Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: a3xtJXcBrHQVCeR7gWOPxPEXU92QUpX2unbWHUM7KOA=
Subject key identifier: F4:99:F4:2E:6B:DB:1C:FF:6F:A4:9B:C6:86:A2:C5:1F:6B:A0:EF:E8
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019FAAF61EA029EE1A02A0C89827E349BB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: hV2yNQKrncgxSCX9a79Rl8hh5B+7z3iIeF9LppHW5UE=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:1e:a0:29:ee:1a:02:a0:c8:98:27:e3:49:bb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=f499f42e6bdb1cff6fa49bc686a2c51f6ba0efe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:c4:b3:4c:e2:dc:f6:8c:f8:f1:50:0a:9e:
ae:f1:a8:78:6f:d6:2f:95:5e:22:5f:7e:b5:0d:8e:
8c:c6:30:c1:b7:01:d1:7f:33:6e:a5:39:99:02:3b:
ae:66:2a:94:f4:9e:6c:77:52:7d:23:18:d8:cf:29:
ed:e9:b8:a2:36:e1:b1:11:6e:5e:5d:43:59:df:24:
51:56:cc:35:3b:a5:f5:64:7e:b0:13:fd:25:93:56:
ab:a5:fb:df:41:0d:74:f6:1b:16:22:b3:fc:4c:01:
12:f6:0e:06:2f:50:39:aa:3c:2c:02:71:b3:e8:31:
95:90:99:ef:83:eb:76:7e:52:49:5b:c7:6d:24:4f:
f0:68:c5:98:58:38:3c:38:a5:02:3a:6f:1c:44:02:
af:7f:a3:52:03:55:fe:ba:2f:d6:7d:0c:f1:47:4e:
54:21:c4:21:c7:6b:58:9b:58:22:19:c0:50:e8:38:
2a:42:d9:be:e1:f8:a5:1a:35:b5:9f:aa:d2:85:03:
0c:de:5c:88:35:84:5a:6b:ce:43:41:03:e7:33:68:
65:73:e8:1d:79:73:56:42:d4:26:53:0c:50:d2:17:
8e:2c:95:55:ad:5d:68:e1:38:68:30:0e:3a:11:2a:
3d:cf:6b:99:dd:a5:89:32:92:1d:27:9b:9c:21:08:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:F4:2E:6B:DB:1C:FF:6F:A4:9B:C6:86:A2:C5:1F:6B:A0:EF:E8
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:e9:66:0f:6f:e9:00:45:bd:a5:34:9f:9b:e2:81:cc:18:
56:c5:0d:92:89:5b:6b:35:45:73:b0:68:bc:01:67:93:70:28:
1b:8e:be:0e:57:57:b5:44:fc:1f:ae:ff:0a:6e:1e:51:22:c3:
48:2d:e8:80:22:fa:35:23:aa:11:01:14:7b:00:26:a1:a0:7b:
4b:23:f4:8b:15:67:71:57:68:05:67:27:d5:5e:e0:bc:f6:16:
e5:dc:c2:59:be:cc:7c:c6:ac:72:ce:08:bf:e7:c3:f4:91:64:
f3:7d:e8:f3:f8:c8:cb:57:33:34:f9:e9:54:44:bf:39:00:84:
3e:e1:a6:7c:1b:76:90:6b:eb:db:bf:9e:a4:9c:f9:dc:cc:4c:
16:82:b3:42:2c:26:07:d1:52:4d:ae:d9:ec:5a:b5:8d:13:cc:
27:0c:b9:a8:a9:23:48:a1:70:6d:54:94:8c:82:fe:53:24:21:
0e:1f:95:8e:c5:15:88:d4:d6:b3:a6:a2:d0:a9:10:73:97:1f:
a6:d1:50:83:42:0e:f9:34:15:e8:b5:4a:18:5f:a4:a5:8b:82:
f0:a9:f9:23:01:94:bd:b3:b7:66:5d:e9:04:f3:9f:df:9e:4d:
f7:51:92:5d:79:e9:59:42:16:5f:c1:b0:95:65:df:82:68:f7:
e4:27:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:38:57 2026 by rpki-client