Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: W50pVt2QdOMEI0RriXuz2P9qYMexEAAI5UAIebMShcY=
Subject key identifier: 22:43:CA:01:F7:B9:8F:00:3B:43:38:C0:DB:9A:0C:3B:45:A3:48:57
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019D3A1CD8BFA76862FC58EAFE71BB61253B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0F65
Signing time: Sun 29 Mar 2026 15:01:02 +0000
Manifest this update: Sun 29 Mar 2026 15:01:02 +0000
Manifest next update: Mon 30 Mar 2026 15:01:02 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: UQ92nGPTmczeQCH2OpOMdQNScZLM4X4Gs9Py1B0z+vg=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d8:bf:a7:68:62:fc:58:ea:fe:71:bb:61:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Mar 29 15:01:02 2026 GMT
Not After : Mar 30 15:01:02 2026 GMT
Subject: CN=2243ca01f7b98f003b4338c0db9a0c3b45a34857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:02:9f:f7:11:43:74:98:f7:6a:d2:4f:9a:
92:f8:4a:b5:23:17:ab:5c:e9:62:5a:ad:ab:ae:e6:
b6:91:19:d7:b7:7f:ef:12:17:ed:0c:1d:87:3b:e7:
11:24:08:5f:e0:b2:65:3f:1f:02:65:ea:e6:d7:ef:
0b:e8:03:b6:53:f3:b9:d9:b9:27:a4:27:42:e2:42:
71:43:2d:60:c6:ec:03:76:82:73:0b:52:a8:51:8f:
6e:eb:34:29:d5:b5:94:a5:e0:9e:e2:66:83:98:7e:
cc:40:ea:88:65:92:09:d2:3a:21:0e:eb:bf:2b:b6:
c2:b4:44:5e:9e:0a:74:3b:f7:29:95:f9:e6:58:53:
fe:b1:01:44:d1:2e:1e:75:c9:cf:06:11:0d:ab:02:
98:d6:58:f7:a1:72:bb:a2:22:06:3a:62:36:82:a0:
12:98:34:59:37:3f:1c:55:38:a0:8b:1c:b2:ce:eb:
0d:dc:99:0b:6b:00:7c:e3:87:a6:1e:c3:98:60:28:
40:88:a9:34:8e:11:4d:9a:2f:8e:86:f2:39:e4:57:
10:c2:98:6e:8a:bd:e9:b2:a2:1f:31:a7:b8:4e:12:
52:7b:28:d9:1a:87:80:46:9b:ae:58:24:d6:ba:8e:
66:9c:c6:bf:0b:f0:58:10:ba:99:be:a0:60:0b:36:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:CA:01:F7:B9:8F:00:3B:43:38:C0:DB:9A:0C:3B:45:A3:48:57
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:11:58:ad:cf:e3:cc:88:26:8e:cc:22:cb:fe:46:ee:ad:8b:
4d:6e:9c:94:ef:43:ac:89:cb:fe:7f:ab:85:20:f1:48:95:c6:
49:96:e2:cc:2b:0e:c3:f5:3f:cd:94:d0:a9:90:55:3e:2a:9d:
00:aa:fc:c1:06:91:04:eb:6c:4c:9e:77:35:a3:89:c1:f8:1b:
72:4b:b5:b5:9c:5d:2a:5c:ce:47:3f:9a:c7:ab:35:50:fc:36:
53:e5:46:d1:3d:81:b8:f6:49:83:94:cd:6d:8d:06:0e:51:89:
af:21:e3:70:9d:c1:68:69:f1:d8:5a:49:dd:1b:7d:de:e0:e3:
e0:5b:33:06:af:41:56:35:27:0f:24:78:45:ae:6a:a5:10:a7:
e0:ce:3d:04:29:5f:d7:93:49:27:f5:c1:5b:77:05:dc:6e:be:
71:ba:2e:e9:3f:df:7b:22:7a:db:5c:65:7e:e8:12:30:5f:6e:
cb:2b:a7:cb:3d:67:3c:4d:61:76:51:f9:cd:b0:76:a9:99:0b:
e1:67:e9:da:00:89:80:7f:c5:56:d2:e8:9a:bc:a3:bd:d3:4b:
cd:c2:12:c9:f9:2a:a8:91:0a:d1:10:61:22:1d:3f:09:84:05:
c2:c3:dd:b8:eb:56:18:6f:f1:fc:6d:db:28:47:00:f8:25:2f:
3a:24:db:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNi/p2hi/Fjq/nG7YSU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw
OWFkZTAwHhcNMjYwMzI5MTUwMTAyWhcNMjYwMzMwMTUwMTAyWjAzMTEwLwYDVQQD
EygyMjQzY2EwMWY3Yjk4ZjAwM2I0MzM4YzBkYjlhMGMzYjQ1YTM0ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PQCn/cRQ3SY92rST5qS+Eq1Ixer
XOliWq2rrua2kRnXt3/vEhftDB2HO+cRJAhf4LJlPx8CZerm1+8L6AO2U/O52bkn
pCdC4kJxQy1gxuwDdoJzC1KoUY9u6zQp1bWUpeCe4maDmH7MQOqIZZIJ0johDuu/
K7bCtERengp0O/cplfnmWFP+sQFE0S4edcnPBhENqwKY1lj3oXK7oiIGOmI2gqAS
mDRZNz8cVTigixyyzusN3JkLawB844emHsOYYChAiKk0jhFNmi+OhvI55FcQwphu
ir3psqIfMae4ThJSeyjZGoeARpuuWCTWuo5mnMa/C/BYELqZvqBgCzYx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJDygH3uY8AO0M4wNuaDDtFo0hXMB8GA1UdIwQY
MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt
NjY1MTdhM2FjMTlkLzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk
LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRFYrc/j
zIgmjswiy/5G7q2LTW6clO9DrInL/n+rhSDxSJXGSZbizCsOw/U/zZTQqZBVPiqd
AKr8wQaRBOtsTJ53NaOJwfgbcku1tZxdKlzORz+ax6s1UPw2U+VG0T2BuPZJg5TN
bY0GDlGJryHjcJ3BaGnx2FpJ3Rt93uDj4FszBq9BVjUnDyR4Ra5qpRCn4M49BClf
15NJJ/XBW3cF3G6+cbou6T/feyJ621xlfugSMF9uyyunyz1nPE1hdlH5zbB2qZkL
4Wfp2gCJgH/FVtLomryjvdNLzcISyfkqqJEK0RBhIh0/CYQFwsPduOtWGG/x/G3b
KEcA+CUvOiTbCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:15 2026 by rpki-client