Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: hhjt2gx0929USAyK/QXhvEAM9HHZ94b53Bds14705Es=
Subject key identifier: 9D:95:78:17:BB:F1:1E:E8:0E:2A:1E:EA:4E:F3:55:D4:E8:F5:FD:2C
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019E3004A146F49E5DB4C34C70ACE90FD9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0E85
Signing time: Sat 16 May 2026 09:01:10 +0000
Manifest this update: Sat 16 May 2026 09:01:10 +0000
Manifest next update: Sun 17 May 2026 09:01:10 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: fb2SlK4ZLQjuS2Cy1bJfzlpL16kiweaER16bVUzDzvY=)
2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:a1:46:f4:9e:5d:b4:c3:4c:70:ac:e9:0f:d9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: May 16 09:01:10 2026 GMT
Not After : May 17 09:01:10 2026 GMT
Subject: CN=9d957817bbf11ee80e2a1eea4ef355d4e8f5fd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:4a:bd:d9:66:6c:7f:d9:32:eb:aa:11:66:
64:79:67:95:d0:ea:e9:e7:55:69:26:9a:3e:6c:d5:
4f:6b:50:d2:a9:0e:ce:92:be:e2:49:ec:60:35:58:
f4:26:f7:e7:25:77:56:e5:9f:25:58:a2:2e:15:a3:
c6:bc:29:b8:95:53:8a:81:2e:90:28:09:6f:9c:0f:
dc:a8:75:7d:b4:47:64:fd:85:2c:32:4f:d6:48:20:
e5:48:5a:75:b2:4c:c0:dd:e2:f9:00:47:38:76:5e:
d2:d3:af:0f:6d:8c:75:ab:28:74:de:cf:28:37:16:
5c:ba:7e:a4:c7:37:36:ba:8e:f9:ad:0d:9a:f8:03:
31:17:7d:c3:29:0e:0e:aa:55:1c:ec:c1:d6:a3:8b:
43:30:c0:32:8b:fe:d5:1b:f0:c9:9e:6e:15:c4:f5:
d2:bd:b8:72:1d:d7:5a:cb:79:4f:04:2d:15:34:7a:
f9:e8:c0:0c:9b:b8:63:7f:c5:60:e5:e0:d3:ca:84:
2c:6f:52:17:71:e7:10:55:04:c8:ad:bc:5a:2e:30:
76:d2:60:83:6d:22:0a:a4:6f:6d:80:b2:0c:e1:c5:
72:17:59:c8:85:e1:a9:7b:e3:14:e9:77:e5:99:42:
48:37:2b:9f:a9:c6:c2:ad:57:7e:db:ec:b8:2d:ca:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:78:17:BB:F1:1E:E8:0E:2A:1E:EA:4E:F3:55:D4:E8:F5:FD:2C
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:98:5b:a9:43:3b:44:21:bf:0d:b1:ab:40:8b:ea:f2:9a:99:
76:db:e0:86:2e:b6:51:cb:e7:de:de:e9:4f:fc:20:28:81:47:
01:cf:74:a7:c9:2b:92:a9:42:e4:bd:ee:3c:93:0a:b9:1f:32:
6b:06:dd:49:c0:2a:56:16:b4:ed:4d:39:08:f9:82:a5:d2:24:
b4:53:85:f7:d9:8f:0f:3c:44:df:cc:3a:0d:9a:48:c4:59:ca:
10:9a:75:0e:8a:d7:97:b6:ab:28:7b:b0:f1:99:c6:e1:7b:09:
1f:7f:c8:30:cf:4a:07:c1:12:a0:08:ce:1e:0e:8e:40:75:ba:
e2:dd:86:af:8f:20:44:53:7c:aa:62:1a:c0:7f:12:19:40:8c:
27:04:32:73:44:0d:68:82:3d:a3:02:a8:58:de:d6:4d:96:ea:
ac:cc:e4:8b:22:b2:f0:0d:5c:77:67:19:5a:d6:b8:bd:50:98:
2d:27:e4:63:53:92:2f:ec:6a:60:a8:75:1d:03:f6:4f:ce:22:
66:05:51:a4:dd:ad:bf:91:82:c1:6e:52:4a:01:04:c9:63:dc:
29:86:63:c9:61:f0:8b:e1:8b:83:22:50:26:6f:ac:29:b9:d1:
ff:7d:25:c6:9e:25:54:20:14:3f:9c:8c:04:a3:a6:64:78:bc:
51:fb:4e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBKFG9J5dtMNMcKzpD9n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2
MDE3Y2UwHhcNMjYwNTE2MDkwMTEwWhcNMjYwNTE3MDkwMTEwWjAzMTEwLwYDVQQD
Eyg5ZDk1NzgxN2JiZjExZWU4MGUyYTFlZWE0ZWYzNTVkNGU4ZjVmZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO1KvdlmbH/ZMuuqEWZkeWeV0Orp
51VpJpo+bNVPa1DSqQ7Okr7iSexgNVj0JvfnJXdW5Z8lWKIuFaPGvCm4lVOKgS6Q
KAlvnA/cqHV9tEdk/YUsMk/WSCDlSFp1skzA3eL5AEc4dl7S068PbYx1qyh03s8o
NxZcun6kxzc2uo75rQ2a+AMxF33DKQ4OqlUc7MHWo4tDMMAyi/7VG/DJnm4VxPXS
vbhyHdday3lPBC0VNHr56MAMm7hjf8Vg5eDTyoQsb1IXcecQVQTIrbxaLjB20mCD
bSIKpG9tgLIM4cVyF1nIheGpe+MU6XflmUJINyufqcbCrVd+2+y4LcpY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2VeBe78R7oDioe6k7zVdTo9f0sMB8GA1UdIwQY
MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt
NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl
LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5hbqUM7
RCG/DbGrQIvq8pqZdtvghi62Ucvn3t7pT/wgKIFHAc90p8krkqlC5L3uPJMKuR8y
awbdScAqVha07U05CPmCpdIktFOF99mPDzxE38w6DZpIxFnKEJp1DorXl7arKHuw
8ZnG4XsJH3/IMM9KB8ESoAjOHg6OQHW64t2Gr48gRFN8qmIawH8SGUCMJwQyc0QN
aII9owKoWN7WTZbqrMzkiyKy8A1cd2cZWta4vVCYLSfkY1OSL+xqYKh1HQP2T84i
ZgVRpN2tv5GCwW5SSgEEyWPcKYZjyWHwi+GLgyJQJm+sKbnR/30lxp4lVCAUP5yM
BKOmZHi8UftOCQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:11 2026 by rpki-client