Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: LViIWjfG1yBxf6kLT/5bArsixDEMvHBhiyHUELLpjxk=
Subject key identifier: CA:07:3D:0B:A8:AD:F2:62:FE:86:DD:DA:C9:71:7A:D6:10:7E:0D:C8
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 01A1569D3E97C0CC2A32F0725C8103DE9952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 1186
Signing time: Tue 20 Oct 2026 00:01:48 +0000
Manifest this update: Tue 20 Oct 2026 00:01:48 +0000
Manifest next update: Wed 21 Oct 2026 00:01:48 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: pBwzRtLonkibia9CnZr4EKwn6GPSoT5CSrylcEEAbkA=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9d:3e:97:c0:cc:2a:32:f0:72:5c:81:03:de:99:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Oct 20 00:01:48 2026 GMT
Not After : Oct 21 00:01:48 2026 GMT
Subject: CN=ca073d0ba8adf262fe86dddac9717ad6107e0dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:3b:cd:75:d3:dd:5f:c7:1e:02:5c:bf:2b:
eb:3a:52:ce:68:b3:9b:5d:40:fa:5b:d2:d0:df:a1:
3b:9e:78:9f:61:d1:5c:8d:73:20:b8:67:52:c0:16:
71:e7:03:05:58:51:57:31:96:ae:db:4a:97:75:03:
73:24:76:fc:f6:19:c1:a3:2c:03:41:bf:21:d1:05:
7b:07:c5:e2:3f:b1:02:38:3d:ba:bf:b9:da:58:55:
d5:ec:d8:c6:0e:bc:f1:42:4f:ca:d1:9f:91:1a:0d:
b5:1e:ae:c0:89:27:1d:72:cb:52:72:3f:e6:07:88:
30:3f:96:9d:96:1b:4e:54:1b:ea:f3:c1:40:73:4d:
e7:58:3b:5e:d0:4a:28:ea:f5:f1:b5:b3:9b:a3:79:
c1:21:c5:b2:3d:2e:34:1d:ff:8f:58:05:5e:5d:a8:
c7:0a:6e:7c:91:40:e0:2e:21:2a:5a:15:ef:1f:7d:
2d:2b:3c:9b:8c:51:ce:fc:0c:74:ee:88:b7:af:73:
0b:0a:3f:46:00:6a:67:35:b8:59:a9:f5:0d:26:5d:
cb:2c:9f:84:5d:ab:a8:67:77:32:52:4e:5e:ef:33:
4b:7c:41:3a:46:45:78:3a:76:5a:bf:6b:81:fb:e3:
73:a8:9d:d6:c4:73:14:76:b7:e9:88:d2:5c:b4:d3:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:3D:0B:A8:AD:F2:62:FE:86:DD:DA:C9:71:7A:D6:10:7E:0D:C8
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:11:e0:df:df:1b:67:7f:c3:00:4b:45:7b:f8:88:77:75:6f:
ab:69:6a:10:eb:8f:09:41:ee:4c:74:18:7a:75:b9:9f:b1:f6:
fc:1e:b0:fe:f0:5d:66:b0:6e:27:aa:ec:75:8d:d0:67:62:93:
cb:53:e8:05:07:1b:d8:95:bb:b3:65:ac:7f:8a:0b:bf:86:12:
52:3f:82:8b:5a:79:d4:e0:ea:14:8d:56:80:a8:47:f8:2b:c7:
c8:e3:27:02:7f:55:e9:db:ed:6a:3a:6a:3f:fd:83:e0:9b:7c:
f3:93:af:99:a7:93:ad:72:5a:51:22:70:6a:c8:88:25:fa:b9:
c8:9d:f2:cc:99:3a:8f:06:98:a1:c2:69:bd:ab:51:73:ec:5d:
aa:20:57:29:77:67:9a:4b:4a:de:38:55:9f:50:a1:c3:2e:aa:
17:77:7e:04:92:cc:a9:50:29:0a:fd:a5:db:81:ed:f0:8f:86:
4b:e4:d6:e9:0a:9b:41:37:24:07:91:2d:7e:32:04:8c:93:75:
8e:9f:da:ac:0d:aa:69:0a:f7:ba:22:fa:74:c5:67:c9:c9:92:
fd:46:58:39:37:01:31:ab:b6:0d:4c:92:12:1c:7c:5d:a6:14:
b5:bc:0b:5e:7e:f4:3b:dc:9d:2e:6e:13:7e:8d:c2:da:b4:99:
d6:aa:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:25:22 2026 by rpki-client