Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
File: 0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft (raw, json)
Hash identifier: WGESAh3hGMxEGuwi2u8O5SezIWNWJTKTWsrXpreVObI=
Subject key identifier: 0A:F5:CF:9B:95:9E:BB:3D:A4:34:4A:56:06:7C:12:61:03:F2:24:55
Authority key identifier: D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95
Certificate issuer: /CN=d052bc250ff778b7279a4b18c126740d4ce86c95
Certificate serial: 01A14684E8CD237798CA07D0458DD3CC1A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
Manifest number: 0122
Signing time: Fri 16 Oct 2026 21:01:17 +0000
Manifest this update: Fri 16 Oct 2026 21:01:17 +0000
Manifest next update: Sat 17 Oct 2026 21:01:17 +0000
Files and hashes: 1: 0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl (hash: jFF84dsdBadI4mKsoMe7490oaeCqXZ5BjSt0AVMFHSs=)
2: 1-uqAA49B-LNga8wL-Km6wovobcI.roa (hash: kAUV5RbRLGHjSsvGuNU8jasfwM1rrJe2ngCkHs1tfUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:84:e8:cd:23:77:98:ca:07:d0:45:8d:d3:cc:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d052bc250ff778b7279a4b18c126740d4ce86c95
Validity
Not Before: Oct 16 21:01:17 2026 GMT
Not After : Oct 17 21:01:17 2026 GMT
Subject: CN=0af5cf9b959ebb3da4344a56067c126103f22455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:3d:1d:4c:25:02:4f:23:fe:c9:6d:92:dd:
f7:0f:a6:cd:d9:01:07:1a:77:51:3c:9c:0b:4a:2b:
f8:dd:36:c2:f3:5c:d7:b5:77:09:39:c7:4c:a0:21:
4e:3a:15:11:7d:3b:5e:85:7f:7d:e2:7b:61:14:95:
10:a7:2d:cb:b1:96:ac:33:0a:a5:a3:92:d4:fe:df:
82:15:7d:4a:ea:09:fe:43:fe:f3:62:98:da:bf:92:
84:52:c8:ca:e7:a6:00:bf:81:10:1d:ff:94:64:ce:
55:fe:ae:5d:3c:19:13:b2:72:33:ea:78:fd:7e:e6:
5a:a4:95:c2:f1:26:6e:30:eb:b3:7b:8c:36:ce:93:
b6:53:92:0f:65:e7:23:61:45:9a:1e:1b:ea:3b:9c:
c3:0b:cc:31:04:a9:27:ca:9b:b2:fd:aa:35:1d:41:
66:31:9d:3f:47:dc:8b:a7:9d:6b:07:2d:54:ec:86:
bd:d5:a7:b5:85:7d:b5:af:aa:96:24:3d:de:a6:b7:
49:74:2b:cc:85:62:5a:a3:cc:c6:34:84:43:e3:a9:
46:76:c0:c0:35:47:2b:53:88:e2:67:f1:8a:a7:e5:
35:d8:06:96:24:f6:ac:d3:97:90:c1:52:25:79:f9:
fc:85:1c:ec:2a:55:d0:48:24:80:5a:e6:74:b9:67:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:CF:9B:95:9E:BB:3D:A4:34:4A:56:06:7C:12:61:03:F2:24:55
X509v3 Authority Key Identifier:
keyid:D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c3:1e:73:4c:5a:c1:f7:53:0d:f9:05:46:6e:8d:44:ea:bd:
8d:ba:06:5a:6e:20:8f:b5:89:07:2c:07:83:f4:21:30:fe:1e:
1b:fd:23:ac:ad:3b:bc:a0:f0:f6:89:2b:cd:9c:e7:97:49:78:
70:a9:2a:4b:95:ad:7f:72:d9:75:77:f3:5f:5e:71:67:d4:ca:
cd:15:2b:01:4d:68:17:ad:47:00:d4:6c:ee:e6:a5:ff:31:fd:
5f:f2:b3:1f:bd:8d:f7:6a:ee:96:6c:57:f7:43:b0:26:7b:0d:
ae:23:8b:d9:57:be:65:fb:d5:ec:9f:ac:e2:e7:e0:14:ac:77:
48:2a:3a:ef:7a:9f:f6:aa:1e:3c:4a:aa:08:46:c1:30:9b:75:
20:9b:51:07:39:72:7d:52:09:b4:48:83:f4:fc:76:21:41:b4:
27:e6:f1:c5:10:d4:8e:30:d3:c6:e3:5c:1a:ed:52:b4:47:8e:
1a:fb:0c:7f:32:8f:41:86:70:75:69:bb:62:46:de:26:3f:46:
7e:d9:20:3f:79:af:1e:0b:2b:7e:a0:99:54:0f:f3:99:ae:4c:
91:53:92:c8:06:0d:5b:80:1f:45:b7:fc:9d:96:20:1d:c6:9a:
9c:9e:4a:6c:df:ca:16:e4:2a:01:ac:9a:95:9e:e8:fe:f4:27:
d4:c2:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:26 2026 by rpki-client