Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: PbxAURIQTkX/jBBoPs0DcR7rtOdzAS89Hnu2z8HSRsI=
Subject key identifier: 32:6C:83:95:DD:46:23:3F:68:DC:7B:C3:E2:60:22:77:23:7F:81:5E
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019CE5FF1292ADD7BBE4B64FF2E595DA4743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0375
Signing time: Fri 13 Mar 2026 07:00:24 +0000
Manifest this update: Fri 13 Mar 2026 07:00:24 +0000
Manifest next update: Sat 14 Mar 2026 07:00:24 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: uU7KDBhNSMnGfB9b8weLETzFIrmmr8Zo6xvJqAryB08=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:12:92:ad:d7:bb:e4:b6:4f:f2:e5:95:da:47:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Mar 13 07:00:24 2026 GMT
Not After : Mar 14 07:00:24 2026 GMT
Subject: CN=326c8395dd46233f68dc7bc3e2602277237f815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:e4:af:42:df:23:6d:6c:58:99:02:ab:db:
d3:42:ac:50:3d:b9:7d:75:6b:5e:1d:c1:d3:14:83:
54:02:46:a0:7a:8f:d1:1d:a8:5e:fe:9b:12:46:cd:
1c:db:47:a1:4c:93:1b:bc:84:37:ba:10:c5:ce:53:
a5:1f:de:45:85:ed:da:11:d8:41:7b:e5:90:21:1c:
ce:52:89:a8:93:57:0d:73:74:fa:60:bc:8f:00:54:
65:0b:d3:dd:a9:5c:10:32:56:7e:ad:9e:8a:37:3e:
18:07:f2:ce:a2:59:89:22:52:6e:71:c8:fc:14:24:
bb:b2:4e:27:7e:f6:bb:c1:56:db:b7:59:1b:f3:c3:
13:70:9e:6a:4e:2f:0b:7c:6b:a9:e9:2a:bf:af:ef:
41:49:64:4c:0a:31:f1:86:82:21:10:f5:48:f7:d1:
72:55:c8:7f:a5:0a:18:6e:28:56:08:c9:7c:71:6e:
c9:f2:6d:10:d8:aa:6e:7f:d4:37:45:bb:01:41:61:
e6:aa:b4:4f:1c:23:15:49:2f:0b:57:7a:15:d8:66:
da:a7:0e:70:0e:54:ec:4b:ce:46:6a:47:f9:52:5d:
48:7d:ab:fc:fc:ed:05:b1:9e:8c:61:ca:c8:fc:33:
0d:5f:a8:64:ba:5c:0e:f1:7d:7c:2c:6a:bf:0d:b3:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:83:95:DD:46:23:3F:68:DC:7B:C3:E2:60:22:77:23:7F:81:5E
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:2b:1c:00:18:23:3a:4b:7b:9d:32:2a:71:74:96:54:95:
66:66:eb:b2:ba:f6:a4:2b:ce:fe:3b:a1:c6:dc:5c:81:b9:21:
10:30:0d:a2:cc:57:1b:74:8f:31:76:a6:42:dc:45:68:9b:40:
0c:fe:24:2c:88:33:42:b8:34:76:02:c9:aa:7e:9b:76:cb:e9:
7e:2f:90:50:da:12:f2:a4:d9:e3:66:c9:ed:da:ec:69:67:6f:
16:92:3b:fa:fd:f2:37:37:b3:64:b7:0c:9e:30:b3:6b:2d:1b:
2e:da:a5:2a:35:0d:13:99:b8:e9:ba:65:53:4c:91:88:7a:b6:
57:fc:76:2c:0c:f0:30:9b:15:df:1c:03:49:d5:2e:a6:73:01:
d4:54:f8:d7:81:ee:e1:5e:e4:0e:c1:aa:43:91:0f:20:76:93:
40:37:5a:df:b3:fd:e8:db:96:92:bd:1d:7b:f2:7e:ff:dc:75:
26:c6:46:b0:38:2b:0e:97:46:89:d9:ad:4e:31:8d:7d:85:49:
c2:ab:d8:4d:50:79:94:f3:cb:e1:db:5e:b6:37:32:37:d4:da:
b8:cb:d5:32:38:9c:a4:50:ff:49:06:4c:5a:7c:8b:1f:12:a0:
60:42:51:fc:6d:3d:b9:64:a1:5e:33:44:07:f4:53:09:52:69:
f5:20:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:16:30 2026 by rpki-client