Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: WzdLgdGWO/AqYlptDvWCcyiUqgATDl4Rn5ycBPZHYBM=
Subject key identifier: DE:8B:3F:CF:19:37:47:E2:D1:A0:7A:84:A8:7D:F6:65:3B:86:65:EB
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 01A17A3AAC9D0CBAA1E56035A63B26847558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 05D4
Signing time: Mon 26 Oct 2026 22:00:27 +0000
Manifest this update: Mon 26 Oct 2026 22:00:27 +0000
Manifest next update: Tue 27 Oct 2026 22:00:27 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: J5UZOpMNGerX5oetCuPTHygMI52h15NwOmR6pIanmUE=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:ac:9d:0c:ba:a1:e5:60:35:a6:3b:26:84:75:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Oct 26 22:00:27 2026 GMT
Not After : Oct 27 22:00:27 2026 GMT
Subject: CN=de8b3fcf193747e2d1a07a84a87df6653b8665eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:c5:c5:c2:4b:90:e7:59:a7:f3:d1:eb:07:
b4:74:c1:43:bd:14:94:1f:f4:6a:7c:4c:2c:2f:b5:
cc:d3:42:82:85:b5:75:2d:76:3d:8a:59:dd:b8:49:
03:55:84:6c:a0:7c:50:76:92:4f:03:52:44:a6:00:
bf:1e:2a:d2:8a:f7:9d:c4:7a:f6:38:7b:ca:79:df:
17:d2:b3:80:73:ec:b8:a2:ac:f0:8c:7a:23:28:9a:
94:50:0d:8c:f3:3b:71:e4:d3:50:d4:d0:38:b7:1a:
1b:42:9d:90:cd:b9:84:b2:d8:49:30:af:81:d3:17:
b3:7b:8a:85:9a:47:dc:33:93:92:7f:f8:05:04:37:
ea:bf:27:0b:e5:33:96:99:c0:7f:4a:a7:3c:d1:b3:
fb:4c:fe:7d:17:05:9d:f6:97:01:d4:77:6e:ca:b3:
11:c1:12:5e:64:62:ee:f8:e4:58:4b:63:3d:8a:06:
99:aa:bc:73:76:b7:4f:92:84:d4:66:96:9c:67:a9:
b5:6c:dc:50:bf:4d:1b:a1:51:6d:de:9c:1b:51:f2:
bc:f8:16:f0:d7:0e:4e:8e:34:b5:5f:aa:b9:eb:65:
72:e1:9b:e5:55:0e:ee:77:c4:c1:80:8b:a9:09:d0:
7f:46:79:d4:2a:a7:3f:ed:37:01:5c:84:99:93:72:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:3F:CF:19:37:47:E2:D1:A0:7A:84:A8:7D:F6:65:3B:86:65:EB
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:ae:3f:63:09:29:dd:ee:f9:28:2d:c4:f5:1b:09:55:07:
09:bc:86:3a:4a:9d:bc:15:83:3c:9f:14:e8:76:d5:69:5f:03:
dc:66:85:ba:61:99:d7:c8:9e:1b:c7:5a:97:b5:09:7c:48:00:
4f:ad:dd:da:42:7d:c3:5f:c8:b5:1e:58:e1:68:3a:80:10:6b:
90:de:99:3f:69:9d:10:74:d0:19:76:65:ee:ab:fc:4d:84:d2:
d1:10:da:b1:5c:fc:5e:9f:2a:3a:1f:e5:28:34:e1:2e:49:59:
37:1e:d2:4e:57:ca:d7:89:68:a7:e3:29:4f:88:85:8b:88:47:
4b:78:ab:cd:07:9a:5d:ba:9c:c5:e4:ff:50:bf:27:e7:b5:82:
31:3f:91:59:e3:0f:e8:02:d9:ea:b5:4d:d7:7c:69:6c:20:b6:
69:e5:b6:59:54:6e:7c:85:be:f2:23:26:82:98:aa:cb:1e:12:
3d:35:dc:1a:c4:32:1a:8c:93:ff:90:b1:89:52:f7:3a:9a:af:
45:47:3b:ed:03:6e:a0:a3:9d:cc:b1:c8:e7:f8:de:44:ba:55:
9b:b7:99:13:e7:27:5e:1b:38:eb:56:1b:b7:eb:86:ee:b6:57:
5c:1a:99:1d:d0:8b:e2:ef:d5:59:1c:d9:c0:f1:c2:2e:40:d8:
c3:7e:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:45 2026 by rpki-client