Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: ZyEQ0C38pBstINkxTwoafm6QCy3O9ShYr2okLq7U748=
Subject key identifier: D8:99:2F:83:95:00:78:7A:BC:AC:68:AD:32:73:25:8B:48:97:77:8F
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 01A08D1F5400659E7FF914ECE7FD80D04324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 21:00:35 +0000
Manifest this update: Thu 10 Sep 2026 21:00:35 +0000
Manifest next update: Fri 11 Sep 2026 21:00:35 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: rfpUQj+7bj8dx5VuVUepev6O7/evY+j4HAHtBhNU9RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:54:00:65:9e:7f:f9:14:ec:e7:fd:80:d0:43:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Sep 10 21:00:35 2026 GMT
Not After : Sep 11 21:00:35 2026 GMT
Subject: CN=d8992f839500787abcac68ad3273258b4897778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:ce:7f:7c:68:c0:e8:84:9e:2a:a3:fc:06:
61:e2:d3:1a:10:03:e2:d6:30:23:2e:c4:18:c1:2f:
82:7f:22:92:93:ba:37:68:36:97:1f:dc:a0:15:06:
7f:ee:5b:03:ae:b2:23:9a:1e:a9:03:a3:70:90:e3:
2c:21:36:42:6f:fe:2a:2e:96:94:74:ff:f8:54:98:
c0:e8:60:65:7f:07:15:19:c0:56:2d:9a:79:e7:c0:
c4:9a:e8:c7:a7:99:ae:10:9d:8a:18:c4:71:90:00:
78:92:4c:84:15:ab:1c:36:9b:c9:8a:0a:64:f6:05:
7f:86:14:cc:3d:49:7f:ae:f2:b9:3c:c9:92:b5:52:
2b:ff:90:12:bc:c1:f6:2f:3e:cc:c4:6a:84:3f:08:
b0:4e:57:3f:fb:72:68:26:cf:00:54:32:78:45:9d:
7d:cf:f3:56:64:a3:51:a4:9c:31:0d:8b:f8:e1:25:
88:27:57:d7:07:db:b2:4a:c9:71:6a:88:b3:b0:b8:
8f:f3:e7:a4:aa:3f:90:c0:99:8e:2a:cf:dc:2c:82:
91:73:97:1f:c1:ea:46:44:87:36:b3:5c:47:0e:ce:
df:c3:06:cf:a2:1b:7b:de:c8:ca:c9:ab:d5:a5:82:
a3:1b:71:53:67:79:cc:90:8f:42:93:0a:46:33:98:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:2F:83:95:00:78:7A:BC:AC:68:AD:32:73:25:8B:48:97:77:8F
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:a0:2f:df:34:78:cf:c9:8b:a2:40:d6:98:ac:71:d2:90:
9f:0c:c8:44:f5:62:91:10:24:07:72:49:b0:1f:58:d2:2e:0b:
98:f9:41:38:b8:f4:e2:51:0e:f0:8d:9f:5f:de:97:d7:56:0b:
b0:ad:f7:64:05:da:99:22:ab:6c:34:51:4f:96:4d:75:b6:c0:
9d:83:e7:9c:09:35:96:39:58:e1:1f:11:f3:0a:1d:9c:21:51:
86:39:ad:d7:79:92:6a:51:ff:4c:86:d0:28:ad:ac:db:df:cb:
cc:4d:4b:eb:f8:f5:8e:6b:04:4c:3b:b9:02:ee:35:ec:96:18:
b5:6a:21:f4:aa:59:38:f7:10:ce:ed:07:ff:8b:db:d4:f9:7b:
e2:4a:d3:ff:17:e5:d4:be:6a:44:c3:3a:57:ac:47:2b:09:59:
4b:d7:07:02:25:8c:5b:09:3c:c4:58:8b:3f:a0:7f:65:17:bf:
2f:fd:27:bc:be:8c:ae:89:56:e6:97:29:6a:a8:9d:a2:33:1a:
f0:c1:28:15:69:bc:7a:87:68:7f:32:00:aa:07:e0:1e:a6:87:
9c:31:e9:b3:f8:88:6a:c4:34:d9:d1:f5:cd:b7:ab:2b:65:d5:
38:5f:7b:cd:ca:23:55:b6:77:fd:aa:d9:39:07:d8:b6:b5:f9:
fd:16:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:55:51 2026 by rpki-client