Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: veqq+oD7OhnBHTXVWnuZjCtAVbRzWXEjKrT6lzI/nzY=
Subject key identifier: 6A:B0:5D:7B:3E:8D:1C:76:EA:B2:D1:5B:76:16:F1:AF:9F:E0:B2:75
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01A0E7AF087C72E07FB7E5A164E2F34CE6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1A09
Signing time: Mon 28 Sep 2026 11:03:22 +0000
Manifest this update: Mon 28 Sep 2026 11:03:22 +0000
Manifest next update: Tue 29 Sep 2026 11:03:22 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: UFlq+X7A2iGY3jILIqtsHjlcN4CM3GHbO3oTf7y1r5Q=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:08:7c:72:e0:7f:b7:e5:a1:64:e2:f3:4c:e6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Sep 28 11:03:22 2026 GMT
Not After : Sep 29 11:03:22 2026 GMT
Subject: CN=6ab05d7b3e8d1c76eab2d15b7616f1af9fe0b275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:22:49:b9:d4:a8:9a:44:58:c1:ca:17:98:
9d:81:b7:0c:1e:ec:3b:1f:eb:bb:27:7e:4c:d8:2b:
4f:c4:d8:4e:56:77:29:d4:34:e3:f8:33:a0:60:2b:
74:3e:a0:b5:f5:04:47:8e:e4:b0:08:01:86:3e:d4:
57:6c:5b:ac:80:64:cc:dd:18:32:d2:7d:3e:89:66:
9e:7b:78:1b:1c:17:65:7c:8e:fc:15:1d:75:d1:11:
fc:23:b9:6a:3d:53:11:15:61:9c:56:dd:70:26:87:
c5:bf:89:bf:ac:fa:32:be:b3:22:16:cf:8e:47:c2:
37:6e:5f:d9:95:04:0a:8b:66:f4:34:e0:90:1a:9c:
fa:60:6a:ff:73:42:84:ae:74:e3:f5:9e:5a:ec:2c:
cf:23:55:14:46:00:fa:37:82:42:20:b6:a1:cf:b7:
41:a9:de:3a:d1:54:09:8e:d6:23:72:80:0d:ab:75:
64:ad:74:a7:c5:8c:a2:b6:02:de:8c:b1:ea:fe:81:
ec:3d:23:35:b7:47:4d:85:26:68:c2:8a:01:bc:e3:
9c:b4:a1:41:0e:32:8d:3c:e8:ce:6c:be:df:28:74:
fb:ed:62:9d:d0:1a:57:60:9d:5b:c0:fc:79:32:b7:
79:f7:6b:23:fc:5f:50:ea:a3:3f:78:a3:ca:7c:92:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:5D:7B:3E:8D:1C:76:EA:B2:D1:5B:76:16:F1:AF:9F:E0:B2:75
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3a:6d:5a:99:69:7d:d8:f9:98:90:d3:b4:96:b7:02:1e:59:
03:dd:03:75:ca:97:11:f3:1b:d0:4d:a7:c3:b5:f9:54:2a:f9:
19:e2:5f:21:ce:ab:10:e9:e3:28:7c:dc:86:4f:ad:48:a8:e2:
c7:20:ec:d6:20:b8:b9:1f:c7:9b:01:4d:55:ec:be:da:3b:c2:
ad:cb:06:18:95:22:d5:67:7c:8b:37:09:88:d9:2b:17:30:27:
36:3e:77:35:4d:7a:b6:70:10:10:02:43:b3:26:4f:7d:9d:68:
7c:ce:a4:b7:78:bf:aa:07:2b:c0:96:c9:b7:44:30:a6:11:ac:
17:f8:f5:6f:78:70:ea:a7:17:74:ea:6b:f7:fb:05:4f:e2:48:
52:02:b8:4f:38:4b:0a:00:b4:17:4a:35:1e:7a:83:bd:25:50:
78:e5:de:7a:c8:9e:79:39:ac:fd:57:18:a9:03:ed:b7:e7:1d:
09:1c:d8:bc:b9:57:90:31:d6:e2:52:a4:1c:e7:e1:a7:e7:1f:
65:3d:67:6e:98:b7:89:44:c2:40:aa:03:e3:95:f3:3c:f5:13:
92:88:a5:49:34:7d:40:bf:0b:0c:e3:32:84:6c:8e:99:88:62:
f6:f7:40:fa:7c:be:50:0f:76:db:48:00:81:c1:48:de:ec:68:
7d:19:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:51:45 2026 by rpki-client