Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: BzcqiXjtzSa0GUbUoHM4kjSKQxIQ5iTafI2+lYnf1/Y=
Subject key identifier: CA:FF:29:E9:7F:AA:3D:D9:00:2D:C4:4B:3A:5D:BB:72:6D:93:43:4D
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019E30A97CD2705D9E701AC413DF0B0BE176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0605
Signing time: Sat 16 May 2026 12:01:14 +0000
Manifest this update: Sat 16 May 2026 12:01:14 +0000
Manifest next update: Sun 17 May 2026 12:01:14 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: 5SKx0c12h7Sf3mHPf4pYYA5lSheaVUL4Q+6k8TfAbQ4=)
2: PBy6RtlfcDlGYKQC96uBlitoIlA.roa (hash: ojEK+JsCI/EYNMzf6oz6tDrWJ6bHMpNxw4BtdlAh7Ls=)
3: b-ePuu9SrmhEXBMPt86xMQ-pphc.roa (hash: ypt0as7xpwN512+ygzUQi3tGsik5JKD0RnuDrs7wXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:7c:d2:70:5d:9e:70:1a:c4:13:df:0b:0b:e1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: May 16 12:01:14 2026 GMT
Not After : May 17 12:01:14 2026 GMT
Subject: CN=caff29e97faa3dd9002dc44b3a5dbb726d93434d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:fc:ee:a8:5f:a9:85:0c:ab:11:89:a6:a4:
ca:70:09:25:8d:27:7c:7d:b8:9c:b7:02:be:39:65:
f1:e3:78:85:d1:2d:4d:fa:be:e4:4e:04:13:79:11:
43:df:fc:be:81:49:7f:25:73:dd:8d:2b:e0:63:83:
7e:cb:0a:d3:5d:86:92:3d:a7:b7:15:cb:bd:83:7f:
e1:7f:82:1a:ae:72:de:e1:8c:24:6b:a2:36:77:63:
b8:1d:1b:62:47:ce:a7:d0:4e:41:4e:e6:12:59:07:
7b:51:70:8c:94:8b:4f:42:62:14:d2:7a:47:17:32:
1c:89:1d:85:3b:3e:9a:cf:a8:53:5b:e7:fa:a3:32:
35:be:95:5b:18:2d:3b:07:f7:3f:c8:2d:b2:c5:c1:
99:04:86:a5:b9:2d:04:30:34:7d:95:5c:11:f1:f9:
28:79:99:ff:a8:f4:f2:0f:36:7c:f0:ce:53:c7:cf:
c1:b2:3c:4c:20:62:a3:28:88:3e:c8:29:a7:c2:b1:
91:22:3b:04:d2:a3:52:c8:5d:70:37:c7:36:a5:f5:
49:a9:7f:07:61:87:3b:a4:3b:f2:c9:79:e6:72:18:
c6:3b:ac:81:e0:11:9b:25:40:2d:f8:76:f3:5b:8f:
d6:3b:78:b9:a2:19:31:51:63:ee:bf:d0:89:41:97:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:29:E9:7F:AA:3D:D9:00:2D:C4:4B:3A:5D:BB:72:6D:93:43:4D
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:70:da:19:d3:ee:fc:d8:7a:22:c1:42:30:2f:4b:66:91:e9:
2f:72:15:8c:5f:65:c9:19:01:08:73:b5:c0:68:9a:0b:49:92:
9a:60:5a:7f:67:a7:8e:52:67:02:89:10:40:b2:d1:7b:f7:13:
48:7c:06:8a:c7:64:f3:d6:73:d6:07:55:35:a4:0f:fb:c3:9a:
b6:9c:7a:ec:ba:71:4f:69:13:24:c4:ba:ed:fe:31:b7:72:d0:
e9:7e:a8:3d:38:87:8c:2b:44:22:be:60:82:43:fa:f1:89:6e:
72:45:07:95:76:c2:72:12:e2:d6:bb:65:3d:8f:58:1a:fb:51:
ed:b0:21:4c:a3:f5:a2:0d:8a:a3:c6:8e:0c:7f:de:20:39:54:
1f:ab:ee:82:79:84:84:d4:d0:c7:25:6c:22:9e:76:1a:ba:5d:
bb:68:c0:de:e6:9e:dd:b6:a5:5d:f2:c3:e9:c8:eb:35:34:2f:
07:c2:b8:99:1a:f6:e5:55:f6:fe:22:77:ee:81:d0:84:51:5b:
7a:df:d5:1f:ae:95:6c:c6:f2:5b:85:45:38:4a:c0:17:52:7f:
20:05:50:07:e1:0b:15:f1:98:e4:2a:fb:ce:c5:f6:9f:39:b4:
9e:9e:80:d2:f7:9e:9e:53:19:6a:00:f5:67:37:ac:e1:2a:5b:
75:07:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:41 2026 by rpki-client