Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: 39OpnYrszHiXUqq+DrNrDRdVA4q26u48tIWl+PpYSlw=
Subject key identifier: A9:F0:FC:24:FA:13:16:39:0F:0F:96:88:9A:D5:20:61:B5:E5:3B:59
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019E31BC01180C14EEA06A9344AFE6779707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0DF8
Signing time: Sat 16 May 2026 17:01:05 +0000
Manifest this update: Sat 16 May 2026 17:01:05 +0000
Manifest next update: Sun 17 May 2026 17:01:05 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: JFs9tG2IpXi3SH0/VNRtbtZAtF0Ex6i01IvNpS2jeIg=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:01:18:0c:14:ee:a0:6a:93:44:af:e6:77:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: May 16 17:01:05 2026 GMT
Not After : May 17 17:01:05 2026 GMT
Subject: CN=a9f0fc24fa1316390f0f96889ad52061b5e53b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:09:30:31:09:41:4b:4d:ac:c6:3e:ce:12:
75:b6:d5:19:e2:5a:29:1f:ad:15:14:a9:e1:21:31:
7d:fc:30:1e:08:89:75:54:d6:46:9c:12:f1:59:21:
3c:20:7d:7f:ce:01:9b:34:03:0d:eb:44:f5:6c:14:
14:29:07:1d:3a:c8:a1:5c:8a:f4:a6:cb:af:9c:c7:
71:5f:96:27:8a:2e:9f:e0:f8:c8:71:01:94:80:e2:
0a:9b:8c:db:85:ae:b8:ab:c8:bb:f5:72:dc:11:d1:
e4:17:ec:3e:24:09:94:e1:ea:ff:7c:c0:ff:d8:20:
df:66:f9:74:3f:43:45:20:8d:08:1b:80:e5:0b:18:
c3:29:cd:09:7a:35:99:aa:ed:cf:d0:a7:93:e3:5b:
b9:28:73:fd:db:c9:ed:76:fb:79:1d:6a:0e:85:2e:
73:77:43:a9:d4:19:10:fb:24:28:61:c2:52:41:ac:
42:6e:2c:88:1a:c9:76:28:ed:75:21:1f:09:67:e7:
d7:92:51:8c:e8:ee:7c:4c:d2:2f:cd:e7:fe:e2:90:
0f:b7:b4:49:18:1e:83:f8:39:2c:f2:43:89:ea:8f:
1f:71:a4:b7:33:56:bb:a8:ce:73:2a:b3:06:05:8c:
aa:3a:17:87:9f:95:21:af:ea:4c:a2:e1:a5:d2:ee:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:FC:24:FA:13:16:39:0F:0F:96:88:9A:D5:20:61:B5:E5:3B:59
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:85:27:97:0d:c6:b9:65:77:ec:a2:52:4a:66:e0:e1:bd:31:
1b:b7:6b:26:f5:72:fb:cc:17:41:1d:3a:c3:d0:5a:62:5b:4e:
8e:ba:e0:0a:d9:da:b0:62:b8:d8:d6:5e:56:53:4f:58:88:54:
38:ac:2a:ff:ef:34:2f:15:52:2f:fc:dc:e6:da:d5:f2:10:af:
c9:fb:b5:cf:14:05:4a:50:95:1c:d4:46:a6:35:c5:1c:33:8d:
cf:33:26:15:68:ce:87:e2:81:fc:48:2a:fc:ee:de:52:3c:06:
95:c7:ab:d0:81:8c:b8:e9:66:f5:fb:72:9f:c0:74:fa:07:70:
0e:d6:6c:47:21:98:a0:4a:ca:1c:19:17:eb:3f:af:b7:ed:24:
0f:e1:6b:6f:f7:a9:bf:96:66:43:5d:f3:fe:55:07:f6:2e:9d:
e6:1e:6e:f1:73:93:b4:45:24:2a:5a:c4:8b:d1:ec:da:55:6f:
72:71:fe:25:d5:b6:0e:ad:2d:43:9e:99:2f:d4:3f:fb:7c:dc:
a9:1b:de:c9:10:e8:de:ad:2a:91:9d:bc:a9:85:95:c8:89:02:
7c:9c:c3:73:4b:b3:03:08:7b:78:7e:2b:8d:30:fc:03:f7:6b:
9b:68:50:f3:cd:28:2e:9e:46:86:70:69:f6:73:31:d2:ea:3a:
e9:23:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:36 2026 by rpki-client