Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: I+/6MyvnhQbd79YONW6IROR7DgAoJqG1WIFKuiUeSCM=
Subject key identifier: 19:62:08:7D:B2:90:63:8A:DD:C5:AF:CC:18:E4:EE:DB:0D:11:85:50
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 01A13D8166A56A420BD6023A05E7D4EA94D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 1179
Signing time: Thu 15 Oct 2026 03:00:52 +0000
Manifest this update: Thu 15 Oct 2026 03:00:52 +0000
Manifest next update: Fri 16 Oct 2026 03:00:52 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: Ps5VkfRL6GLzhL1+iakwmSkYagDGVP2Vl9cQ7jhZ2QE=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:66:a5:6a:42:0b:d6:02:3a:05:e7:d4:ea:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Oct 15 03:00:52 2026 GMT
Not After : Oct 16 03:00:52 2026 GMT
Subject: CN=1962087db290638addc5afcc18e4eedb0d118550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:02:cb:89:7b:9e:ee:a2:68:45:c5:da:da:
95:be:bd:f7:ca:ff:26:5c:a5:96:eb:77:bc:67:52:
a4:98:48:9c:5c:b4:08:d2:39:59:9e:4f:ae:c5:f7:
ae:8e:0f:1e:fe:fa:22:74:cc:74:24:6c:82:e8:0c:
1c:fb:3a:79:f2:ec:5e:aa:69:8c:e9:65:b8:40:d0:
b0:38:e2:c7:16:5a:6d:fb:6c:5c:60:98:a9:75:78:
56:81:78:93:f2:bc:d3:fe:bd:c0:39:37:a9:ec:e3:
e1:67:f1:53:de:ed:67:21:23:b0:a2:59:ae:eb:7f:
7c:51:0c:91:4e:ff:3c:6a:08:f8:7c:32:c0:d4:b8:
db:24:58:09:44:e5:25:dc:58:9b:30:a9:43:50:ae:
0c:a7:9c:81:fc:f7:2a:9b:76:07:bf:68:e6:9b:7c:
89:d0:ba:85:62:00:1f:df:00:f5:f6:91:93:45:e7:
bc:54:6e:e5:cb:a7:23:d5:46:03:4e:c3:24:e3:d2:
70:4f:8e:e6:6c:29:a3:da:c7:0e:94:d7:54:93:b2:
41:8f:74:b1:c5:fa:f3:36:de:8d:b1:7b:f4:a9:ff:
42:f4:58:dd:91:a7:52:d8:4d:19:e4:9a:47:cf:81:
1e:85:62:70:be:5f:56:3b:26:9c:d9:c5:60:e5:d6:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:08:7D:B2:90:63:8A:DD:C5:AF:CC:18:E4:EE:DB:0D:11:85:50
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fa:02:20:84:63:3b:6c:5c:73:94:50:0a:b4:f4:51:d3:68:
14:aa:d7:14:a9:08:3c:60:ec:fe:99:30:2b:f2:ed:1a:51:7b:
9a:47:84:c6:2c:49:44:85:1b:b2:14:4c:8e:bc:a0:d2:6c:91:
98:e9:c0:b2:05:19:6a:e9:9d:60:bf:83:f8:f1:68:55:ff:61:
31:b1:b1:61:83:00:dc:37:64:d3:c7:ab:a6:c1:ea:4b:3d:c3:
b1:f3:b7:b0:e7:1e:4c:7b:74:d8:45:cc:30:6a:29:cf:80:86:
fd:97:f6:4c:6b:ee:21:df:65:72:89:f8:85:98:9d:77:99:ec:
b9:58:00:ca:39:4c:04:01:e4:27:8b:d9:de:11:1c:91:39:9b:
3b:67:bb:12:81:1a:ca:b2:d3:1a:4c:74:d6:fb:06:42:b8:67:
e2:c9:9c:80:5a:a0:52:d1:4f:bc:b8:f5:e6:35:7b:05:ab:b8:
cb:17:e5:ba:34:f2:5c:5b:da:9a:09:7f:c5:2d:98:cd:55:62:
f4:b2:f3:f9:33:77:62:ee:4f:99:bf:32:8c:8e:d3:e7:b3:df:
1a:84:4f:fa:00:a3:fe:92:a7:4a:96:3c:c4:43:2b:dc:7a:fe:
70:ea:0b:83:85:7e:1d:66:31:8e:c5:15:a6:b7:1c:b9:57:b6:
1c:ef:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:35 2026 by rpki-client