Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier: xaWvtVkC97cLsZdIM/r8xhl8ll+DMeTUFhusUMpPHZA=
Subject key identifier: 6A:41:06:97:8E:F4:F0:D0:CB:F3:C3:22:57:CF:81:9B:E1:56:D5:CF
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial: 019D39413CE9342A0103CEDD83A72DDC2681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number: 0AA1
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: I+gX2aEYghO92Y9XM0jFuczRrzg0a6vykjYaniKHDQA=)
2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3c:e9:34:2a:01:03:ce:dd:83:a7:2d:dc:26:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=6a4106978ef4f0d0cbf3c32257cf819be156d5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:8f:81:58:f3:38:cb:e4:21:2c:df:7b:fd:
5a:ec:7e:79:a5:90:8d:62:f0:84:eb:c3:a1:e1:8f:
e1:bc:46:19:0e:b6:fa:39:0c:51:55:43:4b:19:7d:
c0:24:c4:ff:67:5e:3f:78:9e:a4:99:f9:a8:d7:15:
57:9b:46:ae:9d:9d:76:37:6a:c6:fb:79:38:9b:b5:
ec:4a:c9:11:5c:a8:7a:8c:34:9a:97:33:22:6f:ee:
16:f9:3a:be:4f:c4:8e:e1:42:7a:62:f8:6c:57:bc:
72:7d:7f:02:1f:e4:76:8a:98:2a:66:63:3a:c2:dc:
3c:3b:bc:b6:2d:57:c1:7f:a3:98:0d:fd:03:75:01:
6d:64:07:a0:6a:d7:4c:6b:9b:50:05:c4:28:b8:97:
85:87:58:e5:93:f2:e9:7b:40:e6:7b:09:18:f4:40:
da:a8:92:a7:c4:0a:0c:9f:67:07:89:d2:d7:1b:15:
1a:3a:98:81:87:c6:3a:22:78:bf:2d:c6:b3:4d:6f:
27:c1:db:14:f7:72:eb:c3:a0:5c:60:12:1d:c4:eb:
8f:27:cf:60:1d:64:11:67:26:59:cf:19:8d:38:9c:
34:07:09:c7:2c:0b:95:1b:52:68:a0:c6:51:7a:a1:
e9:90:85:54:cd:b9:74:4e:49:3b:a9:2b:11:76:91:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:06:97:8E:F4:F0:D0:CB:F3:C3:22:57:CF:81:9B:E1:56:D5:CF
X509v3 Authority Key Identifier:
keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d5:a6:c6:41:15:64:a3:6f:58:30:9c:c9:55:57:20:75:ca:
35:b7:cc:f8:ec:04:ed:55:38:51:56:d9:93:36:77:f2:47:07:
bb:9d:f1:92:18:af:7b:15:a5:53:3c:bf:1e:79:66:5f:35:4a:
84:af:4b:ba:f9:7d:64:da:71:0f:7c:02:55:f8:c3:00:23:98:
bd:8c:33:cf:3f:f5:ae:ce:46:28:4c:7f:56:3a:d8:49:82:fd:
3c:5d:b4:92:3e:d6:4c:e3:3a:05:bb:8c:1b:91:1b:67:18:47:
cc:7d:5d:81:d9:6c:f3:a3:dd:9b:44:37:6c:6d:2b:4b:07:f5:
0f:df:13:43:44:81:c5:0c:96:70:2d:a2:8d:cc:77:5b:40:9e:
2c:01:8c:11:24:c0:70:a1:34:e2:93:1a:ea:40:1c:84:0a:0c:
b0:04:22:c4:10:d3:61:7a:1f:d1:9c:6c:1c:9f:cc:20:99:63:
8b:b1:9b:05:d3:32:5f:6b:46:cd:f4:9c:78:63:02:84:a2:8a:
72:11:9b:38:65:1b:6e:86:66:c9:c5:b4:01:99:b6:1e:75:38:
7a:91:68:fc:a0:6e:8b:d7:d9:9d:b4:19:0d:b2:28:3b:75:82:
37:37:67:b1:ec:d5:1b:f3:3f:45:a2:0e:0c:55:54:ce:2f:e3:
0b:f1:00:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QTzpNCoBA87dg6ct3CaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2NkMDlhNTRiZmE2MzE0MTk5N2NkNjUzYjc3YmM5OTM5
MmVmNjIwHhcNMjYwMzI5MTEwMTA5WhcNMjYwMzMwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg2YTQxMDY5NzhlZjRmMGQwY2JmM2MzMjI1N2NmODE5YmUxNTZkNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4CPgVjzOMvkISzfe/1a7H55pZCN
YvCE68Oh4Y/hvEYZDrb6OQxRVUNLGX3AJMT/Z14/eJ6kmfmo1xVXm0aunZ12N2rG
+3k4m7XsSskRXKh6jDSalzMib+4W+Tq+T8SO4UJ6YvhsV7xyfX8CH+R2ipgqZmM6
wtw8O7y2LVfBf6OYDf0DdQFtZAegatdMa5tQBcQouJeFh1jlk/Lpe0DmewkY9EDa
qJKnxAoMn2cHidLXGxUaOpiBh8Y6Ini/LcazTW8nwdsU93Lrw6BcYBIdxOuPJ89g
HWQRZyZZzxmNOJw0BwnHLAuVG1JooMZReqHpkIVUzbl0Tkk7qSsRdpFPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpBBpeO9PDQy/PDIlfPgZvhVtXPMB8GA1UdIwQY
MBaAFNDM0JpUv6YxQZl81lO3e8mTku9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWIt
M2I5OTA4NzhhNTJiLzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWItM2I5OTA4NzhhNTJi
LzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9WmxkEV
ZKNvWDCcyVVXIHXKNbfM+OwE7VU4UVbZkzZ38kcHu53xkhivexWlUzy/HnlmXzVK
hK9Luvl9ZNpxD3wCVfjDACOYvYwzzz/1rs5GKEx/VjrYSYL9PF20kj7WTOM6BbuM
G5EbZxhHzH1dgdls86Pdm0Q3bG0rSwf1D98TQ0SBxQyWcC2ijcx3W0CeLAGMESTA
cKE04pMa6kAchAoMsAQixBDTYXof0ZxsHJ/MIJlji7GbBdMyX2tGzfSceGMChKKK
chGbOGUbboZmycW0AZm2HnU4epFo/KBui9fZnbQZDbIoO3WCNzdnsezVG/M/RaIO
DFVUzi/jC/EAVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:54:01 2026 by rpki-client