Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: VNLyD2Sgth6Pry5xCOJjMJ4DM/9/FoXIPPDg9sbWjxM=
Subject key identifier: 0C:6C:86:E9:95:3E:39:53:69:D5:92:EC:54:EE:31:4C:28:58:13:D9
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019FA116C808093675B5AFE0BF9A848F7696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0531
Signing time: Mon 27 Jul 2026 01:00:52 +0000
Manifest this update: Mon 27 Jul 2026 01:00:52 +0000
Manifest next update: Tue 28 Jul 2026 01:00:52 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: dtXvFyrgzz3hX10qm/P8guwcA/zajCvLYAsX4IEl9wE=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:c8:08:09:36:75:b5:af:e0:bf:9a:84:8f:76:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Jul 27 01:00:52 2026 GMT
Not After : Jul 28 01:00:52 2026 GMT
Subject: CN=0c6c86e9953e395369d592ec54ee314c285813d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:86:38:69:b8:5b:82:0b:e7:dd:d4:8c:2a:
1f:73:ca:0a:bc:37:c8:e6:38:cc:36:ff:5d:ca:b3:
44:38:5a:38:39:11:34:9a:5b:bf:2e:c7:9c:54:7f:
44:dd:e5:36:f1:5f:b9:a0:7f:db:d0:4e:a3:f1:a0:
5f:91:22:63:14:c5:f6:9b:9e:9a:58:a5:1d:24:68:
be:b8:97:98:22:a9:a6:0b:8e:1a:e8:24:e1:63:50:
c3:17:f1:ac:e0:9e:d6:9f:2d:11:5b:73:04:84:a0:
e2:43:e3:b5:58:a0:b2:30:84:80:43:17:0a:4b:77:
d5:82:c3:a6:6b:39:37:55:00:ac:a9:0e:ee:22:9c:
a3:30:d5:05:65:d8:aa:ae:b8:b1:93:e3:91:2c:54:
3a:33:3c:16:a8:09:32:9b:27:29:98:74:2a:ac:99:
69:7c:f1:7a:ae:73:cb:da:8d:1e:7a:0b:ee:61:c2:
21:d3:0c:89:d7:9d:cb:f7:e6:81:f5:33:68:51:2a:
42:14:7e:2b:1f:3f:51:60:68:bf:22:31:f4:c8:6a:
93:04:d3:5b:74:4b:42:7b:5e:64:58:0e:c4:83:d6:
cc:50:cc:3e:e6:bc:7c:6e:2a:71:b7:d0:da:47:7b:
31:07:64:36:cf:d6:dd:c3:e6:df:42:85:3e:f9:20:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6C:86:E9:95:3E:39:53:69:D5:92:EC:54:EE:31:4C:28:58:13:D9
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:b7:b7:dc:1e:67:f0:a1:81:21:a9:89:9d:1c:01:aa:8d:
9d:4a:21:72:51:db:8e:1c:1d:ee:e1:9d:58:f0:e2:7c:0e:8a:
e9:d5:25:01:16:49:99:0b:36:c2:f4:c2:a4:1c:d0:5c:bf:cd:
dc:55:b6:37:e4:af:ff:33:28:a2:d6:23:f9:f7:5f:77:f5:84:
a0:a2:8f:c2:db:33:4b:61:a3:58:e3:ec:f3:ff:2d:12:bb:03:
8f:c7:a9:fc:70:c0:fa:29:ed:7c:8c:ca:43:9a:1e:62:9f:ab:
fd:20:b9:4b:e8:0e:0d:7c:9d:c3:c3:24:2e:f0:c2:b4:0d:1c:
6e:94:31:ce:af:5a:8c:87:62:fc:6d:8d:d0:c1:02:e0:fa:2c:
58:00:76:d1:c2:66:bb:3d:0b:e5:fc:ac:f3:7a:e0:d3:d6:9e:
6e:36:f3:18:05:0b:03:d9:ca:89:f4:0e:a8:89:03:33:ae:57:
35:a8:81:c1:e7:1c:11:23:9c:e3:a3:55:4f:1d:af:0b:10:40:
16:39:dd:ed:66:89:f6:63:80:42:16:9e:6b:dc:c7:19:94:d7:
3c:e0:3d:a9:a8:c9:4b:ef:7b:bd:9b:2f:09:82:42:79:d2:d4:
53:93:8a:7f:2d:03:fd:3f:49:6e:37:41:2c:14:44:a3:e6:66:
8d:9a:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:47:54 2026 by rpki-client