Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: khle6wLfRIPmXb7bGk8+mGV4k8t+JRqdu7bZ+QecF1c=
Subject key identifier: 33:6B:C8:B3:27:72:5D:0A:C1:5A:C5:23:4E:A9:F8:6F:2A:2F:40:5E
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019DEE5C1216A9842AE795601CC49468CBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 11D5
Signing time: Sun 03 May 2026 15:01:44 +0000
Manifest this update: Sun 03 May 2026 15:01:44 +0000
Manifest next update: Mon 04 May 2026 15:01:44 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: GSdcZOhVh5Lz+zahnPMVMhXp+ya6DxIv+Jaflmgknpw=)
2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:5c:12:16:a9:84:2a:e7:95:60:1c:c4:94:68:cb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: May 3 15:01:44 2026 GMT
Not After : May 4 15:01:44 2026 GMT
Subject: CN=336bc8b327725d0ac15ac5234ea9f86f2a2f405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:75:76:82:71:f2:e9:a9:58:56:3b:99:33:
5c:34:b1:b3:06:bf:60:fa:4f:87:63:f1:d8:2d:50:
f2:c6:ad:15:32:a7:e6:06:67:45:35:0e:32:5e:4d:
19:57:73:07:c4:b0:fc:02:f6:72:d2:fb:31:c1:e1:
ca:67:a4:63:0f:89:61:2b:ca:f0:b1:99:c9:f5:07:
d1:7a:71:ce:6a:bf:b4:5d:a7:19:3b:7f:81:e2:33:
88:b3:9e:d0:ae:2e:65:86:a8:12:44:cc:7b:61:7e:
7d:42:08:5c:43:50:f5:67:b1:f9:e4:d6:f5:33:b6:
7d:8b:cc:d3:3a:3b:9d:a4:8d:67:68:9d:e5:6e:5b:
80:07:95:e8:cc:5f:24:56:58:09:da:18:55:ac:68:
81:26:28:23:80:c1:f9:94:09:76:cf:e8:f8:14:5d:
c6:e3:97:41:fb:96:43:d7:10:ee:f2:33:2c:23:20:
14:80:af:38:a0:f5:e3:30:55:97:9c:fa:cd:85:02:
2a:53:6b:12:30:e3:15:42:cc:ea:22:c2:c7:f2:74:
9f:e1:a0:fc:35:9c:fb:29:3b:92:b5:21:b2:5a:62:
b0:2e:dc:5c:c3:eb:e9:cc:49:4b:f9:1c:67:bb:44:
b0:b0:ed:16:52:c5:2d:7a:76:27:ce:59:70:d8:a7:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:C8:B3:27:72:5D:0A:C1:5A:C5:23:4E:A9:F8:6F:2A:2F:40:5E
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2d:b6:8f:64:aa:89:52:b3:70:ac:00:85:58:6f:0d:ec:d5:
2a:a7:34:04:0b:e8:aa:8b:b5:04:d3:10:0d:b2:cd:f4:3c:fd:
57:d9:71:5d:79:f4:71:a2:60:bb:76:09:a3:47:76:25:e1:40:
0b:cb:e5:5b:b3:e9:7f:00:95:d1:7b:50:6c:02:42:eb:49:06:
5f:1a:33:4b:3b:80:b9:12:f4:83:d9:e7:48:f3:3a:51:81:18:
69:f1:37:34:e4:84:34:c5:fc:6c:07:0f:71:e8:91:9f:0d:ff:
cb:d1:26:0f:96:1c:67:45:1b:f1:92:0f:5b:44:88:77:26:01:
42:59:0b:9a:92:a0:3c:b4:f2:2e:25:d1:d3:ed:fd:6c:46:75:
f9:53:bc:9e:cd:5e:76:03:bd:48:db:de:a3:bf:8f:5c:2f:59:
49:c9:3b:4d:29:f2:8f:1a:2d:6c:15:5c:e5:a7:92:ac:f6:2f:
1c:6e:24:ad:3e:2a:54:b4:86:5d:2e:f7:14:16:8b:bb:8f:a3:
90:e3:58:b1:07:91:7f:52:54:d7:8c:31:3e:1b:b3:d7:8b:6d:
d6:af:b9:dd:e8:a9:c2:4a:15:c6:d4:3d:b1:e5:15:ab:1b:8e:
18:fc:70:c1:61:d9:42:b5:bc:92:0d:69:4a:4f:62:b0:8a:f4:
6f:c3:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:05 2026 by rpki-client