Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: aBztkym3DwuXnMlNl4iAdzjHTdAZyQN39NAl4iTevhs=
Subject key identifier: 58:0E:A7:E8:83:05:D4:8D:C2:FB:C2:3F:4C:00:BE:32:DF:B2:4D:D9
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019D38D3196AD5902CEB2056675EC494E751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0E05
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: 7H2kusW/3QQACLodW4hOnp+wAthsNK6YyVdeC+6SMMg=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:6a:d5:90:2c:eb:20:56:67:5e:c4:94:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=580ea7e88305d48dc2fbc23f4c00be32dfb24dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:c3:f0:ac:9f:fd:de:e0:c7:09:bf:ef:9f:
ea:3a:dd:20:55:fc:f8:35:88:55:a7:f9:40:4b:cb:
38:53:33:b2:a0:b4:3d:a3:b5:6e:cd:96:1c:bf:e9:
68:37:6c:75:ed:5b:2e:bb:38:07:94:d5:22:9d:7a:
9d:e8:26:cd:dc:43:44:75:b6:a5:d0:d4:cc:09:8e:
e3:70:44:ba:d5:39:d3:1a:e3:01:26:d2:00:c8:8a:
32:bf:d8:1d:53:6c:95:41:64:8a:41:e5:f6:37:44:
49:7e:60:ae:da:ed:41:56:f9:e2:71:f2:c7:7a:e1:
a2:cb:c4:ad:aa:a8:09:f9:e7:d5:16:a0:03:4d:a6:
b3:eb:cf:f1:83:57:bf:0c:aa:d0:b4:b4:e3:89:77:
84:2c:d5:2a:37:7f:6b:6d:f3:11:65:e4:81:f1:a8:
b0:e5:80:09:85:0a:df:12:c9:5e:ff:91:78:d0:9f:
51:ca:15:44:a3:31:32:ca:d4:00:c8:c6:d0:b9:d0:
29:10:b3:11:ea:5d:e8:b9:54:01:14:20:e7:e5:75:
24:ee:7a:f7:a9:19:60:ff:9f:49:38:83:07:cb:00:
6f:90:96:10:2b:ed:25:2f:c2:92:a1:5d:32:0e:b4:
79:38:47:8d:65:9a:29:73:f7:7c:bb:b8:45:98:63:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:A7:E8:83:05:D4:8D:C2:FB:C2:3F:4C:00:BE:32:DF:B2:4D:D9
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:ed:01:41:41:00:6f:1d:3b:e5:c3:c7:c6:b8:6e:a4:f0:
f2:79:f7:47:3b:94:78:3d:50:eb:77:a7:6e:e5:28:01:d1:d7:
52:8a:76:3b:01:7a:37:c9:2d:9e:7f:b0:fa:e0:58:5e:cb:71:
0b:28:61:93:55:76:c4:96:18:fa:73:21:5e:f7:85:5b:1d:de:
0b:5e:e9:68:a5:af:30:26:98:86:35:ed:d1:27:9b:44:9c:7f:
93:71:23:24:31:cc:bb:43:80:67:62:81:99:3b:7b:f1:db:ec:
77:87:5f:06:4a:a9:7c:4d:fd:c5:be:6d:5f:72:15:e4:3b:90:
12:9a:b2:5a:41:47:ce:aa:f7:f2:51:86:6f:5b:14:05:1d:e1:
8d:6f:87:a3:13:d7:47:4f:24:54:4a:cb:f1:bf:f0:4d:d6:14:
22:39:91:53:c2:ec:1e:bc:3e:46:32:33:8a:eb:4c:d9:01:bf:
b4:54:68:4e:4f:7a:2d:1f:d1:7a:3e:4e:ee:76:4c:66:0a:cb:
ed:17:9a:65:31:fa:25:2a:5c:32:df:d0:3f:47:e4:c4:16:e1:
9e:ed:a8:64:0e:ab:cd:51:a5:e4:25:0c:f2:43:b5:4b:19:80:
f1:f3:77:0d:2d:be:b0:0d:7c:43:c7:e8:51:c0:23:75:d3:d6:
cb:5d:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:29 2026 by rpki-client