Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: +QYN6TIJ5gJ8HPGX35f95hBFy81MBfNCUTgNpo5MAxA=
Subject key identifier: 03:F0:50:3F:18:09:EF:8E:BC:08:7B:E4:7B:1B:1F:4D:C5:10:85:B7
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 019DCFAC83B631CC6932C0FA08EFACB3D0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0B21
Signing time: Mon 27 Apr 2026 16:01:22 +0000
Manifest this update: Mon 27 Apr 2026 16:01:22 +0000
Manifest next update: Tue 28 Apr 2026 16:01:22 +0000
Files and hashes: 1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: Y7rDCC/XUKt74aZ4Fh7+qGXi5EqRiDlQOCA2/pP7Vno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:83:b6:31:cc:69:32:c0:fa:08:ef:ac:b3:d0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Apr 27 16:01:22 2026 GMT
Not After : Apr 28 16:01:22 2026 GMT
Subject: CN=03f0503f1809ef8ebc087be47b1b1f4dc51085b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:0c:39:37:64:de:a7:dc:18:0e:ef:86:b0:
19:82:50:91:bd:3e:90:70:74:02:22:c6:64:25:03:
15:ec:13:ed:e5:0f:55:95:fb:c0:ac:b2:a3:ea:21:
79:5f:52:09:c4:46:9c:94:27:3c:52:93:3a:6b:26:
1e:3e:93:b4:5d:e7:69:15:d3:54:f1:4a:08:2c:c2:
1b:8a:a1:32:a8:87:a0:37:5f:3d:ee:e6:4c:c3:6b:
ff:d6:dc:3d:cf:68:c1:93:ad:95:78:5c:7a:b4:c4:
77:18:aa:b5:ac:24:34:03:a6:fc:b6:d2:48:92:cd:
c3:c3:18:5d:b5:50:4b:e7:42:09:07:8d:25:59:d7:
be:cb:52:5c:24:a6:b3:e2:1e:52:e8:9c:98:71:d3:
0d:b3:79:83:c1:2b:cf:3a:bc:60:db:6d:5d:38:93:
84:8a:19:6f:f5:ca:ab:a6:ec:35:22:f0:e5:5c:d5:
f7:18:d3:7a:41:78:ce:60:40:ae:f6:76:97:6e:b4:
c2:4f:e0:4f:a4:1e:c0:47:8d:95:31:98:22:65:f9:
f1:22:3c:3c:7e:25:9d:0e:aa:ae:ab:bb:24:b5:f9:
68:56:a5:6d:2f:9e:59:3f:63:80:10:67:c3:ed:01:
a2:31:21:4a:5c:5a:33:f7:c5:b1:2c:be:51:15:99:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:50:3F:18:09:EF:8E:BC:08:7B:E4:7B:1B:1F:4D:C5:10:85:B7
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5c:07:5f:16:20:f0:c4:cc:11:e2:d8:55:ae:f2:1a:91:89:
ba:cd:06:3a:a5:dc:ca:c6:af:9e:00:39:a3:99:b4:96:d5:17:
59:99:b8:7a:6b:69:da:15:61:e5:c5:88:ce:38:48:bb:c1:47:
d6:08:78:34:5f:16:8e:e5:5a:37:51:6d:1c:99:fc:6e:c4:6c:
d2:4d:1a:f5:3a:bc:b7:31:b4:8a:40:4b:9d:6c:b1:25:76:fc:
2d:09:56:31:41:9a:77:a7:bb:de:1f:ad:24:03:fe:92:50:d0:
ca:9d:c4:88:85:b4:0b:72:92:eb:cb:7f:e3:62:de:1d:e1:b5:
e2:9e:ec:be:5c:83:35:74:99:8c:38:c1:f4:21:14:7d:ab:32:
81:11:f1:77:36:2f:3e:d8:3a:da:2f:b1:b2:70:4e:42:93:39:
85:c7:05:46:bc:29:f3:79:53:d7:23:4f:9e:3e:1f:d7:89:85:
96:22:a8:43:f3:f9:67:7c:99:ed:bc:50:47:ab:53:27:a4:62:
33:6c:b1:5c:9c:fc:e6:e1:f9:e0:02:e6:47:a6:ca:e8:45:39:
da:a8:fe:0e:19:d6:6d:7d:48:ae:35:73:cf:74:62:89:b0:3d:
93:7f:e9:b4:d6:b9:9e:40:40:bb:e3:21:1d:61:5c:b9:43:b8:
42:a8:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:12:26 2026 by rpki-client