
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier: BazrcDFqGn1y35Y1su7SFSlhtMzOzdZpoqMvoJR6bc8=
Subject key identifier: 8B:10:99:2B:E4:02:F9:BF:EB:F7:1E:D4:48:BA:CA:4A:A1:AB:62:E0
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 019E30A96CC041216DD44611125FC490EC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number: 055F
Signing time: Sat 16 May 2026 12:01:10 +0000
Manifest this update: Sat 16 May 2026 12:01:10 +0000
Manifest next update: Sun 17 May 2026 12:01:10 +0000
Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: K/pfE6iF3EHaPPg2jVatPFK+iOZJIMbE+XCeVPk4fko=)
2: d47T8ORHHk4caoplxkWo9jdbvBo.roa (hash: O+AW/XVQJP2vo9oGn03UxDaB3BH61OdIhMeMe+ELWp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:6c:c0:41:21:6d:d4:46:11:12:5f:c4:90:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: May 16 12:01:10 2026 GMT
Not After : May 17 12:01:10 2026 GMT
Subject: CN=8b10992be402f9bfebf71ed448baca4aa1ab62e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:37:24:ec:7c:31:a3:ec:20:32:af:5f:45:
70:43:2f:06:46:2d:90:13:cb:ee:0b:a9:60:44:72:
65:b2:cc:ca:a8:30:83:dd:83:a6:06:e9:26:77:88:
0e:b7:23:fc:c0:95:ad:03:c3:4d:23:53:b0:e8:c8:
8c:43:e3:99:cd:ab:84:f9:ee:6e:a0:dd:ec:00:3d:
c0:d6:30:1e:4e:86:ae:40:29:74:a1:be:1a:28:75:
db:c0:4b:19:e5:ed:c2:4a:14:90:61:ff:c5:b0:98:
93:30:91:31:08:e0:5f:c8:3d:f1:50:8f:72:ba:dd:
6d:9a:ea:95:20:17:9c:93:a7:37:5c:f6:65:fa:ef:
98:d5:c0:ba:59:0d:57:79:b8:77:47:0f:04:ed:40:
cc:f6:c3:2b:c7:ad:2d:1b:4b:39:30:ad:c2:93:3a:
8b:7c:bb:71:f2:11:ea:b5:1d:59:d1:f7:59:74:fe:
3d:72:f4:d8:c4:43:91:81:7b:89:4f:8a:b9:63:f3:
78:23:86:b1:b8:7d:0e:76:41:f5:2c:65:36:bf:4c:
ed:69:18:15:f1:29:60:09:82:4e:32:96:93:7c:14:
1c:06:83:f7:f0:f7:17:b3:86:d7:9f:e5:cb:39:36:
7b:b3:9e:8e:61:97:e3:d7:f8:10:3c:1d:a8:93:e2:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:99:2B:E4:02:F9:BF:EB:F7:1E:D4:48:BA:CA:4A:A1:AB:62:E0
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:d2:51:b9:f3:f0:d5:a8:cc:ac:b9:df:03:f0:f5:6f:bf:
f7:69:00:d9:65:c0:f6:3f:3c:84:8c:e0:c9:17:59:fe:f9:55:
c4:e4:f1:8e:0a:4b:8d:99:c2:db:a4:02:ee:64:97:d1:96:06:
b6:b4:1a:5f:10:37:17:b9:3d:39:0a:47:09:6d:de:d6:ce:a6:
52:1d:69:c8:d2:65:36:d0:51:95:6f:7a:d9:be:be:40:90:ed:
4b:0a:37:be:43:89:f5:a8:a8:e8:19:e3:77:bd:c0:2b:c8:06:
e3:de:f2:32:0d:a2:f9:88:c7:22:66:79:3c:74:6d:87:c2:9e:
66:94:1c:04:30:4b:d9:01:30:72:7f:07:ea:ca:2e:e1:26:f6:
28:62:58:18:d4:3b:7f:0f:f5:c5:28:55:e3:7b:e2:38:ce:b5:
f7:32:98:79:8e:b7:76:31:3a:e6:df:94:a6:4c:b8:ca:d2:2b:
18:e8:27:eb:05:82:ad:12:d9:72:bf:ca:0b:8e:01:99:4e:8d:
88:d0:83:3d:5c:42:32:4d:dc:a5:ed:59:67:7a:86:e7:e7:eb:
53:e3:ff:74:f2:3a:90:0f:18:f7:68:49:70:d9:c2:2e:9a:9c:
d1:9d:52:d5:4d:26:7f:ce:f6:be:df:b8:97:74:a3:ee:ee:b7:
07:54:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:53 2026 by rpki-client