Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: tD+KbSsRbuN/Q/Ss+PLPvD3Jvk4zvxwlqDGf3PP+ik8=
Subject key identifier: 77:04:77:4D:FC:5F:54:0E:C4:37:45:99:B1:48:2D:D3:99:CA:CB:F4
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01A13E26A9F4CED0D73BFAAF308163B42CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 138C
Signing time: Thu 15 Oct 2026 06:01:23 +0000
Manifest this update: Thu 15 Oct 2026 06:01:23 +0000
Manifest next update: Fri 16 Oct 2026 06:01:23 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: 5WjhpakhI03cXstiU6rbysYcWSE8T5H0sbps398qzBQ=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:a9:f4:ce:d0:d7:3b:fa:af:30:81:63:b4:2c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Oct 15 06:01:23 2026 GMT
Not After : Oct 16 06:01:23 2026 GMT
Subject: CN=7704774dfc5f540ec4374599b1482dd399cacbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:9d:47:78:a6:fe:c0:57:83:8d:52:1b:4d:
5b:c7:5d:24:2e:bc:5b:b4:17:76:fb:f4:96:4a:3f:
4e:96:dc:62:db:3f:6f:b3:33:72:fe:f3:8a:d4:82:
49:e7:0a:8f:8c:91:5d:cf:bc:39:8b:d0:a0:1e:d7:
0e:89:76:47:1f:b6:ac:fa:ea:71:a6:b3:55:ae:a6:
f5:50:dc:b8:60:96:59:35:72:3c:1b:bb:8a:a3:71:
d4:8f:c9:1b:97:c4:3b:e1:21:4d:f2:ee:95:4b:6a:
1c:8e:cf:e8:9e:ea:c6:08:ad:15:0a:d5:ce:c3:57:
1a:cd:f9:37:8d:4a:f8:bd:08:40:54:a4:fb:ab:d5:
93:2a:06:15:6e:3d:f2:fb:4d:53:5d:1b:7b:b5:04:
dc:54:52:47:d6:f6:8a:c9:6e:d3:f6:cf:d8:d2:7e:
a6:2d:c8:20:0f:f0:12:60:9b:64:b9:23:6e:94:1c:
f5:55:ed:79:29:54:25:04:4d:4f:c2:d1:01:da:91:
c2:85:03:90:24:9b:72:e9:bc:83:de:69:02:44:f7:
48:11:f4:b9:fa:99:00:c2:6f:8d:5f:52:43:29:d0:
1b:71:57:2e:e3:45:bc:e0:c4:d4:4f:00:23:99:ec:
ff:53:a5:ef:3f:09:f7:fd:cf:70:53:68:fb:bc:cf:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:77:4D:FC:5F:54:0E:C4:37:45:99:B1:48:2D:D3:99:CA:CB:F4
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:44:b5:5e:00:50:1c:5d:47:19:91:35:26:05:23:14:d7:41:
e3:3b:d6:99:8b:3e:af:be:1c:de:95:1f:21:0b:f1:0c:8b:13:
06:47:ab:40:c2:47:4d:8f:1f:e8:f4:c8:b0:5a:a6:1f:00:40:
96:c8:ed:d1:e9:fa:1d:ae:45:b8:6d:b3:b3:c4:18:48:af:25:
64:3b:fb:9d:52:57:89:6b:92:5b:4a:65:fb:c5:30:7f:a6:6e:
29:3e:a9:4e:76:90:5d:6b:2b:09:7d:b3:f9:20:b0:a0:69:b6:
34:60:de:37:96:87:3e:5e:08:fc:e2:d7:fa:a6:c2:65:e5:14:
c5:7f:d4:24:8a:26:6e:1e:60:e5:74:d0:8c:16:c1:58:15:93:
73:34:ed:08:0a:92:49:42:8d:af:a2:03:b2:6c:14:12:fc:f2:
a5:74:2a:87:d8:70:24:53:72:9f:0a:57:ad:a4:36:66:25:52:
62:18:85:30:16:dc:1d:cd:e4:25:03:81:2a:56:9d:28:73:8f:
aa:40:46:79:cd:f1:d0:f9:72:23:0e:90:8e:aa:9f:e1:d5:6a:
55:80:3e:17:c5:bb:08:4f:4a:47:c7:a5:87:8d:a7:42:5a:c8:
b3:46:9e:8c:fc:b6:60:9f:e4:a0:c8:4d:b1:98:92:c7:9f:32:
11:11:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:33 2026 by rpki-client