Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: opSW7fa2aD4OPTrYXarI5gBN8RLjFp6esHgmd5obuJA=
Subject key identifier: 1F:75:67:B3:39:9F:98:57:C6:D5:1B:D0:12:3A:52:AF:FA:A3:72:41
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019EC148CB80AE969572009D1B3293ABE64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 14:00:33 +0000
Manifest this update: Sat 13 Jun 2026 14:00:33 +0000
Manifest next update: Sun 14 Jun 2026 14:00:33 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: j5m4iC973c7g5+U5bvrJpYEYsqVYmbiGQasDz3hqWEk=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:cb:80:ae:96:95:72:00:9d:1b:32:93:ab:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jun 13 14:00:33 2026 GMT
Not After : Jun 14 14:00:33 2026 GMT
Subject: CN=1f7567b3399f9857c6d51bd0123a52affaa37241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:e5:06:45:ed:ca:f8:cf:d3:9d:a7:49:a3:
11:95:cd:db:f6:d5:a0:a2:1f:9a:ca:1c:37:a7:7a:
5e:70:d0:73:3b:2a:3c:f4:fb:d5:f6:a7:58:17:81:
07:b3:03:bb:b9:71:9a:49:c2:97:b7:35:1e:11:06:
71:69:0f:25:1f:59:da:f2:90:ee:ea:60:4d:c0:87:
ce:87:73:92:81:79:63:c3:13:db:fd:a4:e8:cb:4a:
05:b0:d5:4d:be:28:95:b7:69:21:5a:e8:c4:05:ae:
53:7d:38:46:d7:50:87:ca:9a:40:ef:fd:6b:07:4a:
ec:e4:23:de:61:5d:e5:53:c4:9f:b8:22:0e:78:53:
ad:07:ab:97:d3:7f:58:3e:9d:3b:a4:b9:f4:3f:ae:
2f:2a:d1:15:c2:d7:52:3a:5e:35:50:e2:32:0c:19:
86:45:be:80:1a:27:0e:a9:bf:6b:42:72:a3:86:be:
06:be:fb:38:6e:f7:e9:36:41:82:ed:df:d1:51:fa:
0a:c6:a7:86:11:30:e7:76:8d:f9:97:6c:fb:db:e8:
8e:6b:37:10:48:91:6f:65:16:62:65:4c:20:fb:86:
8d:f4:85:16:9c:d8:81:69:dc:d3:76:6f:f9:72:3f:
81:1d:0e:e2:e6:94:14:09:34:1b:22:3f:ae:64:25:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:75:67:B3:39:9F:98:57:C6:D5:1B:D0:12:3A:52:AF:FA:A3:72:41
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c5:3e:30:c7:5a:fa:95:2b:a6:06:7c:06:e4:85:3d:91:a5:
e1:d1:42:2c:47:81:cd:bf:aa:5a:da:87:30:7f:7c:03:c8:fe:
eb:80:c6:2f:92:b5:63:ea:81:83:96:9a:41:c5:76:ef:85:eb:
2c:cb:8d:66:ef:f2:99:cc:e3:22:46:02:34:d8:7e:c3:e5:d4:
86:46:64:61:61:50:80:c4:85:37:8d:84:cd:3d:e6:f9:70:df:
28:20:6b:2c:be:0c:e9:bf:d1:bd:d9:e6:fb:e5:de:82:bc:05:
c3:11:0b:1b:cc:e6:f1:d2:5c:c7:48:46:c4:68:31:e2:e7:c8:
50:0d:91:9c:45:ec:a9:f5:be:6d:6b:08:3d:ce:a8:a0:0b:f3:
3a:ba:17:27:2c:c3:0e:f8:3f:0f:49:63:b3:a0:f9:13:32:ec:
64:86:a0:02:c7:0f:6f:a9:db:f5:0b:80:50:01:3f:03:f8:13:
a2:bb:a3:80:c9:8a:cb:1d:02:f4:47:8c:8c:e9:b5:40:15:11:
7a:63:5e:41:6b:23:2f:56:73:03:b0:85:80:32:14:5e:23:c0:
a3:30:43:8c:4f:99:8b:40:7c:d4:92:c6:a6:33:c6:d4:af:8f:
41:e2:b9:7c:f5:f9:fa:e2:9e:23:1d:dc:bc:24:97:77:69:0b:
fe:d8:2e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSMuArpaVcgCdGzKTq+ZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz
NTcyOTMwHhcNMjYwNjEzMTQwMDMzWhcNMjYwNjE0MTQwMDMzWjAzMTEwLwYDVQQD
EygxZjc1NjdiMzM5OWY5ODU3YzZkNTFiZDAxMjNhNTJhZmZhYTM3MjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzDlBkXtyvjP052nSaMRlc3b9tWg
oh+ayhw3p3pecNBzOyo89PvV9qdYF4EHswO7uXGaScKXtzUeEQZxaQ8lH1na8pDu
6mBNwIfOh3OSgXljwxPb/aToy0oFsNVNviiVt2khWujEBa5TfThG11CHyppA7/1r
B0rs5CPeYV3lU8SfuCIOeFOtB6uX039YPp07pLn0P64vKtEVwtdSOl41UOIyDBmG
Rb6AGicOqb9rQnKjhr4Gvvs4bvfpNkGC7d/RUfoKxqeGETDndo35l2z72+iOazcQ
SJFvZRZiZUwg+4aN9IUWnNiBadzTdm/5cj+BHQ7i5pQUCTQbIj+uZCUWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB91Z7M5n5hXxtUb0BI6Uq/6o3JBMB8GA1UdIwQY
MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt
MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2
LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8U+MMda
+pUrpgZ8BuSFPZGl4dFCLEeBzb+qWtqHMH98A8j+64DGL5K1Y+qBg5aaQcV274Xr
LMuNZu/ymczjIkYCNNh+w+XUhkZkYWFQgMSFN42EzT3m+XDfKCBrLL4M6b/Rvdnm
++XegrwFwxELG8zm8dJcx0hGxGgx4ufIUA2RnEXsqfW+bWsIPc6ooAvzOroXJyzD
Dvg/D0ljs6D5EzLsZIagAscPb6nb9QuAUAE/A/gTorujgMmKyx0C9EeMjOm1QBUR
emNeQWsjL1ZzA7CFgDIUXiPAozBDjE+Zi0B81JLGpjPG1K+PQeK5fPX5+uKeIx3c
vCSXd2kL/tgu8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:02 2026 by rpki-client