Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: EE2qawpkTyOafc9Fn4GlXknooyUBlcYLUcRAgTJEsCQ=
Subject key identifier: C4:5A:F6:EB:08:0C:7A:44:73:55:86:75:F2:5A:1F:04:5E:BB:F4:76
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019E314E5293E102FAF692C5E5E8892F6BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0FE5
Signing time: Sat 16 May 2026 15:01:16 +0000
Manifest this update: Sat 16 May 2026 15:01:16 +0000
Manifest next update: Sun 17 May 2026 15:01:16 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: uLpP1BFSOJ3AQ0PE9bLVowhEm5HrVmTky6qOaigCivM=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:52:93:e1:02:fa:f6:92:c5:e5:e8:89:2f:6b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: May 16 15:01:16 2026 GMT
Not After : May 17 15:01:16 2026 GMT
Subject: CN=c45af6eb080c7a4473558675f25a1f045ebbf476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:7e:ff:02:bc:52:59:31:b7:14:7c:9c:98:
bd:a2:a7:fb:81:08:7f:5f:4b:53:d7:d8:4e:ea:aa:
ae:92:f4:51:0d:2a:6d:f1:cc:d3:a7:90:b6:59:de:
97:5a:5f:58:59:b5:95:99:bb:58:86:fb:c8:ce:ac:
51:cb:44:cc:4f:70:20:60:71:8a:78:a8:70:88:79:
be:25:6b:9d:54:d2:4b:34:ff:04:89:7c:3b:e5:2d:
7d:98:ce:74:27:4d:94:5f:35:ac:ac:9a:4e:51:69:
16:fa:0f:f6:39:64:18:25:00:3b:9c:9e:b3:17:2e:
3e:17:57:e5:2f:d7:80:11:45:ad:96:95:8c:b2:0f:
51:c7:78:9f:82:1f:18:8a:68:ec:7c:3d:34:19:27:
5e:c2:b0:5e:a2:db:d5:ba:78:59:ea:3b:68:0e:a5:
ee:23:03:4c:49:1e:6a:8b:3e:b2:c5:50:83:d1:c1:
fe:8f:30:4d:f2:3d:d1:b4:2a:75:61:d9:fb:ca:7c:
60:e1:1a:ab:4d:63:9a:17:23:df:2d:f3:a6:d3:8e:
22:5d:85:ae:88:e6:40:6d:f6:5c:31:20:3b:6d:b3:
1a:39:a6:df:26:04:58:34:70:8b:53:6c:63:9b:a9:
09:dc:68:58:ec:dc:24:24:e2:8e:77:ec:9b:5c:e7:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:F6:EB:08:0C:7A:44:73:55:86:75:F2:5A:1F:04:5E:BB:F4:76
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:d5:96:53:3d:22:14:3b:4a:55:66:fa:b3:36:08:3c:8e:
e8:b2:62:36:84:98:97:9e:94:27:ab:c7:49:3c:6b:02:bc:94:
21:8b:3f:ad:31:82:61:91:d9:4a:3c:7c:c3:53:93:0d:13:8d:
cb:4f:a0:86:db:81:b2:ec:72:96:68:ad:68:85:03:31:3f:81:
fa:ee:7c:b0:2c:1f:29:84:64:f7:4e:d4:8c:ac:7a:18:46:59:
21:3b:a8:7e:df:ce:66:12:a4:a5:52:1b:de:8c:c5:96:14:24:
7b:87:e1:20:79:84:24:65:02:38:6d:28:f3:97:17:85:07:51:
fc:aa:02:a9:5e:8a:7f:90:0d:13:79:96:70:4c:a7:91:ec:1d:
6e:0c:64:3e:7c:8b:8e:ce:af:f7:71:6e:f2:35:84:82:c7:0d:
6a:93:b0:8f:fc:a5:5c:d0:d8:d8:85:0e:3a:ac:24:19:0f:6e:
d4:08:f2:e5:90:6b:a3:1b:fb:36:80:3e:bf:1a:f1:65:81:76:
96:7a:cb:31:dc:95:78:8e:39:e7:a9:5b:be:d4:f3:01:53:26:
7d:64:36:8d:ed:b3:52:92:65:cf:c0:e4:b0:f9:18:b1:b9:99:
fa:f8:e2:4b:a7:e5:4c:7a:74:a3:a8:c4:51:68:98:6e:36:3f:
a1:05:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:52 2026 by rpki-client