Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: Uly5VdGRS5ChdT4hFEmg3kWEfuHPl4Uz9vMSDCdhpe4=
Subject key identifier: 49:48:F6:4C:42:04:CB:07:5B:6D:A5:BB:3B:7D:AF:A2:70:66:9E:E8
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019EF75BE11A4FC02BA5686F9F4C9909B8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 09FE
Signing time: Wed 24 Jun 2026 02:00:54 +0000
Manifest this update: Wed 24 Jun 2026 02:00:54 +0000
Manifest next update: Thu 25 Jun 2026 02:00:54 +0000
Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: fkSBodBJ2IU++zbDklnjCMUwTKibUVj1+gf+vamz4cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:5b:e1:1a:4f:c0:2b:a5:68:6f:9f:4c:99:09:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Jun 24 02:00:54 2026 GMT
Not After : Jun 25 02:00:54 2026 GMT
Subject: CN=4948f64c4204cb075b6da5bb3b7dafa270669ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:fc:73:68:45:e1:59:cd:0a:5d:97:5b:df:
5b:b7:0e:38:b6:dd:e4:60:06:3c:22:f4:43:a9:2a:
40:16:37:b6:15:42:c3:ee:3a:dc:48:9f:e6:42:5c:
9d:b6:4a:0c:9a:80:35:6b:af:29:29:44:3b:27:47:
ba:72:c5:b3:39:5a:0f:82:f1:e8:bb:5f:e4:da:c2:
4a:96:ed:ab:7f:d8:2d:91:93:4f:7b:74:b7:3a:17:
ab:bf:7c:46:b6:cf:5e:87:99:06:68:99:6b:b0:10:
98:d2:9c:96:dd:bc:c7:06:ba:29:d3:33:77:db:0f:
33:9e:0e:26:ef:c9:6a:f3:a5:5d:b3:7a:09:27:58:
93:bb:40:25:c8:20:fe:60:80:35:c8:4b:57:05:0f:
ec:bd:db:6d:82:dc:49:d9:91:9c:ad:36:9a:46:eb:
2a:34:17:c2:1a:40:39:e0:75:84:c6:d0:42:71:50:
11:a9:6f:45:e1:10:d2:ba:f0:43:1b:fd:9e:ba:33:
0f:cc:d4:cc:65:45:ab:dc:90:ff:fc:ba:f5:47:17:
6a:85:24:3b:4b:07:64:f9:3b:ca:b8:31:19:4b:46:
54:6d:13:a9:b7:5d:9a:67:51:c5:e2:0a:d1:f1:6d:
09:f6:55:90:c0:ad:bc:db:bc:c9:d8:07:ee:53:50:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:48:F6:4C:42:04:CB:07:5B:6D:A5:BB:3B:7D:AF:A2:70:66:9E:E8
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:08:1d:64:d7:50:51:c8:9c:bb:39:fa:e9:39:14:a6:f3:06:
20:17:f5:d1:0a:22:23:12:3c:aa:36:f1:b9:23:c3:88:21:c4:
b6:12:2b:35:35:f3:d9:91:b9:ec:a7:6a:92:7c:23:db:1a:7f:
11:52:a7:63:70:9b:14:de:4b:5c:fe:75:22:31:c7:01:32:67:
db:8b:bb:d2:4c:31:e0:c6:ea:c0:a7:2d:82:5a:c0:e8:a9:52:
10:db:e3:18:63:ae:0b:9c:e9:13:a6:d0:74:2d:e9:79:1e:2c:
2e:aa:20:09:fc:22:b9:9f:1b:4d:bb:89:13:3a:00:71:7e:b4:
53:48:a0:41:51:12:6d:b8:2e:ac:40:51:6e:92:3f:d2:8b:bd:
b3:db:e8:85:5f:82:bf:98:60:50:b7:b3:cb:96:d3:0d:a3:25:
16:ff:a5:82:af:03:32:4b:36:8e:d1:a8:a3:16:6e:db:65:9f:
e5:26:d1:5d:0a:38:b7:97:5d:58:6d:bb:89:c7:c8:f8:c5:77:
df:e1:42:29:b7:3d:6d:f0:2d:ce:89:cf:81:2c:b3:d6:31:50:
17:2c:94:21:b8:09:4b:54:e6:fd:e3:a5:2a:3b:0d:28:93:8b:
ef:fc:43:e1:35:4e:df:72:4d:f8:60:78:7c:7e:80:d7:29:f4:
a6:55:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:03:07 2026 by rpki-client