Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: LA7YT1brjdFkFGNch/oUNDbO61dypNjZ418vJ/jAU4E=
Subject key identifier: F6:78:FD:AD:4D:70:60:C0:A6:1B:E9:10:48:62:FA:4D:D4:2A:6F:A0
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019FA1167E275CF237D5EB03276FA4C18B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 04DF
Signing time: Mon 27 Jul 2026 01:00:33 +0000
Manifest this update: Mon 27 Jul 2026 01:00:33 +0000
Manifest next update: Tue 28 Jul 2026 01:00:33 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: asOCErrOCfctOywE8FOZNuf8d0VHKlECQ+gEnUFXIDY=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:7e:27:5c:f2:37:d5:eb:03:27:6f:a4:c1:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Jul 27 01:00:33 2026 GMT
Not After : Jul 28 01:00:33 2026 GMT
Subject: CN=f678fdad4d7060c0a61be9104862fa4dd42a6fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:6e:b6:17:47:8b:7b:93:9f:b8:eb:07:07:
bc:87:d9:d1:83:cb:44:d0:b4:cb:05:a0:19:3d:7f:
cc:4c:02:72:cf:bc:a6:b4:38:82:43:fd:1a:38:e1:
a6:ad:6e:e8:c0:52:10:22:e1:15:b0:f4:ac:01:51:
f6:c6:2c:39:a1:57:78:5c:51:a3:28:31:17:12:c4:
38:8b:78:4f:7a:f1:3d:07:5a:8b:28:a9:ed:99:dc:
01:26:ce:52:6d:e3:1f:a2:c6:14:83:c1:4d:22:d7:
34:2c:01:24:bb:6a:95:75:45:57:6c:7d:83:c1:e7:
86:5d:95:19:17:fc:63:42:18:50:64:f5:47:89:76:
3f:e8:7e:18:6d:f0:1b:64:8d:54:45:12:c3:4b:06:
fb:2b:d9:b4:fc:27:28:f9:e8:3c:20:e2:0e:25:80:
dd:68:32:c2:2d:87:47:d9:d7:6c:ac:ce:09:1f:9f:
e0:d9:f6:b2:9c:3a:a6:cc:1b:41:a7:d5:ca:f0:46:
b9:7a:ba:81:71:b4:52:b9:8a:31:84:35:32:3d:f3:
ea:f5:87:11:62:15:32:ac:b5:58:8c:8a:15:a9:81:
6a:81:66:9d:36:f6:a1:84:46:5b:a7:1b:1a:fa:dc:
54:27:38:5d:c1:59:9f:2d:7e:3a:52:23:f0:82:14:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:FD:AD:4D:70:60:C0:A6:1B:E9:10:48:62:FA:4D:D4:2A:6F:A0
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0f:c9:84:f9:45:f4:dc:4c:45:7f:3f:d0:b9:2e:48:6c:a0:
1e:79:1f:ac:f5:45:73:02:24:65:b0:48:6f:47:af:dc:56:bd:
38:ce:9a:be:1e:cc:a0:a6:a2:2c:2b:cc:d9:81:9c:22:92:f3:
2c:6d:d8:01:52:b7:ba:33:b9:5b:df:3a:95:fd:a2:d3:b9:dc:
79:16:c2:3f:81:63:75:db:92:90:9c:92:ce:e7:c0:34:3d:2e:
e8:49:10:19:06:5a:a7:bc:35:33:21:f2:ee:b3:6d:1f:34:03:
75:ea:2f:77:a5:7b:04:c7:72:6a:5c:d3:40:95:3d:18:1a:55:
8d:ed:d0:b3:c5:91:ba:22:44:97:46:c9:03:d8:19:f3:29:85:
e0:80:9a:ab:ef:10:07:a1:a4:7b:40:67:06:3d:5a:64:c2:c1:
9f:f1:33:08:47:8a:c3:74:0e:34:9d:b3:a3:5d:27:69:7a:ed:
19:ba:4a:9a:a3:2a:41:49:78:fa:8c:f8:9c:fd:d3:03:e5:4e:
38:89:a3:90:99:d7:6d:b7:e6:e2:59:ae:cc:e8:e7:dc:9a:d4:
78:3b:d5:dd:2f:ab:b2:e2:6c:b9:0d:93:62:68:98:1d:70:d9:
89:95:ed:85:22:b6:f6:0d:a5:de:09:69:1c:c2:ba:85:58:c5:
d0:af:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:31 2026 by rpki-client