Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: KfkqNHR/8OXOv4hhx0a4vKgYsNkES3B0EcENgM2xQ2U=
Subject key identifier: 62:36:66:06:94:81:58:C1:29:0B:49:0D:B7:13:5D:08:C3:C0:1F:2F
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019CAE3547EF5BE1E6F6410EEC81A9645D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 11:00:53 +0000
Manifest this update: Mon 02 Mar 2026 11:00:53 +0000
Manifest next update: Tue 03 Mar 2026 11:00:53 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: SsSsh5oGJ25fqmQaSY745R+rFwJXRbSh7sEGTacT+PY=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:47:ef:5b:e1:e6:f6:41:0e:ec:81:a9:64:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Mar 2 11:00:53 2026 GMT
Not After : Mar 3 11:00:53 2026 GMT
Subject: CN=62366606948158c1290b490db7135d08c3c01f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:11:15:c3:b8:0e:fa:ff:ea:92:9e:cd:de:
e9:0f:e2:d8:33:67:7c:de:a2:da:dd:f4:47:fe:ef:
fe:7a:9e:a4:98:74:bf:84:f8:0c:d6:6a:ac:b7:73:
7e:42:79:eb:af:5b:e6:e3:58:64:b6:5f:68:b1:ab:
1b:49:66:a8:81:69:e4:05:b2:72:44:67:be:7c:4c:
94:6e:2e:79:67:39:69:e9:b4:78:55:51:07:62:63:
00:94:d2:5d:35:30:21:87:e1:57:28:3a:30:a2:2b:
86:b7:2b:2e:59:b6:e0:8b:0e:e1:ad:ff:46:bf:d0:
a6:3e:f4:bd:a5:e5:bc:2d:a6:ba:4f:30:a7:89:3b:
d3:6e:c3:32:6e:3f:f0:a4:c3:86:8a:e0:dc:58:60:
83:d3:6a:dc:5a:f2:49:08:95:9b:39:08:a0:04:50:
62:a8:5c:94:25:21:41:8e:e6:34:b1:9c:c8:cd:a6:
c2:be:e9:d2:cd:35:c9:b0:0d:e5:70:51:7a:fe:9f:
c3:76:57:54:33:2f:5b:40:0c:ef:68:19:fe:fc:a0:
a9:a8:5d:ba:88:42:89:32:58:81:93:39:28:9c:39:
8b:ab:fb:26:a9:50:6c:64:5e:09:dc:34:96:37:e9:
18:4a:bb:0a:58:8c:00:53:0e:ed:c2:2f:3c:52:5d:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:66:06:94:81:58:C1:29:0B:49:0D:B7:13:5D:08:C3:C0:1F:2F
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:b7:61:6c:48:b5:b0:df:6d:b6:89:31:00:56:ac:34:83:
c5:6c:18:ad:89:63:3a:31:26:21:90:b8:d6:66:16:92:f0:fb:
2f:88:3f:97:d2:99:25:b5:09:7a:0b:05:83:fc:39:f8:3c:e5:
42:dd:54:5c:ab:6d:b9:bb:77:fd:a2:89:18:de:e2:a9:32:a0:
4c:f0:cf:cf:ce:dc:b0:99:d8:a1:0a:53:81:34:b0:ca:15:75:
6c:a2:75:ca:9d:2c:92:5a:37:7f:5e:f7:b4:3d:24:7e:0e:d5:
05:7a:61:6c:b5:5c:3c:78:78:24:ec:52:91:ed:b8:da:47:f5:
4f:86:38:9e:1f:0b:ed:bf:97:98:e2:26:f6:ff:80:d3:67:ef:
2e:60:84:4e:fd:b7:06:ec:42:6a:95:bf:ac:2c:cb:9f:80:46:
46:6a:0a:5c:3b:19:b2:29:74:0b:75:fd:6b:a7:79:a3:66:5a:
07:50:1d:bc:72:85:07:5f:56:08:8f:f6:dc:80:7e:d4:04:8b:
9c:73:3f:d1:b6:83:4a:33:62:d7:43:fc:2f:4d:d0:27:5c:ad:
23:2d:56:f2:00:e4:fa:9d:95:73:a8:46:26:89:04:8b:21:fd:
e0:34:b3:fa:f9:17:ce:9d:58:14:7c:41:ab:1b:c2:38:c2:0c:
bd:8d:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:27 2026 by rpki-client