Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: ZxJHX5vNIgmhqyI5rruTxfVdgn+AS+qTZR+fX1stQoM=
Subject key identifier: 7A:80:5B:E9:E0:89:B9:B8:E0:AD:6D:79:01:8E:29:DA:72:D6:B4:74
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 01A199FCFA7029FDCD778F0548BC4B4871D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 14CF
Signing time: Mon 02 Nov 2026 02:00:55 +0000
Manifest this update: Mon 02 Nov 2026 02:00:55 +0000
Manifest next update: Tue 03 Nov 2026 02:00:55 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: vohjnk+UVXcFifd9uMWpOCoxmD2bnj7KJwWkkSoN04E=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fc:fa:70:29:fd:cd:77:8f:05:48:bc:4b:48:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Nov 2 02:00:55 2026 GMT
Not After : Nov 3 02:00:55 2026 GMT
Subject: CN=7a805be9e089b9b8e0ad6d79018e29da72d6b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:c5:a4:9e:78:b0:c9:44:dd:36:1a:7f:d4:
34:53:6c:91:02:24:23:d5:17:f0:a5:6b:14:aa:18:
48:52:dd:d8:52:a7:2a:1b:72:6d:f8:f4:83:9d:03:
3d:51:7e:45:b5:9f:d8:b6:dd:19:5b:f0:a2:fb:94:
e6:45:3e:66:1a:4a:37:65:22:74:26:12:89:7e:f4:
86:e3:57:02:4f:3b:e6:7f:8e:21:4c:a1:37:0f:3f:
4e:54:b4:f6:8f:d2:32:4a:29:e4:a2:0b:18:15:67:
91:e4:55:d4:55:54:42:02:01:f3:88:0f:ed:ef:e9:
e4:08:8d:ba:28:12:97:57:7f:a3:8b:33:a6:8c:af:
bb:50:e8:30:7c:3d:e7:54:05:6a:bb:08:50:a9:0e:
5e:d3:ff:ca:c4:bf:ef:45:23:28:1c:82:2c:5b:17:
b8:30:9e:00:2d:61:33:49:5f:d8:45:8e:da:e3:da:
ac:c8:62:0a:cb:85:f8:ae:a8:b0:37:87:07:3d:a1:
2b:d6:5f:28:b1:ed:d0:a4:f3:59:a8:0e:dc:9a:d7:
9d:cd:14:f9:66:3c:36:6d:75:ba:4b:5b:6b:61:e9:
14:8d:bc:c9:b6:c8:81:fb:80:97:4d:8f:f2:1f:df:
1a:e5:1d:ba:e7:cf:4d:26:a9:77:fe:1d:3d:d6:09:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:5B:E9:E0:89:B9:B8:E0:AD:6D:79:01:8E:29:DA:72:D6:B4:74
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:7e:03:1e:a3:40:dd:86:15:07:2a:db:a5:8b:66:39:fd:
a8:69:9e:b8:95:e8:6d:1c:95:d2:4f:5e:1c:a3:b9:5a:ac:de:
6a:64:ba:62:4b:e5:23:5a:c9:f1:96:19:cc:75:82:f5:48:07:
d5:f7:3f:a7:46:c1:fa:33:d0:ed:98:09:42:b9:a0:c7:6c:fb:
70:ab:c3:ef:ac:de:13:4c:d6:af:4a:0e:02:8d:96:61:99:f7:
e3:5d:36:b3:3b:9a:37:ca:c8:9c:27:ea:2d:e3:ad:b1:46:7c:
28:c9:93:79:3e:b9:76:e1:21:6e:b6:12:cf:5d:12:40:d4:78:
a6:fb:fe:f0:25:cd:66:af:47:f7:89:14:ec:b5:a5:98:4d:51:
4b:d1:85:86:d2:c1:00:03:74:dd:e0:7f:64:12:93:a9:b3:95:
61:bb:a8:d8:cb:07:ec:71:c8:50:c0:2f:4f:fa:09:45:a5:43:
ff:7c:32:04:42:11:36:de:9c:96:67:fc:4f:c8:73:7b:d0:80:
77:12:62:7b:f7:62:c6:42:51:ba:67:f9:73:ba:31:60:89:27:
49:b3:79:88:fe:c9:a0:aa:e6:be:1f:74:9a:c2:69:84:cd:7a:
d7:9d:5d:b6:44:d3:39:e8:bd:67:ef:ab:af:8f:ef:84:9a:50:
9b:05:3e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGZ/PpwKf3Nd48FSLxLSHHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1
YTFhMzkwHhcNMjYxMTAyMDIwMDU1WhcNMjYxMTAzMDIwMDU1WjAzMTEwLwYDVQQD
Eyg3YTgwNWJlOWUwODliOWI4ZTBhZDZkNzkwMThlMjlkYTcyZDZiNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIXFpJ54sMlE3TYaf9Q0U2yRAiQj
1RfwpWsUqhhIUt3YUqcqG3Jt+PSDnQM9UX5FtZ/Ytt0ZW/Ci+5TmRT5mGko3ZSJ0
JhKJfvSG41cCTzvmf44hTKE3Dz9OVLT2j9IySinkogsYFWeR5FXUVVRCAgHziA/t
7+nkCI26KBKXV3+jizOmjK+7UOgwfD3nVAVquwhQqQ5e0//KxL/vRSMoHIIsWxe4
MJ4ALWEzSV/YRY7a49qsyGIKy4X4rqiwN4cHPaEr1l8ose3QpPNZqA7cmtedzRT5
Zjw2bXW6S1trYekUjbzJtsiB+4CXTY/yH98a5R26589NJql3/h091gnkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqAW+ngibm44K1teQGOKdpy1rR0MB8GA1UdIwQY
MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt
MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm
LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeR+Ax6j
QN2GFQcq26WLZjn9qGmeuJXobRyV0k9eHKO5WqzeamS6YkvlI1rJ8ZYZzHWC9UgH
1fc/p0bB+jPQ7ZgJQrmgx2z7cKvD76zeE0zWr0oOAo2WYZn34102szuaN8rInCfq
LeOtsUZ8KMmTeT65duEhbrYSz10SQNR4pvv+8CXNZq9H94kU7LWlmE1RS9GFhtLB
AAN03eB/ZBKTqbOVYbuo2MsH7HHIUMAvT/oJRaVD/3wyBEIRNt6clmf8T8hze9CA
dxJie/dixkJRumf5c7oxYIknSbN5iP7JoKrmvh90msJphM16151dtkTTOei9Z++r
r4/vhJpQmwU+uQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:20 2026 by rpki-client