Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: eqY8J58IWlJaqzB5uq37/QHHr6oimDdeK2+jXurPWxI=
Subject key identifier: FA:B6:E4:6D:83:DA:78:CE:5B:D6:AA:88:AA:86:41:6A:20:68:FD:D4
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 01A13C6E91D4BBB9E1401E5465D41C12CBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 098F
Signing time: Wed 14 Oct 2026 22:00:41 +0000
Manifest this update: Wed 14 Oct 2026 22:00:41 +0000
Manifest next update: Thu 15 Oct 2026 22:00:41 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: +3OjB1bH0Xx7NH5UfBQ9yxSlH3zDIQR2YqcFqHZ2lSI=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:91:d4:bb:b9:e1:40:1e:54:65:d4:1c:12:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Oct 14 22:00:41 2026 GMT
Not After : Oct 15 22:00:41 2026 GMT
Subject: CN=fab6e46d83da78ce5bd6aa88aa86416a2068fdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:23:41:6b:f8:f5:a2:db:5a:f3:45:22:e0:
d8:5e:d5:9c:bf:c6:bd:9c:93:22:f2:21:92:0f:f1:
ef:93:3f:94:08:1d:6d:3f:db:15:64:28:4f:31:d3:
9c:55:35:06:38:8b:21:c9:6e:08:2e:80:be:c2:34:
2f:d1:4d:28:80:0e:bc:7a:5d:68:7e:b3:98:5d:97:
11:73:ad:57:30:ea:07:68:39:42:81:3a:78:cf:6c:
40:42:8f:6b:95:f6:30:11:77:e1:7f:aa:60:e8:4f:
b5:b0:66:a4:cd:e7:0a:9c:28:7a:97:92:b5:b7:7e:
45:b6:84:64:47:3f:2e:07:24:42:6a:53:8a:b5:91:
c1:33:a5:6e:04:53:2d:5f:a4:c5:ff:ce:53:b9:c7:
71:54:78:f9:17:3f:2d:a1:83:ff:1c:07:0b:63:12:
66:c3:5d:f6:b3:28:f8:54:2f:90:ad:7a:01:94:82:
86:82:86:79:b5:2b:92:9d:f4:4c:cf:04:36:c0:a3:
9c:60:6c:2c:6c:41:bf:6e:45:92:d4:33:2d:9f:01:
02:68:13:19:8e:7b:e8:a0:cf:fb:d9:62:31:48:e0:
f2:ea:e6:a6:92:c2:6b:b8:19:a0:af:9e:bc:b2:00:
4c:ca:a9:bc:40:84:a2:df:10:f1:05:dd:21:6a:8a:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:E4:6D:83:DA:78:CE:5B:D6:AA:88:AA:86:41:6A:20:68:FD:D4
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:99:f2:55:c4:31:fe:31:cd:ce:6d:16:db:95:42:77:8b:f5:
c3:2d:e2:87:51:c3:55:2d:f5:32:0e:35:f6:0d:46:7f:d3:60:
e3:24:ac:7d:0e:44:0a:ad:c2:a9:38:04:df:69:ad:56:47:21:
1f:f3:ac:66:e3:4a:5a:4e:60:e2:11:21:8d:72:7c:f4:e9:20:
e3:18:a9:5c:e1:d0:7f:39:28:b2:cb:28:89:5c:26:7b:72:5d:
bc:5c:2e:f3:ec:2d:b2:9d:07:d6:5d:15:c7:a1:5f:23:c6:61:
dd:25:8c:2b:08:76:27:36:85:a8:0f:d4:93:03:09:9e:56:7f:
bb:e4:2d:89:1b:3b:74:ec:ab:8b:6b:2e:d7:fe:2f:50:13:3b:
00:64:cf:ca:c7:d7:0a:3d:83:a7:2a:49:ae:9c:37:e3:b0:e6:
ba:6e:fc:c0:40:d7:bc:b5:b5:14:f3:8a:ef:8b:4f:93:02:4e:
f2:d3:07:50:1d:bd:52:02:7d:47:d5:eb:51:ec:29:3d:39:31:
c3:b3:7e:84:f5:e7:ea:f0:fa:57:fc:70:10:55:f8:d8:75:4d:
e4:20:8f:7a:77:97:91:f7:b0:ea:28:c5:a3:d4:d2:d9:43:be:
15:a5:46:8c:81:34:61:4a:e8:19:57:9d:a3:6c:8c:f1:9d:bd:
30:c6:61:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bpHUu7nhQB5UZdQcEsvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjUxOTY0ZWRlMTJiNGMwMzY3M2QyM2NkNDRjODM3NTMx
NWY0NWEwHhcNMjYxMDE0MjIwMDQxWhcNMjYxMDE1MjIwMDQxWjAzMTEwLwYDVQQD
EyhmYWI2ZTQ2ZDgzZGE3OGNlNWJkNmFhODhhYTg2NDE2YTIwNjhmZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvojQWv49aLbWvNFIuDYXtWcv8a9
nJMi8iGSD/Hvkz+UCB1tP9sVZChPMdOcVTUGOIshyW4ILoC+wjQv0U0ogA68el1o
frOYXZcRc61XMOoHaDlCgTp4z2xAQo9rlfYwEXfhf6pg6E+1sGakzecKnCh6l5K1
t35FtoRkRz8uByRCalOKtZHBM6VuBFMtX6TF/85TucdxVHj5Fz8toYP/HAcLYxJm
w132syj4VC+QrXoBlIKGgoZ5tSuSnfRMzwQ2wKOcYGwsbEG/bkWS1DMtnwECaBMZ
jnvooM/72WIxSODy6uamksJruBmgr568sgBMyqm8QISi3xDxBd0haorG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq25G2D2njOW9aqiKqGQWogaP3UMB8GA1UdIwQY
MBaAFNH1GWTt4StMA2c9I81EyDdTFfRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUt
NzUyMjBkNTNhNTVjLzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUtNzUyMjBkNTNhNTVj
LzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5nyVcQx
/jHNzm0W25VCd4v1wy3ih1HDVS31Mg419g1Gf9Ng4ySsfQ5ECq3CqTgE32mtVkch
H/OsZuNKWk5g4hEhjXJ89Okg4xipXOHQfzkosssoiVwme3JdvFwu8+wtsp0H1l0V
x6FfI8Zh3SWMKwh2JzaFqA/UkwMJnlZ/u+QtiRs7dOyri2su1/4vUBM7AGTPysfX
Cj2DpypJrpw347Dmum78wEDXvLW1FPOK74tPkwJO8tMHUB29UgJ9R9XrUewpPTkx
w7N+hPXn6vD6V/xwEFX42HVN5CCPeneXkfew6ijFo9TS2UO+FaVGjIE0YUroGVed
o2yM8Z29MMZhUA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:28 2026 by rpki-client