Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: ffBb7rWR9s/ufodwIpBGvCLX7kCXOYOY7Z/xuKtT+3s=
Subject key identifier: 6A:D3:E5:E3:C1:A0:80:EA:CA:57:3D:CE:89:12:AB:EB:A5:C9:43:C8
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 019CE5FF39118E75C877FFA5939645F41390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0AA8
Signing time: Fri 13 Mar 2026 07:00:34 +0000
Manifest this update: Fri 13 Mar 2026 07:00:34 +0000
Manifest next update: Sat 14 Mar 2026 07:00:34 +0000
Files and hashes: 1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: zULfKC2stAdx/s3sSwd2cqs2hiSQeCmds3FAlMsRRI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:39:11:8e:75:c8:77:ff:a5:93:96:45:f4:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Mar 13 07:00:34 2026 GMT
Not After : Mar 14 07:00:34 2026 GMT
Subject: CN=6ad3e5e3c1a080eaca573dce8912abeba5c943c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:8d:1f:5e:82:3a:c1:75:20:ec:46:3d:59:
b8:d8:d6:62:e7:5d:c5:e0:67:a6:f4:76:cc:10:2b:
d1:d5:9d:4a:6c:32:ff:7a:fe:f6:70:b4:23:67:53:
d7:66:8c:da:ce:e7:a5:89:bf:66:28:ac:d9:4e:12:
0c:01:04:37:53:17:24:5e:5a:ce:d9:fa:79:2e:d7:
7d:4c:6f:0c:69:c0:25:c8:b1:3a:ed:96:a5:6e:75:
5d:7c:95:5b:c8:36:c2:e7:d2:00:33:72:a4:2d:6f:
5d:ea:13:49:a6:55:87:68:19:c4:ea:03:f1:2e:c8:
d2:b4:16:e0:a5:77:3b:71:25:21:93:e4:77:19:5d:
f5:59:81:6d:f9:6d:d0:7a:98:37:9a:65:e9:e4:ea:
11:31:5f:41:23:a8:05:ff:0e:66:6c:57:23:3d:62:
b6:e0:7e:7d:89:7f:9e:b3:7a:81:19:fa:98:4e:d3:
c9:3d:bf:64:25:2f:1c:7c:9f:41:f9:63:4e:3d:11:
df:88:a1:5f:64:ff:d3:bc:b7:d3:75:7b:56:1e:73:
c7:e6:fb:65:39:6b:fa:6b:e0:03:92:cc:96:b8:6e:
4f:ca:70:9e:7b:ed:30:11:bc:58:1d:26:ef:36:09:
5b:a4:a6:5f:95:b9:59:d7:33:e1:0a:c5:46:c7:6f:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:E5:E3:C1:A0:80:EA:CA:57:3D:CE:89:12:AB:EB:A5:C9:43:C8
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:47:4d:c8:a0:b7:11:41:8e:2e:2f:b3:be:aa:c8:2d:c6:cc:
3c:da:d8:b9:fe:3a:a6:e0:98:8d:29:7c:84:d2:cf:81:ba:7c:
e0:43:4d:74:be:d8:fe:1e:4b:72:97:05:1f:c3:f9:86:71:55:
91:a0:7e:ee:bd:5c:bd:49:f2:bd:ab:69:3e:a3:39:81:b5:f6:
de:76:20:4a:c5:fb:1a:34:96:66:72:10:76:55:0a:f9:5a:0e:
ae:b5:2c:9b:ca:d4:a0:62:ee:a8:73:c2:5c:00:85:03:c5:ea:
b8:2a:14:58:4a:9e:8e:be:b5:e2:0b:9b:b7:c7:23:da:08:44:
fd:95:30:c2:61:2d:31:ac:0a:45:9a:5f:11:03:c9:7d:9d:3f:
bd:18:ee:4b:6c:89:9a:b7:33:50:d7:06:0f:f0:7e:73:8e:aa:
61:39:3f:2f:00:3e:eb:93:cb:26:f5:d3:08:f0:56:43:14:0e:
c0:98:5e:57:0b:8b:fe:41:7c:f2:06:4a:af:20:44:0d:bf:2b:
75:12:29:7e:41:08:d5:de:c4:15:8d:e2:23:80:5d:84:a0:a3:
7c:ad:77:d3:02:c9:2e:79:3a:ea:9c:7c:e0:41:79:99:88:d7:
6f:08:fb:30:61:63:be:b9:f2:9b:84:4a:fc:5a:6e:05:fb:30:
d0:4d:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:37:41 2026 by rpki-client