Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: VNM7cuMrEnx0gYEQ/+z+b8QWwt8mFEj9WGadoXc+o08=
Subject key identifier: E1:04:58:46:CD:74:BA:86:58:A2:DB:F8:DD:0C:43:5C:68:EB:02:E5
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 01A000CABE1D5D611095465B7E6ABCE1EBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 10D5
Signing time: Fri 14 Aug 2026 15:01:21 +0000
Manifest this update: Fri 14 Aug 2026 15:01:21 +0000
Manifest next update: Sat 15 Aug 2026 15:01:21 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: xj0OXiNGfotKneexAhuF8j9qjPuRFqw65K8qZ76DCMs=)
2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:be:1d:5d:61:10:95:46:5b:7e:6a:bc:e1:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Aug 14 15:01:21 2026 GMT
Not After : Aug 15 15:01:21 2026 GMT
Subject: CN=e1045846cd74ba8658a2dbf8dd0c435c68eb02e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:ef:2d:d2:e8:02:b6:6b:3f:6d:da:5c:68:
55:b6:9c:f8:ef:ce:e9:3b:35:17:fb:26:bd:3a:06:
33:2f:80:f0:b6:11:36:d8:98:e6:cd:ef:0e:82:eb:
e7:5f:bb:e3:c8:b9:73:f3:31:1d:c4:43:10:98:a1:
51:ef:0e:3a:d9:ac:1f:81:46:16:4b:a7:1c:2d:60:
9a:bb:c4:cd:d7:f4:27:6e:84:ea:70:db:e3:fa:fd:
b4:c6:3b:2a:87:8b:b4:65:1e:18:0a:60:48:47:09:
31:27:02:e6:c7:7a:c6:4a:0b:f3:b9:89:d7:27:fc:
a7:6a:17:59:b3:aa:fa:21:8e:fa:12:cb:40:e4:5f:
18:78:99:1a:52:cf:a1:6e:65:76:34:04:c4:02:9b:
8b:7c:44:7e:f9:6c:b8:6c:b3:78:2a:35:a7:57:cd:
42:f0:b4:cc:d1:73:6a:13:be:7a:7d:df:ce:35:f9:
72:aa:ee:7c:2b:6b:1c:97:a0:df:a7:75:c2:41:00:
ed:54:ed:f9:8f:e5:8a:91:d6:c9:6b:4e:2b:24:fa:
20:54:83:e8:e3:b3:a2:81:0e:27:17:ea:df:80:0b:
01:40:ec:59:b8:09:a1:e0:ec:c1:ed:21:52:22:75:
32:96:37:fc:a8:da:6a:3c:62:33:da:c7:05:e7:92:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:58:46:CD:74:BA:86:58:A2:DB:F8:DD:0C:43:5C:68:EB:02:E5
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:0b:8b:04:01:28:f9:4c:40:56:4e:71:4d:8e:a2:ae:20:
8c:13:5b:bb:ca:37:b3:6d:61:21:26:79:b0:13:b5:d8:b3:be:
32:44:06:d2:5e:00:b1:59:70:5a:91:dd:9c:45:60:98:33:91:
d5:de:01:83:7d:1f:09:01:c9:62:7a:7c:dc:4a:3a:8d:68:95:
97:65:16:44:37:64:39:bb:15:af:bd:de:c3:a2:11:2a:cc:47:
65:e9:cf:eb:37:26:5d:f6:11:a1:6d:d9:ea:f2:c6:5b:4d:c0:
57:9a:39:ef:3c:08:c3:c4:77:e7:e5:97:72:8c:81:0c:44:9d:
00:7e:dd:ac:96:54:25:f2:23:8d:34:9d:99:a8:34:15:e8:7f:
51:1a:83:45:94:33:e9:e9:16:8b:49:08:74:f4:96:52:b3:a5:
ac:9d:08:e2:5f:e8:5e:b8:d8:92:ee:22:ce:ae:96:c2:12:ea:
a0:cc:9c:a8:82:03:70:6b:b4:a1:c1:09:9d:46:c1:a6:54:5e:
32:92:69:3d:c9:09:6a:2a:50:03:60:1e:83:e7:1d:49:ab:60:
52:10:51:73:be:31:b5:12:68:56:5e:a0:bd:33:04:2c:9f:92:
ba:e2:8b:16:b1:93:29:d8:a3:07:65:fd:b5:47:44:87:46:6b:
7e:e3:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:55 2026 by rpki-client