Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: 2W8Ii/aia0uAdNaudi88yClAcx+rcr25WlPmsLtTI28=
Subject key identifier: 3D:D8:E7:64:BF:E2:A7:BD:13:4E:9E:4C:4C:58:27:A3:01:76:04:A1
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01A0016EDA01431AC02727DA6F6B1B50F254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 12E8
Signing time: Fri 14 Aug 2026 18:00:36 +0000
Manifest this update: Fri 14 Aug 2026 18:00:36 +0000
Manifest next update: Sat 15 Aug 2026 18:00:36 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: +lvzdoSguDKqFL3jfeqUZAD1tPhVoDNltxLWqBHLaG8=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:da:01:43:1a:c0:27:27:da:6f:6b:1b:50:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Aug 14 18:00:36 2026 GMT
Not After : Aug 15 18:00:36 2026 GMT
Subject: CN=3dd8e764bfe2a7bd134e9e4c4c5827a3017604a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:38:63:47:3e:54:41:02:4b:eb:81:fe:d2:
2d:0f:92:4b:e0:90:06:92:7a:3e:79:c1:bf:36:60:
36:8c:02:09:c1:6f:02:b6:e7:a7:31:a1:2f:4c:5e:
a1:38:75:af:57:2f:d1:b1:5f:60:dc:9a:40:cd:5b:
5f:08:da:84:ec:83:12:59:3d:66:e2:43:7b:6c:5e:
c3:4a:3e:c8:eb:7b:d8:87:77:6d:9f:33:e8:45:48:
59:24:a4:00:e7:49:56:77:3e:dc:3e:90:e1:4b:d8:
95:b5:46:ad:68:46:a9:9c:f2:23:1f:bd:b0:71:ac:
22:bf:77:a1:ea:ad:36:c5:b1:d8:48:e2:37:17:74:
a2:7f:03:94:69:b3:93:84:02:ad:74:14:e2:f5:d1:
b2:28:54:e1:f3:60:2b:9f:ec:2f:e6:3e:ed:26:30:
f8:57:1e:42:57:44:74:80:42:bd:b7:19:b7:9f:48:
bd:56:7d:c6:e5:90:02:5d:ae:96:e1:03:e5:d2:93:
5b:05:34:7b:a0:62:1f:da:4b:de:25:b2:28:fd:a7:
f8:a2:80:be:2a:d4:af:6b:a8:3f:22:62:3a:46:12:
31:f0:81:40:b8:89:5e:fe:f5:63:c3:9d:32:c8:37:
c9:4d:11:12:52:bf:80:48:28:7b:14:f7:b2:c9:f7:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:E7:64:BF:E2:A7:BD:13:4E:9E:4C:4C:58:27:A3:01:76:04:A1
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:98:69:16:6f:2a:ba:9b:4b:02:d0:23:c8:4d:f5:ae:83:e5:
82:cc:9d:2a:2f:25:6a:44:0a:83:56:2d:09:78:55:b9:73:08:
1d:3c:13:f5:48:1d:a8:37:b5:cb:a9:75:55:84:99:2e:4a:3b:
72:a3:cd:74:ed:1e:ac:1a:1b:b5:03:c2:02:f0:d7:1d:b0:ce:
d2:fd:a8:8a:ab:42:fb:03:a0:40:7e:de:6a:9d:72:a2:87:5e:
02:7f:28:f1:77:eb:86:ff:6e:7f:33:15:9f:e3:c7:96:63:e2:
14:ad:bf:ad:74:ce:ce:5b:3b:e3:b9:6d:c3:08:45:d3:e3:8f:
8b:bf:ac:71:8d:0c:cc:c1:ea:19:2c:4d:49:71:df:5d:72:cb:
02:0e:eb:fa:9b:b3:78:2b:2d:8d:b3:ad:5b:b4:33:9b:fd:87:
29:5b:4e:87:26:ce:2b:53:cb:44:34:c4:3d:b0:9e:d2:d3:af:
76:34:ee:73:12:40:41:c4:8d:5b:86:14:90:88:a6:34:93:92:
76:13:e8:4f:91:cc:03:25:e8:76:d9:9f:52:ee:dc:05:ca:45:
db:3f:6e:ab:c0:0f:aa:6c:fd:4b:6c:5b:54:d5:8e:3e:4a:1e:
91:f3:f3:0f:e1:29:c4:48:81:c0:6d:60:c8:ba:a6:cb:00:fd:
6f:b6:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:51 2026 by rpki-client