Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: UCDOFCHat1ZH/YOWlos8vy7w8lKFZsIgLxNSkZ/PKMg=
Subject key identifier: 8B:41:4B:6E:10:46:E3:EE:14:0B:B7:53:49:D5:1E:F5:E2:05:FB:C3
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019D394165E64BDBD693A88EE95865431E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 17E1
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: q5OWaNvxWJPCt5ntDjIWXwlMfoye+kVNi4FwALn2Ck0=)
2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:65:e6:4b:db:d6:93:a8:8e:e9:58:65:43:1e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=8b414b6e1046e3ee140bb75349d51ef5e205fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:77:2c:31:41:10:20:16:f0:ec:f1:d0:f9:
b3:98:64:1d:23:cb:70:70:dc:ab:01:d6:f9:9f:13:
ce:38:7c:62:97:29:cb:68:f4:cc:73:20:16:24:ff:
9d:6a:5b:05:36:db:79:92:70:a7:bc:50:a9:b6:7e:
9d:a3:3d:50:8e:a0:c1:36:a8:ac:88:bb:29:8b:9f:
00:7f:39:c6:40:c2:df:1e:3f:d1:bb:e5:f1:08:db:
0a:78:89:42:dc:dc:00:13:33:09:67:a5:ed:2e:d8:
c9:3d:81:ca:75:dd:0e:1b:c8:31:9f:42:e7:20:4a:
e8:1a:a3:a6:bd:41:f8:aa:c6:8b:d6:ad:07:74:0c:
18:b4:0a:13:0d:23:4f:82:d2:c6:9a:06:70:32:44:
a3:c7:85:25:af:08:b1:f4:bb:9d:6e:26:b7:0f:7f:
69:1d:a9:87:0e:38:8d:e5:b6:08:2a:27:15:82:81:
5b:69:fb:f3:83:93:40:66:64:e1:f9:e3:b7:34:57:
09:64:7e:01:57:6b:d5:08:08:ef:3d:e9:18:f9:fd:
4e:89:87:92:53:af:d0:3e:4b:0e:dd:39:c4:3d:a6:
a3:74:a0:93:fe:e0:97:3e:73:16:32:67:30:d6:3a:
2d:e2:d9:fd:09:74:7e:6e:80:4f:dd:a2:4b:25:4d:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:4B:6E:10:46:E3:EE:14:0B:B7:53:49:D5:1E:F5:E2:05:FB:C3
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a5:57:85:a7:a1:e4:fc:94:ed:3d:da:aa:1c:14:50:e9:c6:
07:f1:3f:9b:6f:89:42:b4:50:30:f7:c5:9a:02:56:6b:12:58:
79:b9:fc:04:bd:d6:bb:37:ea:4b:bb:df:48:b5:6b:79:27:2b:
aa:51:2f:96:4e:a8:27:bc:b2:44:4b:6f:a2:4f:c8:98:5d:0a:
b2:08:23:89:55:ab:b9:b6:4b:d3:cb:4b:c8:f6:aa:45:24:d6:
c9:fb:bb:98:a2:5f:3d:64:42:2f:6a:d8:3f:16:13:48:2e:1f:
4e:1c:b3:6f:81:1c:37:ae:1d:8d:0e:bb:d5:63:3c:50:c6:29:
0a:ab:8d:b7:7b:49:56:55:34:70:97:cd:b8:ef:4e:ab:4f:04:
1e:2e:41:9a:ae:11:98:b1:7b:a0:10:01:b2:c5:26:b5:de:51:
fe:98:af:fe:e8:e1:14:f2:74:83:09:3c:84:21:d5:d2:16:44:
f9:66:e6:28:56:91:e2:b9:81:fb:b9:a6:e3:c7:d7:fd:bf:93:
dc:25:ca:e0:16:a4:d0:c9:f6:0a:b4:2c:23:65:e1:99:bc:ee:
3a:5c:04:ad:99:68:18:c3:5b:61:a5:b0:89:f7:39:55:ff:17:
b6:97:73:1d:d4:11:f7:fd:65:22:9b:ae:11:b2:3e:59:c5:27:
68:fb:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:50 2026 by rpki-client