Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: VEOSyuSkc48ePFTXJABDAfOl/8Uapq7kdz8UAJffilI=
Subject key identifier: 0C:54:43:25:C5:F0:9B:9C:57:72:33:E9:AD:39:57:FF:57:DC:4A:14
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01A1DFF13B06DE3631A9AF65E947A5015F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 163B
Signing time: Sun 15 Nov 2026 16:01:30 +0000
Manifest this update: Sun 15 Nov 2026 16:01:30 +0000
Manifest next update: Mon 16 Nov 2026 16:01:30 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: YNWHSQXnnL1j7PVGOzWzRlC3R7dyCTYIcLfmrQ7Fa5w=)
2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:3b:06:de:36:31:a9:af:65:e9:47:a5:01:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Nov 15 16:01:30 2026 GMT
Not After : Nov 16 16:01:30 2026 GMT
Subject: CN=0c544325c5f09b9c577233e9ad3957ff57dc4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:78:4f:16:fe:88:71:21:96:5b:03:2c:c6:
ad:43:d6:1d:57:d7:0e:0e:3a:e2:f3:56:6d:d1:dc:
07:f7:7d:5a:99:f1:35:8f:0c:88:11:f6:8c:e8:02:
29:fa:c2:32:00:b9:4f:e1:d4:fd:f7:be:73:f9:26:
f0:5e:bf:9c:9e:90:b8:ef:91:f7:9c:6a:31:ab:ef:
06:9d:f8:11:69:f4:f5:98:8b:46:0b:ca:0f:8a:2d:
c5:ff:9c:21:54:88:94:0c:c9:22:b9:ed:15:a5:53:
4c:e9:b9:ce:20:8b:ab:b6:95:a7:4d:5d:53:ed:58:
25:81:6d:d8:39:51:06:a0:74:96:22:0e:a0:7e:12:
9a:bb:f2:0b:88:d9:62:d3:b9:c9:67:7c:b4:a9:fa:
e5:57:66:38:c4:b1:2c:a3:8d:df:ff:2e:73:b6:15:
a9:db:f4:85:f0:ad:1b:14:85:eb:02:eb:1c:e5:31:
12:c1:0e:6d:a5:b2:fa:5c:e0:c6:80:b3:06:8f:b0:
0e:03:7e:4c:94:df:55:31:b1:40:f4:a7:de:fd:d5:
75:ce:b9:2b:74:5e:fd:2d:b8:77:ab:7b:0f:94:9e:
bf:c4:34:4c:95:38:b2:d8:11:a3:c2:6f:7c:19:f0:
64:20:36:4e:34:73:7a:28:45:c8:f7:54:04:bd:08:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:54:43:25:C5:F0:9B:9C:57:72:33:E9:AD:39:57:FF:57:DC:4A:14
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:02:86:b7:32:80:90:ee:79:7f:69:f3:3d:db:f3:ea:98:e5:
54:7a:d2:12:d2:f0:fb:a5:83:1a:db:28:a4:aa:c0:04:ed:1d:
1a:97:12:b0:6e:6b:35:a5:a1:b3:81:10:b4:6f:8c:0e:1b:b9:
df:3c:98:a8:e1:03:00:c4:fa:1f:a2:6e:16:92:61:7a:cb:a9:
58:5c:f3:a7:90:82:ac:bd:00:ba:5c:62:38:b8:54:90:ef:f1:
84:c9:c0:4c:42:a7:ff:61:75:52:32:3e:d5:8e:4f:7e:08:73:
59:38:e6:bf:7d:7b:d1:75:60:90:68:8b:6d:a8:4f:ae:b7:72:
46:92:aa:10:29:51:bf:7b:dd:86:12:64:eb:d7:f6:63:75:db:
73:04:8d:85:ad:99:c1:1a:01:81:3c:a7:51:ec:35:9b:0c:cd:
74:fa:3c:4b:72:b0:cf:68:29:63:8d:8a:44:17:4b:16:9d:d9:
44:73:0e:fc:9d:69:3e:22:ef:74:91:11:e7:73:97:67:da:29:
b3:1b:26:ab:6f:39:78:d6:47:b8:41:8d:0f:58:a1:fd:12:27:
28:85:f2:6b:96:79:cb:18:f6:68:ba:01:b0:20:ea:80:40:1f:
25:10:20:11:15:93:b5:ab:b0:f2:07:b3:df:8d:7a:f1:54:cd:
08:f1:aa:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8TsG3jYxqa9l6UelAV8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjYxMTE1MTYwMTMwWhcNMjYxMTE2MTYwMTMwWjAzMTEwLwYDVQQD
EygwYzU0NDMyNWM1ZjA5YjljNTc3MjMzZTlhZDM5NTdmZjU3ZGM0YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyot4Txb+iHEhllsDLMatQ9YdV9cO
Djri81Zt0dwH931amfE1jwyIEfaM6AIp+sIyALlP4dT9975z+SbwXr+cnpC475H3
nGoxq+8GnfgRafT1mItGC8oPii3F/5whVIiUDMkiue0VpVNM6bnOIIurtpWnTV1T
7VglgW3YOVEGoHSWIg6gfhKau/ILiNli07nJZ3y0qfrlV2Y4xLEso43f/y5zthWp
2/SF8K0bFIXrAusc5TESwQ5tpbL6XODGgLMGj7AOA35MlN9VMbFA9Kfe/dV1zrkr
dF79Lbh3q3sPlJ6/xDRMlTiy2BGjwm98GfBkIDZONHN6KEXI91QEvQhgawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxUQyXF8JucV3Iz6a05V/9X3EoUMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwKGtzKA
kO55f2nzPdvz6pjlVHrSEtLw+6WDGtsopKrABO0dGpcSsG5rNaWhs4EQtG+MDhu5
3zyYqOEDAMT6H6JuFpJhesupWFzzp5CCrL0AulxiOLhUkO/xhMnATEKn/2F1UjI+
1Y5PfghzWTjmv3170XVgkGiLbahPrrdyRpKqEClRv3vdhhJk69f2Y3XbcwSNha2Z
wRoBgTynUew1mwzNdPo8S3Kwz2gpY42KRBdLFp3ZRHMO/J1pPiLvdJER53OXZ9op
sxsmq285eNZHuEGND1ih/RInKIXya5Z5yxj2aLoBsCDqgEAfJRAgERWTtauw8gez
34168VTNCPGq7A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:10 2026 by rpki-client