:
30:33:06:24:5c:a7:19:3a:01:1f:88:03:f5:c1:a0:40:c4:06:
46:01:14:f6:1a:6d:65:d6:b4:b6:33:9a:2c:90:18:35:0c:4c:
a9:cd:82:39:40:5d:c1:4e:a8:74:05:d0:dc:94:5e:b2:5e:48:
de:fe:f9:3b:e0:6b:77:49:1f:52:ee:a4:a8:d6:e8:ee:2a:35:
d2:58:78:e9:98:d3:fe:f7:bd:97:a6:67:50:1f:e3:2d:9f:e8:
b8:ab:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:07 2026 by rpki-client