Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: S9HYjVDZCTSl4T2vIuNz11WqJrIL5H09JS9EsSCtv10=
Subject key identifier: 41:CF:3B:6B:B3:46:93:F5:C7:12:69:3D:D4:DA:65:35:E8:B4:4C:CA
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 019CE55A4EBAC71E4D012D4FCD91CD68D05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 13A7
Signing time: Fri 13 Mar 2026 04:00:26 +0000
Manifest this update: Fri 13 Mar 2026 04:00:26 +0000
Manifest next update: Sat 14 Mar 2026 04:00:26 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: 4bYyeYuFpSNmi5P2HMms5XYZKvbONe/3Vfe+gBi+QXo=)
2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:4e:ba:c7:1e:4d:01:2d:4f:cd:91:cd:68:d0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Mar 13 04:00:26 2026 GMT
Not After : Mar 14 04:00:26 2026 GMT
Subject: CN=41cf3b6bb34693f5c712693dd4da6535e8b44cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:51:93:18:8b:16:c1:df:ca:e5:19:76:05:
dc:58:cd:cb:fd:e2:dd:28:94:7b:3c:5d:49:6f:49:
ce:70:b9:16:c3:cd:46:3b:4d:8b:70:e7:2c:46:85:
cd:7b:7f:92:ef:56:eb:f6:de:f5:8f:3f:3c:2a:78:
f4:16:ad:8f:d4:e3:5c:e1:27:48:f8:e2:b1:b3:a6:
f2:aa:d9:33:93:45:34:b7:97:db:6b:cc:eb:18:32:
11:7e:94:b7:04:87:76:12:aa:d7:83:0b:c5:91:e0:
da:42:33:97:3d:10:86:4e:3d:95:a0:9d:59:a1:21:
0d:90:c1:dc:9c:38:59:b6:2a:e2:54:85:1a:4d:3b:
39:52:66:e5:c3:0a:e7:85:aa:1f:29:21:aa:ed:27:
9e:47:88:a8:9e:9b:22:83:f1:a7:09:b6:82:ae:08:
ec:a2:46:a6:96:d1:1d:1e:2f:e9:cf:0e:49:da:25:
0c:d5:ef:3d:01:49:cb:2d:a7:5c:96:d2:69:29:c4:
60:5f:77:bc:fb:12:8e:58:62:e0:fc:0d:19:ea:c0:
65:95:68:47:03:c8:ac:85:8a:e3:22:4b:74:db:33:
53:cc:b1:ed:2d:b7:6b:b5:5e:2e:65:d6:3c:f2:92:
4a:15:e4:cc:47:61:79:de:9f:b3:6e:57:e9:d3:a9:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:3B:6B:B3:46:93:F5:C7:12:69:3D:D4:DA:65:35:E8:B4:4C:CA
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:67:aa:d1:d3:a4:fd:4d:d6:af:ee:c4:c6:50:c6:f4:d3:72:
88:eb:20:02:92:b9:0a:8e:d5:bb:31:96:fa:16:95:c3:a2:47:
62:25:d2:be:4a:0c:7e:15:63:f2:29:8f:05:9e:15:7f:75:81:
a1:81:a9:70:34:b4:73:3e:c9:85:8d:6c:c7:dd:2f:b1:1c:65:
c7:00:68:72:6f:eb:02:f2:9a:19:cc:02:cd:86:ab:7a:fe:bf:
50:2b:ed:3f:a3:03:b6:52:05:41:97:9c:0a:46:24:e7:b1:ce:
d4:6a:53:e2:5b:ba:bb:17:36:e4:61:40:9b:ed:43:4d:0e:a5:
06:58:8d:75:2c:90:80:ec:22:aa:7e:22:12:ff:f0:34:af:5a:
40:7a:db:66:e9:62:5e:ba:df:a4:8c:43:61:84:1a:24:ae:62:
7c:30:2e:b1:fd:69:cd:e2:0a:ef:54:3f:b5:5e:3d:1e:c7:be:
35:7b:a3:56:a9:e8:17:fa:41:a8:13:08:d1:d1:15:53:ae:0f:
af:b5:07:08:7c:e2:12:fa:ff:63:64:6e:7a:fb:98:60:7c:1f:
d0:2a:37:e6:20:43:04:d6:7a:ba:c8:40:93:cb:1d:05:ab:9f:
e1:dd:26:4d:69:37:93:81:01:89:9f:73:f4:ab:5e:96:ad:46:
a1:7c:e9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlWk66xx5NAS1PzZHNaNBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjYwMzEzMDQwMDI2WhcNMjYwMzE0MDQwMDI2WjAzMTEwLwYDVQQD
Eyg0MWNmM2I2YmIzNDY5M2Y1YzcxMjY5M2RkNGRhNjUzNWU4YjQ0Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvBRkxiLFsHfyuUZdgXcWM3L/eLd
KJR7PF1Jb0nOcLkWw81GO02LcOcsRoXNe3+S71br9t71jz88Knj0Fq2P1ONc4SdI
+OKxs6byqtkzk0U0t5fba8zrGDIRfpS3BId2EqrXgwvFkeDaQjOXPRCGTj2VoJ1Z
oSENkMHcnDhZtiriVIUaTTs5UmblwwrnhaofKSGq7SeeR4ionpsig/GnCbaCrgjs
okamltEdHi/pzw5J2iUM1e89AUnLLadcltJpKcRgX3e8+xKOWGLg/A0Z6sBllWhH
A8ishYrjIkt02zNTzLHtLbdrtV4uZdY88pJKFeTMR2F53p+zblfp06mpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHPO2uzRpP1xxJpPdTaZTXotEzKMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGeq0dOk
/U3Wr+7ExlDG9NNyiOsgApK5Co7VuzGW+haVw6JHYiXSvkoMfhVj8imPBZ4Vf3WB
oYGpcDS0cz7JhY1sx90vsRxlxwBocm/rAvKaGcwCzYarev6/UCvtP6MDtlIFQZec
CkYk57HO1GpT4lu6uxc25GFAm+1DTQ6lBliNdSyQgOwiqn4iEv/wNK9aQHrbZuli
XrrfpIxDYYQaJK5ifDAusf1pzeIK71Q/tV49Hse+NXujVqnoF/pBqBMI0dEVU64P
r7UHCHziEvr/Y2RuevuYYHwf0Co35iBDBNZ6ushAk8sdBauf4d0mTWk3k4EBiZ9z
9Ktelq1GoXzpfg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:29:59 2026 by rpki-client