Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: 3WGOlte6rO9uGaYvVCCbBo/SRoei3nWa3yyVc2FasKE=
Subject key identifier: D1:9B:5D:89:4E:A0:D4:4B:87:2C:B5:74:C9:4E:98:7C:3A:3C:2E:F6
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01A001DC9BE01C615BB4D8CAB4E00D40B9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1992
Signing time: Fri 14 Aug 2026 20:00:29 +0000
Manifest this update: Fri 14 Aug 2026 20:00:29 +0000
Manifest next update: Sat 15 Aug 2026 20:00:29 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: ZtF+pqjejoWGLAcFES6muGIRFCCQT9s5jSEg2L16BAA=)
2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:9b:e0:1c:61:5b:b4:d8:ca:b4:e0:0d:40:b9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Aug 14 20:00:29 2026 GMT
Not After : Aug 15 20:00:29 2026 GMT
Subject: CN=d19b5d894ea0d44b872cb574c94e987c3a3c2ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:ec:02:28:9b:7e:02:48:b1:21:dc:e4:fc:
c1:67:be:e0:c8:54:6c:a7:3d:49:f5:3c:74:b1:4e:
11:d3:5e:db:66:0e:07:b2:a3:91:3e:8d:30:63:13:
5f:1e:9c:e3:15:3b:a3:87:b9:62:d0:1e:7c:bf:92:
b5:60:d2:b2:ce:10:dd:f6:df:4a:19:02:55:14:93:
24:8c:87:b8:34:fa:4d:4b:76:4e:19:09:24:a6:23:
94:d8:78:54:2e:ad:82:53:7f:f8:5a:6a:19:3d:fa:
07:57:2b:e2:84:d5:15:0e:5f:e5:a2:9f:f0:5b:06:
b2:9e:8d:dc:1d:f9:f6:30:c3:46:63:ca:3c:3c:b1:
49:45:fc:21:b2:46:84:e1:0d:52:c5:8e:43:50:63:
7f:bc:93:09:04:85:70:a6:7b:9f:ee:7f:c4:e1:5e:
38:e9:9a:d0:29:11:1d:9c:21:81:dd:87:a4:5d:93:
dc:f2:c7:c8:0b:ad:74:94:60:a8:bd:7d:cf:f3:f7:
c0:2f:a2:0b:38:3d:5d:d7:9d:68:cf:8d:78:57:ee:
a5:f4:0e:0c:bb:82:7e:37:87:61:ae:77:c6:ec:06:
d5:25:6e:7f:cb:a2:d0:53:02:35:54:17:58:42:f8:
2b:51:38:18:4d:b1:36:a6:05:13:30:f3:a9:1f:1c:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9B:5D:89:4E:A0:D4:4B:87:2C:B5:74:C9:4E:98:7C:3A:3C:2E:F6
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:37:94:5d:d1:a2:c7:44:78:cf:68:32:ee:34:f2:b0:27:02:
fc:b2:28:c8:1e:45:58:ed:46:a3:8f:6c:44:ee:d2:94:b3:c3:
a7:0a:79:73:b2:ae:bc:dd:6d:90:ef:1f:65:be:ca:bf:0f:63:
c3:31:8b:c6:2c:fc:04:d8:00:8f:e9:b8:dd:98:ca:15:d2:68:
9f:5c:b1:f4:d2:64:45:a3:e3:bb:4a:15:ab:cb:dc:59:a3:db:
88:a3:16:82:f0:b3:4c:d0:ce:c1:32:84:7e:0d:3f:bc:5b:1f:
9d:97:0d:e2:43:39:67:a1:91:0d:a8:04:d6:ab:49:42:f7:1d:
12:06:44:5a:72:bd:a7:73:4e:0c:d7:e1:e9:e4:04:59:4a:ec:
25:68:a8:a5:57:2d:eb:d5:09:57:c0:90:a1:b6:01:32:d2:4e:
5e:49:0c:cc:83:4c:b5:3f:df:19:62:8b:5d:32:31:0d:93:ca:
14:ac:7d:71:84:e0:83:d5:40:36:20:11:74:81:7b:d5:c9:6f:
6e:20:ff:0c:25:52:da:7e:48:6f:b3:52:17:9f:3c:f2:06:64:
a1:05:52:3e:3d:5c:d0:a5:34:db:97:74:d7:e4:db:56:d8:60:
21:33:b9:2a:03:b8:3a:c5:fd:a9:8c:e0:40:b6:8e:15:ed:b3:
bd:5b:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:57 2026 by rpki-client