Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: fsVUj0QZ0oSQyqTws0hFG7iB5L3NXVRQR9vpZPG2fwM=
Subject key identifier: 36:33:C1:E6:9F:F7:84:9C:05:80:4B:6E:D8:24:D1:85:12:30:DD:19
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 01A13DEEDB7C866955E64CC4824F7A24C432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0F8C
Signing time: Thu 15 Oct 2026 05:00:26 +0000
Manifest this update: Thu 15 Oct 2026 05:00:26 +0000
Manifest next update: Fri 16 Oct 2026 05:00:26 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: l59ewzPhTZIK373BHhiGt4bI+xSDIqRoM7QvFeabVTE=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:db:7c:86:69:55:e6:4c:c4:82:4f:7a:24:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Oct 15 05:00:26 2026 GMT
Not After : Oct 16 05:00:26 2026 GMT
Subject: CN=3633c1e69ff7849c05804b6ed824d1851230dd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:94:93:a9:ad:c9:77:87:5b:d6:1c:74:96:
d4:34:aa:af:8e:d3:88:7c:55:ad:bc:d6:54:6c:c2:
df:12:61:79:c8:0e:71:49:d5:f2:61:97:77:a0:c3:
97:e5:d5:96:b1:c9:9a:80:9e:24:f8:11:1b:3a:22:
bd:cf:26:02:69:1a:30:43:bf:f2:2e:aa:7f:ed:88:
18:f9:c9:78:08:9b:b7:a1:13:5a:66:05:7a:fe:22:
7e:bc:30:c3:fa:25:b2:89:cf:f1:21:ee:e6:8e:85:
cc:45:95:b1:6e:2a:4c:30:95:eb:c0:fa:27:75:72:
6e:cb:99:d9:90:45:de:46:57:94:a0:12:95:31:e7:
26:37:e5:1b:4a:dd:44:09:f7:e0:57:b3:6c:7b:1b:
a9:ad:16:1a:85:a8:c2:10:df:4f:41:5c:f3:0e:bb:
71:f1:fd:c4:3d:98:e7:d4:6b:02:9f:cd:ab:d1:c8:
16:e0:b1:1b:82:16:e6:ca:e2:e2:b9:31:13:7e:35:
a0:cf:35:4e:bd:bd:e7:de:ab:73:cf:e1:76:5d:82:
7f:e0:0e:92:03:6a:98:61:6f:53:3a:7a:83:b1:e8:
8f:5c:65:8a:65:2b:2b:25:0d:7d:20:cc:04:d7:cf:
6c:05:ef:72:53:71:2f:96:bf:9b:4b:8b:0e:cc:1e:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:33:C1:E6:9F:F7:84:9C:05:80:4B:6E:D8:24:D1:85:12:30:DD:19
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8a:d0:e6:5a:19:ce:b4:ac:4c:2b:60:e7:81:fe:4b:a5:9c:
26:9f:5f:a2:41:54:5a:88:d2:bc:06:1e:8c:4d:0f:29:3b:93:
7b:d3:52:61:0f:e6:08:b4:c9:39:75:99:f3:9f:b6:b6:74:df:
23:d0:3e:5b:05:28:2b:e3:dd:be:d0:5e:61:ca:61:f1:16:1d:
c4:95:49:e8:c9:37:aa:58:78:6b:68:64:7c:33:af:bf:6e:0e:
5c:40:4e:2d:83:76:a2:d0:dd:7b:49:eb:b6:b6:d7:6e:c0:f8:
1e:61:ed:29:23:89:a9:6d:85:28:75:f1:78:16:71:00:95:b4:
76:44:18:9c:4a:06:69:61:9c:cc:a7:9d:3f:46:01:89:0b:97:
38:17:38:fd:25:6c:e1:ef:1a:12:9d:c3:61:44:39:ea:80:b2:
28:9a:20:95:60:fd:e9:6f:22:8d:2c:63:ab:82:37:1c:ce:40:
d2:7c:e0:67:f5:25:97:23:ba:b0:90:37:fe:71:20:ce:fc:57:
b8:f4:e5:38:40:f2:0c:53:b4:40:dd:9d:2b:cd:13:04:c8:97:
36:10:15:fa:5f:a3:77:56:32:cb:b3:4f:05:5d:8e:9c:2f:0a:
bd:eb:1e:67:d4:88:fe:1b:09:31:72:6c:a2:de:07:c0:29:80:
91:37:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:40:43 2026 by rpki-client