Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: FZ1GdBgSQM2Yx1E5dJLDIKDyatbDKL6CVavGQ0jIQSw=
Subject key identifier: C4:03:7E:7C:D0:F9:74:D4:8E:F9:B4:8B:FA:39:CF:5B:56:A1:20:92
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019EFACBDDA89A91B8BBCF49A69520EFB02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 1260
Signing time: Wed 24 Jun 2026 18:02:04 +0000
Manifest this update: Wed 24 Jun 2026 18:02:04 +0000
Manifest next update: Thu 25 Jun 2026 18:02:04 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: LYW1Y2AW+HEyuiupHa766krmJY6cfs+frDLQ0B7jCis=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cb:dd:a8:9a:91:b8:bb:cf:49:a6:95:20:ef:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jun 24 18:02:04 2026 GMT
Not After : Jun 25 18:02:04 2026 GMT
Subject: CN=c4037e7cd0f974d48ef9b48bfa39cf5b56a12092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:fa:53:f8:80:96:78:b3:22:8c:bf:28:8f:
16:84:ff:0b:7f:7c:1c:a3:b4:10:ed:d8:d7:b4:ac:
90:22:f7:9b:f3:4c:20:8e:57:23:7f:bc:5f:19:d7:
fa:ab:93:c4:ac:f1:89:21:08:66:a3:ea:c0:0e:b4:
77:e3:68:6d:d4:21:ba:7b:aa:e6:d2:94:44:21:cf:
15:f0:a8:f6:f1:c2:fc:7e:5b:89:46:9d:03:11:ad:
1b:08:4b:67:fe:c2:b3:18:ac:f4:d8:d3:fb:0b:9f:
64:78:d7:e6:82:57:c1:fb:f8:42:45:83:ec:53:0c:
b5:d1:fd:68:6a:f7:8b:4b:f6:28:18:e3:df:b9:f8:
3e:42:eb:42:5e:32:12:04:9a:48:90:6b:f3:b5:85:
0e:55:4b:92:83:4f:3d:df:77:1a:0e:f5:32:e2:03:
a3:f9:12:7a:99:3d:40:32:f0:a2:3e:37:11:c8:bc:
e6:14:ae:54:e7:8a:a2:8a:8d:2a:de:1d:fe:9e:40:
3d:88:0b:a4:8e:c2:ec:31:f2:7a:1f:17:10:c9:e3:
5f:37:6e:cb:cc:ba:72:c5:8d:d9:95:5b:6b:d1:08:
33:b7:b6:60:77:05:f7:e4:02:b6:6b:4f:4f:5f:4f:
db:b0:a2:89:3c:37:fb:e5:d8:f6:5f:1f:69:e7:cf:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:7E:7C:D0:F9:74:D4:8E:F9:B4:8B:FA:39:CF:5B:56:A1:20:92
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:7e:79:3d:e0:e7:25:6f:05:2f:9a:0e:b6:67:98:dd:d3:
91:43:3b:00:27:44:71:df:ba:7a:63:7d:f0:c7:a9:ed:b3:37:
e2:d7:2e:aa:17:1c:35:c5:bd:1b:ab:fd:bf:69:03:b4:da:f3:
ee:7e:7f:77:eb:6a:cc:6c:6a:26:ac:ba:a6:e6:8f:8a:84:4d:
ee:e1:2d:3d:41:89:f4:bf:a0:1f:7a:fb:63:d0:21:af:35:6f:
85:6b:27:ce:e1:0d:d9:04:ee:63:fe:fb:67:54:ae:c8:a3:b5:
c9:0d:f2:e9:46:82:f4:56:6e:1b:78:3e:95:f5:60:3c:87:05:
6e:68:d3:fa:6c:ce:ad:3e:48:67:09:bf:79:bc:a2:f4:23:2d:
b1:21:1a:04:dc:ea:7c:47:6d:05:33:11:cb:08:4c:63:0f:f6:
53:52:08:7d:5e:c2:52:e4:f8:b1:23:77:c9:5e:ac:24:94:4c:
7c:91:6c:96:65:0b:f0:57:a5:a9:a9:a8:6f:94:b4:24:ec:24:
a8:8a:ab:86:e2:02:cd:aa:af:91:33:05:e9:de:9b:8e:80:60:
30:82:0e:e2:e6:be:21:87:53:aa:83:bb:e1:89:63:bd:d0:b2:
b6:f4:91:90:bd:aa:0b:d9:fc:6a:6e:a2:0c:a5:33:4e:d7:3b:
62:72:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:47 2026 by rpki-client