Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: FxXmdEnyea3jjrzbEA1wbdR7Lc3VQ2eXkkDNd16xCq8=
Subject key identifier: F8:8F:34:7D:C2:D1:6E:76:4E:B5:8F:F0:4D:3F:AE:94:0E:31:65:00
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01A00102061CEF64081EA8E010D931363A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1543
Signing time: Fri 14 Aug 2026 16:01:44 +0000
Manifest this update: Fri 14 Aug 2026 16:01:44 +0000
Manifest next update: Sat 15 Aug 2026 16:01:44 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: i/1XjzO+s9sD3N2IkAPMb+aakYOs9e5XgITeU2Fplgk=)
2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:06:1c:ef:64:08:1e:a8:e0:10:d9:31:36:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Aug 14 16:01:44 2026 GMT
Not After : Aug 15 16:01:44 2026 GMT
Subject: CN=f88f347dc2d16e764eb58ff04d3fae940e316500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:9b:ff:31:cc:14:82:90:1f:d7:89:9f:e2:
cd:4a:fc:8e:39:78:f0:11:46:ca:2b:87:c8:b3:d2:
d8:47:61:3b:3b:1a:09:87:5d:06:2e:44:d6:88:00:
64:3d:20:0f:85:42:52:29:ef:04:c3:2d:84:0a:64:
4a:cf:44:d2:bc:91:1d:25:0b:66:3e:44:f1:22:a4:
55:33:63:76:f0:78:88:34:05:f9:48:10:e9:ef:46:
93:ff:e7:e8:bc:93:0f:6d:58:97:27:c6:4c:72:94:
41:08:6d:87:f4:99:51:a0:c0:38:48:e0:20:b5:44:
43:b9:24:05:a1:8f:86:5c:81:7e:56:0e:57:1a:d5:
79:99:59:ca:8c:ad:35:6d:6f:96:65:2e:06:1e:58:
49:f8:f9:b6:67:c8:76:f3:7c:21:eb:0c:85:67:ad:
10:c0:4d:36:83:de:eb:84:2c:2d:64:91:8f:cc:75:
e9:06:cf:0e:f9:5e:d2:ec:58:fe:f8:c4:07:c4:b9:
cf:ef:4e:43:9f:0b:29:16:f5:43:d6:98:42:12:a6:
00:d1:9d:e3:3a:7f:2c:de:07:a9:b5:51:eb:63:a7:
b2:0a:ac:21:fd:f6:4e:ac:8c:46:21:97:a5:db:8d:
53:ad:cb:8a:91:25:10:89:b9:af:91:81:09:96:e0:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:34:7D:C2:D1:6E:76:4E:B5:8F:F0:4D:3F:AE:94:0E:31:65:00
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d8:12:7e:c5:49:5c:4a:35:0f:36:c8:bf:38:9f:7d:57:b8:
b2:04:0e:be:80:14:74:18:0e:56:02:7d:04:70:34:31:e2:20:
90:e0:69:b8:66:fd:ef:d6:8d:d3:b2:16:14:dc:30:81:09:ea:
9c:bf:77:93:94:66:62:d5:60:dc:12:c6:4d:4c:40:ce:c2:39:
2b:64:59:ac:ee:61:98:ee:f3:f8:d9:33:26:04:8b:ab:40:3a:
97:f7:0d:20:b1:57:52:a2:d6:91:3d:b6:e3:c3:65:43:ec:06:
0a:74:9e:cb:a6:da:64:c2:ca:8a:20:49:0c:57:32:31:c1:e7:
fb:89:2e:d1:21:95:6b:2d:a6:81:aa:d9:ed:e8:7a:b6:a4:a9:
5e:e1:2b:f5:b6:c1:ae:cb:e7:b5:6d:c5:f8:e1:75:bf:65:6f:
fb:8c:93:48:0a:c3:2b:c7:e3:a2:20:45:69:c8:b8:b1:0c:ce:
a7:a3:e9:ad:96:e1:db:e5:1d:74:27:4a:21:2a:5c:a9:1e:e4:
47:f9:3c:2b:dd:c3:35:7a:e3:5d:4c:5c:b6:81:2b:2d:72:d5:
76:dd:88:c0:8b:57:46:b0:20:87:81:40:c6:fb:d3:b6:b7:6f:
0a:63:ef:3d:61:78:63:76:42:9d:d3:ce:a3:c8:a5:0d:62:96:
9f:2b:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:09 2026 by rpki-client