Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: ws1UUdSAqSk7GlvlEpyUt13mhxx438pvi5xMdhoJV+Q=
Subject key identifier: 6A:0F:56:CC:56:03:1C:BB:5E:92:46:1A:53:CD:9A:BB:59:94:20:41
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019D070BF25B1EC4A334380A724B9669F051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 08FD
Signing time: Thu 19 Mar 2026 17:01:56 +0000
Manifest this update: Thu 19 Mar 2026 17:01:56 +0000
Manifest next update: Fri 20 Mar 2026 17:01:56 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: T3zM5wQS3IiGOUX0pLJ1vKOItb7BxSsTGPeV3VQxtDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:0b:f2:5b:1e:c4:a3:34:38:0a:72:4b:96:69:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Mar 19 17:01:56 2026 GMT
Not After : Mar 20 17:01:56 2026 GMT
Subject: CN=6a0f56cc56031cbb5e92461a53cd9abb59942041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:9d:fa:78:db:8c:c4:7b:35:5d:cf:3b:3d:
52:2d:6d:a8:e7:7e:8f:4b:e0:5c:22:25:1a:6e:d4:
a8:6b:c3:6d:4d:6f:2d:a8:7e:3f:f2:b0:70:83:f9:
15:a5:e2:22:c2:04:69:8f:f3:44:ca:f7:64:a4:82:
3e:b6:e9:25:c0:9d:46:c8:8c:83:38:b7:25:a8:46:
e1:3b:ad:ec:8b:6d:af:2d:5d:61:4b:26:74:c8:99:
37:fc:2d:ab:70:61:aa:37:3a:82:dd:b0:ac:71:04:
4b:d7:78:c9:cc:49:bf:f8:bf:07:50:71:8c:f4:cc:
e1:b7:bc:5e:ce:90:95:5f:f8:aa:93:5b:50:6b:09:
b6:da:47:b4:ea:50:47:79:5a:51:9a:13:90:5f:32:
ac:64:22:b5:0a:4b:67:28:e7:d0:20:8b:61:fd:39:
0c:cd:f9:d6:10:ac:e8:a8:48:53:eb:64:1a:65:3c:
9c:d2:ef:2c:f3:e4:8b:5b:d6:3d:ef:83:f8:95:cc:
b2:5b:ba:50:a9:c3:86:65:ac:4d:dd:63:cc:19:a1:
03:bf:be:99:9b:32:4f:38:85:13:6f:5c:bd:f5:fb:
c3:26:e9:3a:60:d3:92:24:f2:bb:35:d5:09:f8:bf:
a5:b6:99:9d:2c:40:ca:b1:3a:54:2f:e0:2a:ea:0b:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:56:CC:56:03:1C:BB:5E:92:46:1A:53:CD:9A:BB:59:94:20:41
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:73:9c:6c:98:f9:62:9e:82:da:6b:26:05:8b:3e:b5:7f:
26:27:39:63:b0:ed:c2:dd:74:d3:be:39:f2:4f:ff:c7:9e:79:
92:21:e1:6b:42:d4:d1:7b:93:d5:bd:4f:48:6c:e4:55:0c:8e:
23:34:b2:dd:7b:c5:d7:8f:47:ec:18:e7:02:a9:c2:88:e4:50:
61:e9:57:83:40:31:d2:3d:b0:d4:1a:1e:97:95:48:59:60:b5:
23:ce:82:f1:da:59:e3:c7:0f:30:bd:e3:e3:9d:85:ef:08:c4:
5d:94:22:92:59:af:b5:d4:cb:ef:9b:e1:a3:c4:45:2f:5b:d2:
f8:9b:76:e4:c8:a8:eb:13:3e:0d:b1:2f:36:50:20:62:cd:70:
59:1a:27:a5:5a:e1:30:89:a3:3f:39:71:40:57:71:55:c8:68:
0b:eb:5b:78:66:74:75:94:75:2c:fe:4a:76:29:af:26:2b:66:
38:26:3b:56:36:7f:41:a9:bb:6e:5b:51:21:09:31:cd:4a:40:
48:58:20:5e:79:45:9a:cb:aa:d2:80:07:03:8a:d2:f6:64:c5:
45:35:d5:2c:1b:34:94:59:5d:c8:3a:bb:89:bb:45:42:b2:97:
35:1e:27:e6:c9:13:c9:9a:ce:b1:33:65:7a:94:77:2e:5f:42:
da:11:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:33:30 2026 by rpki-client