Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: Zd6LW52T3z256QUNwB/BUPqZKvh3UeCSNy8NEkO+FiM=
Subject key identifier: 9A:BE:8F:3D:87:2B:C7:87:E8:B7:EF:9D:D5:DC:D1:97:E1:E4:6A:91
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019CE6DA9E45134D830E76060F0DE1121D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1260
Signing time: Fri 13 Mar 2026 11:00:12 +0000
Manifest this update: Fri 13 Mar 2026 11:00:12 +0000
Manifest next update: Sat 14 Mar 2026 11:00:12 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: 43h6p9xGIoXcv0NZ6mY9HmDfon08MKG5Rbit9QVl9rM=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:9e:45:13:4d:83:0e:76:06:0f:0d:e1:12:1d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Mar 13 11:00:12 2026 GMT
Not After : Mar 14 11:00:12 2026 GMT
Subject: CN=9abe8f3d872bc787e8b7ef9dd5dcd197e1e46a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:72:f5:a8:f1:59:6a:1e:5d:93:e8:3b:03:
68:de:7a:bf:a3:88:98:10:f6:94:c0:67:a4:d6:63:
b2:fd:1b:af:b0:d5:aa:7c:01:3d:1e:a0:ee:9a:1f:
ef:92:8a:89:de:7b:99:ac:c1:d3:d3:54:75:41:6b:
b9:5a:8d:c2:41:1c:d8:83:bd:7f:b1:1e:46:61:52:
44:45:3b:5c:63:1a:f2:7c:32:64:39:f6:9a:e4:0f:
76:9e:72:11:45:c4:d0:41:61:dc:36:b1:e2:e8:05:
19:27:66:85:c2:af:70:c3:73:f8:1c:8c:73:88:68:
0e:e5:34:9a:b7:ee:eb:0a:4a:b8:7d:42:1a:22:b8:
e1:14:f1:0f:de:e2:8a:bd:58:d4:c1:7a:8b:00:98:
5d:72:ab:fc:0a:c0:13:20:1e:d9:aa:eb:4e:9f:40:
3f:0a:ce:86:4b:2c:5b:e1:59:85:3d:c4:2f:f7:4a:
98:32:22:59:81:73:0f:ad:ef:46:9b:29:ac:e7:36:
31:b0:72:f5:61:17:c3:37:f4:65:1c:76:f2:32:45:
08:49:dd:14:27:3b:7f:e1:71:86:cc:82:f1:1f:12:
8a:44:ff:cc:74:88:87:5d:af:94:4f:b2:8b:b4:8a:
da:33:e0:8f:6d:96:45:62:d7:14:f4:b6:a8:c0:b5:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:8F:3D:87:2B:C7:87:E8:B7:EF:9D:D5:DC:D1:97:E1:E4:6A:91
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0b:65:cb:10:90:87:c1:ce:ef:a5:2a:45:10:39:f1:c5:22:
d5:23:17:4b:27:ec:91:08:b8:33:08:27:04:96:41:67:6c:fc:
99:e0:83:03:fb:d2:4a:7a:57:d8:b2:a8:fd:4c:e6:d7:61:7c:
94:75:43:6f:dd:ab:2d:ac:a0:b1:9c:4e:f7:dd:87:1d:b9:dc:
e3:a7:d1:ea:c0:15:85:e6:65:2d:67:b4:20:b9:b4:b8:8c:e0:
bb:54:2d:15:c5:cf:93:7d:a9:c0:31:52:97:ae:f4:e6:a7:76:
f8:47:2e:9a:f7:5c:d5:e2:61:22:93:ee:e3:73:96:fd:b2:f7:
43:6e:23:42:93:69:55:59:b3:be:33:87:ff:c8:cf:2a:2f:2e:
7e:22:78:d6:b6:ec:6f:13:f1:ca:d0:b7:62:0f:01:2a:0b:4f:
5a:64:90:b8:56:ca:85:7b:2a:7e:47:6b:a1:f0:3d:d8:5a:db:
d8:04:98:a0:f3:eb:af:50:e5:5b:7d:bb:92:ea:3b:03:e0:f0:
5b:94:e0:b0:48:c9:ef:c1:3e:2a:ef:71:66:b7:59:6e:9b:24:
c7:c8:71:31:ff:36:16:ee:a3:15:94:d0:0a:a9:96:57:ee:1b:
e7:59:75:4c:63:2a:11:ba:74:61:32:68:77:5d:47:4f:a1:40:
02:50:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:15 2026 by rpki-client