Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: sB8DnfCV6A67wLyLbA/9xzsmdhZnHhQ8qEHvWwWwZRY=
Subject key identifier: 56:1A:45:6A:78:1F:D8:AB:D5:6E:AD:80:8A:E8:AC:45:93:D8:D5:B5
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019CAF1171148D05CC69CB6F005AD80EDD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0F1D
Signing time: Mon 02 Mar 2026 15:01:21 +0000
Manifest this update: Mon 02 Mar 2026 15:01:21 +0000
Manifest next update: Tue 03 Mar 2026 15:01:21 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: vVljX+kugDh40T1zKIlCI4C1gg70n01bBkZmqN+BTLE=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:71:14:8d:05:cc:69:cb:6f:00:5a:d8:0e:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Mar 2 15:01:21 2026 GMT
Not After : Mar 3 15:01:21 2026 GMT
Subject: CN=561a456a781fd8abd56ead808ae8ac4593d8d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:68:c5:ff:9e:90:e7:bd:f7:28:3b:09:70:
61:68:84:f8:52:fe:00:c7:08:78:21:ee:15:b0:ee:
ea:51:08:60:8c:ac:09:9c:c1:39:ce:d0:2b:67:ef:
7a:4f:10:7e:ed:8e:fb:95:6a:d9:33:89:c5:16:0f:
9a:74:b1:68:a0:f3:70:87:8f:8e:83:e2:36:da:8a:
f1:56:03:08:1d:7e:15:f4:25:6c:aa:15:17:8c:61:
59:68:3f:05:ed:75:25:5c:9d:84:fe:32:57:b9:5f:
35:b2:e3:22:ff:d1:ee:cf:d3:07:a1:36:93:74:55:
d6:dc:2f:ac:00:a5:2c:dc:70:23:96:91:31:de:d8:
40:41:f2:35:66:cc:22:aa:10:ab:35:cb:f1:3a:35:
5f:40:e0:c5:e8:35:60:e0:72:0c:85:37:33:85:7f:
29:75:23:76:6a:7a:91:d5:72:9c:ea:2c:fe:59:ef:
87:64:9e:07:0f:03:41:db:9c:b4:6d:36:f9:74:01:
9d:bc:15:ec:02:69:8a:b5:82:28:79:37:96:04:39:
0b:da:65:cb:34:7a:ed:b3:b4:d5:80:62:e0:da:d1:
e6:a2:99:34:6d:95:c4:15:9f:35:2d:e7:58:6b:40:
1f:0b:ae:70:8a:4a:c2:2b:f1:a8:16:b9:97:66:ae:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:45:6A:78:1F:D8:AB:D5:6E:AD:80:8A:E8:AC:45:93:D8:D5:B5
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5e:2b:cd:b7:2d:c8:23:52:1c:1a:99:70:7b:2b:ae:c5:02:
67:a5:85:72:2c:59:ce:a7:1f:1b:d1:57:37:bc:ca:e0:db:47:
15:ee:85:ea:89:bd:99:ef:67:48:b7:99:f1:38:e4:69:e3:3b:
4b:27:58:05:e4:da:41:8a:82:ed:73:6c:25:d3:38:f5:5d:a2:
72:8a:40:d7:58:1c:95:df:6a:da:7b:d7:90:1c:9f:8a:ba:df:
6d:58:3c:9b:5e:b4:c0:e0:77:6b:1b:77:b0:24:12:59:61:75:
5b:39:b5:76:a0:4f:48:b0:6a:42:d3:db:48:a8:3d:7d:67:39:
0f:f1:fb:34:06:bb:e1:73:da:83:b1:00:61:50:b2:bf:4d:b4:
0f:a3:59:6f:f7:66:99:04:81:94:fa:b7:67:ce:81:30:63:21:
25:08:7e:8b:5f:da:a8:02:58:3a:a6:83:ee:6a:86:d8:e8:7a:
63:f1:42:09:61:d3:a3:56:bc:7a:12:7e:82:f9:f7:0b:ff:43:
e5:78:3b:e4:e6:d1:c5:c3:40:ee:08:60:f6:6c:0a:0e:4c:5b:
6c:d8:96:e4:14:a8:31:ed:52:46:a8:ca:52:8c:e1:e4:4b:d1:
b4:01:1b:1f:29:63:7f:af:5c:79:71:2a:63:4a:32:36:9d:e8:
a0:f1:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:15 2026 by rpki-client