Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft
File: 0ZHOrh_4itqODi-VUGddFTMokeQ.mft (raw, json)
Hash identifier: 73fdXaumzcqTmliPekadQ8beQK+d3N9ENM2NamPAY/s=
Subject key identifier: 32:23:DC:07:56:5F:72:6E:2F:52:EC:71:54:33:10:5F:D9:89:07:49
Authority key identifier: D1:91:CE:AE:1F:F8:8A:DA:8E:0E:2F:95:50:67:5D:15:33:28:91:E4
Certificate issuer: /CN=d191ceae1ff88ada8e0e2f9550675d15332891e4
Certificate serial: 01A03F3C4F2290EEFE34B7AA8625A5C0D22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZHOrh_4itqODi-VUGddFTMokeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft
Manifest number: 0246
Signing time: Wed 26 Aug 2026 18:01:52 +0000
Manifest this update: Wed 26 Aug 2026 18:01:52 +0000
Manifest next update: Thu 27 Aug 2026 18:01:52 +0000
Files and hashes: 1: 0ZHOrh_4itqODi-VUGddFTMokeQ.crl (hash: TPE4Bymc6tZNreowfiJi/eKUM6kp7A45ggblq52GrfM=)
2: _VYu2mv6bKW7U-bqoazVPbuNZw0.roa (hash: jBfKqmXGL7y6Zilv4tkveGpy7JudLuPoH0FpKfvCBu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZHOrh_4itqODi-VUGddFTMokeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3c:4f:22:90:ee:fe:34:b7:aa:86:25:a5:c0:d2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191ceae1ff88ada8e0e2f9550675d15332891e4
Validity
Not Before: Aug 26 18:01:52 2026 GMT
Not After : Aug 27 18:01:52 2026 GMT
Subject: CN=3223dc07565f726e2f52ec715433105fd9890749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:67:9a:dc:2d:06:69:70:13:d9:8c:ba:13:
db:e4:84:9a:b7:0b:45:f9:cd:f0:bf:c5:8f:22:0c:
3a:b3:18:a9:de:9b:b0:63:6e:04:11:0e:33:cd:a5:
f8:9e:08:44:52:37:01:24:66:5a:23:a9:56:a1:b4:
bb:cc:3e:85:33:ac:4b:d2:b4:2e:a8:61:c2:9a:88:
5b:23:99:7d:be:b4:a4:0c:a5:02:7f:4b:2f:7b:2b:
23:c6:d5:22:c7:c8:cd:7b:15:f5:50:d7:26:38:24:
81:8e:c7:13:c3:5e:15:c6:da:a9:88:0c:b6:9c:e2:
ee:ec:87:0a:42:18:5b:31:64:fe:e6:82:91:bd:b1:
95:28:6a:1b:c4:3f:ef:46:18:0c:fd:08:13:c0:1a:
f7:56:6d:21:f2:7b:06:f7:a2:af:ea:20:67:34:f9:
92:c2:88:a6:86:4f:6d:0d:b8:00:4c:89:3d:c3:a8:
15:d7:41:a6:5d:00:58:b8:c8:92:1d:e3:92:17:77:
65:79:8d:17:f4:ef:3a:01:51:7e:d2:b7:c2:10:92:
5d:07:31:50:80:a0:41:21:21:42:c5:0b:d6:2c:19:
b9:11:d8:c9:9c:49:d0:9b:92:77:56:26:bc:ea:77:
78:0d:17:dc:84:63:ca:a7:78:dc:92:a0:a8:0f:7c:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:23:DC:07:56:5F:72:6E:2F:52:EC:71:54:33:10:5F:D9:89:07:49
X509v3 Authority Key Identifier:
keyid:D1:91:CE:AE:1F:F8:8A:DA:8E:0E:2F:95:50:67:5D:15:33:28:91:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZHOrh_4itqODi-VUGddFTMokeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9f:48:28:f2:6a:3d:39:ad:51:e9:5f:3c:2e:c2:92:df:c1:
7b:2b:36:6f:65:90:51:ff:82:90:17:8c:ab:9e:17:d7:97:98:
f6:c7:91:f6:4f:a8:9f:31:36:ef:89:57:3c:6c:c3:17:cb:23:
98:d4:e3:38:0c:6e:bc:fa:3c:6c:09:e6:35:19:6a:68:74:d5:
74:a3:69:ba:da:2e:7c:40:52:0f:58:c4:45:c2:a3:84:32:19:
f0:7c:45:77:32:f8:61:d2:b8:a4:84:af:24:17:46:ac:60:c4:
fe:f8:fa:91:55:ad:aa:a3:f4:05:a2:64:8b:58:e0:ac:11:e3:
fc:9d:d9:82:24:0b:6d:f5:90:63:90:34:bd:2b:ff:0a:8e:1d:
77:a0:d7:fb:be:ea:68:1c:40:92:df:d8:c7:a2:9d:f5:c1:62:
97:25:52:30:7c:3f:07:2e:a8:b4:cc:e7:20:df:1a:be:2c:94:
e5:09:d3:d8:00:42:eb:71:fa:25:4c:f9:04:bc:9d:a0:34:e3:
fd:b6:3f:89:63:98:77:c3:96:1d:3c:d2:50:40:63:66:3d:33:
d4:ef:00:63:d6:54:f7:2b:dd:d4:39:af:4f:d2:89:85:77:07:
84:68:8a:e6:6c:71:ca:91:ba:72:c2:20:71:ac:8f:31:81:fb:
c2:d3:76:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/PE8ikO7+NLeqhiWlwNIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTFjZWFlMWZmODhhZGE4ZTBlMmY5NTUwNjc1ZDE1MzMy
ODkxZTQwHhcNMjYwODI2MTgwMTUyWhcNMjYwODI3MTgwMTUyWjAzMTEwLwYDVQQD
EygzMjIzZGMwNzU2NWY3MjZlMmY1MmVjNzE1NDMzMTA1ZmQ5ODkwNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdNnmtwtBmlwE9mMuhPb5ISatwtF
+c3wv8WPIgw6sxip3puwY24EEQ4zzaX4nghEUjcBJGZaI6lWobS7zD6FM6xL0rQu
qGHCmohbI5l9vrSkDKUCf0sveysjxtUix8jNexX1UNcmOCSBjscTw14VxtqpiAy2
nOLu7IcKQhhbMWT+5oKRvbGVKGobxD/vRhgM/QgTwBr3Vm0h8nsG96Kv6iBnNPmS
woimhk9tDbgATIk9w6gV10GmXQBYuMiSHeOSF3dleY0X9O86AVF+0rfCEJJdBzFQ
gKBBISFCxQvWLBm5EdjJnEnQm5J3Via86nd4DRfchGPKp3jckqCoD3z61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIj3AdWX3JuL1LscVQzEF/ZiQdJMB8GA1UdIwQY
MBaAFNGRzq4f+Irajg4vlVBnXRUzKJHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpIT3JoXzRpdHFPRGktVlVHZGRGVE1va2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNWNkOTYtYjlkMi00MzRiLWE0MzEt
MWMzNWZiY2U5NjE2LzEvMFpIT3JoXzRpdHFPRGktVlVHZGRGVE1va2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNWNkOTYtYjlkMi00MzRiLWE0MzEtMWMzNWZiY2U5NjE2
LzEvMFpIT3JoXzRpdHFPRGktVlVHZGRGVE1va2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ9IKPJq
PTmtUelfPC7Ckt/Beys2b2WQUf+CkBeMq54X15eY9seR9k+onzE274lXPGzDF8sj
mNTjOAxuvPo8bAnmNRlqaHTVdKNputoufEBSD1jERcKjhDIZ8HxFdzL4YdK4pISv
JBdGrGDE/vj6kVWtqqP0BaJki1jgrBHj/J3ZgiQLbfWQY5A0vSv/Co4dd6DX+77q
aBxAkt/Yx6Kd9cFilyVSMHw/By6otMznIN8aviyU5QnT2ABC63H6JUz5BLydoDTj
/bY/iWOYd8OWHTzSUEBjZj0z1O8AY9ZU9yvd1DmvT9KJhXcHhGiK5mxxypG6csIg
cayPMYH7wtN2BQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:31 2026 by rpki-client