Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: kdK5aTa8w7exOUZKSF+mOJ0mq3yh1O11j50+u10fwYs=
Subject key identifier: 42:36:1F:D8:30:73:8D:AA:26:4E:63:F0:C4:FC:41:5D:C2:C6:23:53
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019D04AF16F574E751195E9385B2F76885BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 115C
Signing time: Thu 19 Mar 2026 06:01:16 +0000
Manifest this update: Thu 19 Mar 2026 06:01:16 +0000
Manifest next update: Fri 20 Mar 2026 06:01:16 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: VLwtaw7EhqhQztsVRize0ESTRPBkbrbzeKvbBcQX9Tw=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:af:16:f5:74:e7:51:19:5e:93:85:b2:f7:68:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Mar 19 06:01:16 2026 GMT
Not After : Mar 20 06:01:16 2026 GMT
Subject: CN=42361fd830738daa264e63f0c4fc415dc2c62353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:75:68:cd:05:04:17:6b:4d:1a:6f:c6:cb:
1a:a1:69:2c:94:e3:7d:71:b3:d2:6c:2a:5c:3a:a1:
17:89:b7:88:99:54:b5:77:6b:67:fd:a8:71:57:33:
db:5c:94:48:11:2b:49:ca:5d:da:4a:e8:cb:b9:6b:
bc:4c:64:19:90:a0:8b:03:d3:32:b3:24:02:e7:da:
4a:b0:29:64:ce:39:eb:bb:22:fc:e1:1f:6b:77:19:
32:5b:ce:59:28:16:09:81:0c:52:02:29:f5:7d:89:
a2:b1:af:60:9b:98:ce:55:d0:57:3b:ad:73:56:af:
1c:a5:2a:89:93:26:a7:8d:72:ee:90:ba:5d:c3:52:
04:68:65:e6:af:87:86:e8:99:32:e8:21:12:f8:36:
a0:d5:a7:16:12:5d:e4:5e:53:8e:72:49:93:5d:1e:
be:98:9f:02:aa:82:ae:da:a9:1d:ba:d1:d4:e3:0e:
9a:98:a4:72:8b:b8:8c:bf:19:1d:1f:af:f6:4c:16:
73:98:4e:1b:63:13:41:ec:1c:9b:19:66:34:de:86:
f4:01:96:7f:59:06:67:a6:78:d3:97:51:70:fb:df:
19:08:67:2e:be:4d:ad:25:81:12:29:79:cb:19:40:
52:e2:85:96:cd:3b:54:f4:d3:2a:46:52:dd:a5:1e:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:36:1F:D8:30:73:8D:AA:26:4E:63:F0:C4:FC:41:5D:C2:C6:23:53
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:a4:45:13:85:b5:e4:0a:af:85:33:c4:73:a7:3a:c2:e9:
53:92:17:95:f6:c6:fa:58:f5:92:28:8a:31:2f:00:18:b6:db:
58:fc:46:19:53:e5:f5:06:65:53:61:f9:f5:c5:cb:0e:af:a7:
fd:72:aa:4a:96:46:6a:e8:1e:3a:30:ce:0e:58:78:23:f1:ca:
5c:96:f3:8c:b0:9b:9e:a0:54:ba:3f:fb:66:0a:42:60:82:b7:
ed:7d:fc:cf:7f:22:ba:8d:0e:ed:c2:a9:ef:03:c0:1d:91:ce:
d0:bf:a8:91:c3:94:d3:56:ce:67:4f:c4:bc:10:05:fd:1b:cf:
78:af:9f:26:42:c2:33:32:0f:0d:1e:09:96:05:7a:f5:f3:69:
95:3d:6f:2d:73:5c:c8:f7:9d:81:18:ed:8a:f5:9f:fe:71:15:
56:e6:18:c7:55:ae:40:e6:82:91:a2:89:00:6e:94:70:d4:43:
3a:62:3f:53:db:fb:09:42:52:90:49:9d:de:c1:85:33:34:98:
e9:05:7a:ac:a1:40:0f:2a:1c:76:d3:ae:22:c8:aa:41:d5:92:
60:d3:de:79:7c:c7:7d:ca:9a:6d:75:18:91:75:0f:67:70:46:
2a:0d:9b:64:e5:95:d6:65:cc:5c:9b:35:ec:83:91:17:c9:06:
72:be:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:28 2026 by rpki-client