Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: HFFMF4KpjMEdL3HBzbyrB5kVcokDvpaELMqGQ1MfaW0=
Subject key identifier: 2C:66:27:A7:E2:90:A6:D3:3B:0B:4D:E0:43:8B:06:7D:D2:7B:C6:24
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019D390A459C79F0E91EA99470D87BB70603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 077B
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: zw9RLY0CFPaK+nFMJahEm+N8/Nke4MhSfZ49bozmzWU=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:45:9c:79:f0:e9:1e:a9:94:70:d8:7b:b7:06:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=2c6627a7e290a6d33b0b4de0438b067dd27bc624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:4c:98:93:d4:1e:03:38:f7:4e:b7:c8:70:
e5:02:f4:d5:30:c7:73:f2:98:07:1e:69:28:9b:bb:
a6:0c:f1:1b:b0:58:68:6b:75:29:b2:1b:47:96:81:
f1:ad:72:55:58:f2:cb:b9:34:27:2e:d1:18:81:0f:
73:ce:53:d0:6e:6b:5b:96:a8:d2:83:4b:ab:04:e7:
b7:79:29:05:23:2f:7e:34:2e:63:88:ad:7b:97:4f:
1b:4e:ff:f7:f7:eb:92:ec:04:58:4f:71:9b:f2:af:
a6:df:da:13:3e:0b:4e:4b:a2:3e:5a:57:9e:80:bd:
6d:ed:61:03:c5:67:b5:cd:3f:a0:03:d9:8e:e7:e7:
21:ff:00:6a:83:b2:c6:3f:dc:bf:88:b8:77:79:8a:
ed:63:bd:f3:a9:eb:46:db:cc:0d:0b:4b:2b:bb:8b:
32:66:9c:78:7f:2d:3e:1b:32:79:d2:db:38:9a:93:
f9:7a:30:8c:9a:28:04:91:92:ec:b5:1d:55:7b:ea:
6d:2a:62:1a:93:31:d4:29:93:94:30:f6:c6:4b:fa:
43:fc:3f:33:75:3f:39:c9:ac:60:9a:fd:85:ce:7b:
64:9c:6b:31:85:cb:d3:dc:2e:ce:34:1e:91:b8:bf:
73:1d:ce:c2:dc:9a:c7:94:06:77:82:c6:7f:27:b2:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:66:27:A7:E2:90:A6:D3:3B:0B:4D:E0:43:8B:06:7D:D2:7B:C6:24
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:cf:63:5d:b8:55:40:a8:93:b6:0a:a8:20:26:9f:1f:06:
06:5a:2e:4c:4a:65:8a:0d:ff:57:db:bb:b2:e0:e4:81:e1:02:
2c:e6:52:5e:3c:90:12:37:7a:1a:2a:be:41:7c:61:e0:52:27:
fd:6a:ef:c7:7f:8d:13:d6:ae:c0:c4:61:3d:4a:a6:42:60:2e:
7c:61:b2:4b:d0:ac:2d:4d:5f:4a:77:be:eb:d5:a2:64:4b:1e:
cf:59:6f:2e:21:ec:31:4b:71:32:5b:6c:c5:14:93:1c:b4:d0:
e3:9c:6c:1f:ca:6c:be:3d:c7:1e:71:ad:8b:10:4c:ee:16:72:
16:78:8c:77:47:8e:53:cc:2f:79:1e:54:14:4a:b3:57:78:9c:
04:68:a5:20:8f:71:c3:9b:7b:d8:3a:6f:13:0f:d4:81:0e:d4:
f4:a3:87:81:a2:8f:09:c8:f7:c1:10:98:43:8d:7e:ba:31:42:
db:26:7a:f1:49:07:74:9d:69:aa:3a:dd:84:d6:72:1d:bf:b0:
30:5b:90:8b:2a:76:1d:a9:2b:81:11:f0:3b:cc:4f:c6:5f:3a:
ff:60:46:ae:ad:36:ca:dd:5d:36:23:04:3b:e2:d6:3b:a9:97:
2c:69:15:9c:67:48:75:a7:42:c1:4a:b7:80:9e:0e:cd:7c:92:
7c:b9:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:34 2026 by rpki-client