Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: AY+bqf3nKeeTu0fuVNL40JlPbhnmY1v3h6kGFcwG9Xw=
Subject key identifier: BB:EB:A9:D9:02:6E:79:22:0A:4D:06:EF:2D:AA:5A:29:5F:9C:72:AA
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019E2F968D861C6F0EA8D2829E32AA43F948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0F8F
Signing time: Sat 16 May 2026 07:00:56 +0000
Manifest this update: Sat 16 May 2026 07:00:56 +0000
Manifest next update: Sun 17 May 2026 07:00:56 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: UccvzeUMUqVYdqF7Uhablp1s2nAo157ObdDXq+AUxE8=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:8d:86:1c:6f:0e:a8:d2:82:9e:32:aa:43:f9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: May 16 07:00:56 2026 GMT
Not After : May 17 07:00:56 2026 GMT
Subject: CN=bbeba9d9026e79220a4d06ef2daa5a295f9c72aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:32:30:f9:40:40:34:a2:94:15:e8:fc:c2:
36:a1:95:d0:ac:22:2e:57:39:ba:e9:76:e0:78:c0:
c9:0f:9d:3e:5e:40:49:01:75:eb:09:87:af:f7:6d:
cb:bf:ee:88:2b:9d:d9:83:f9:2a:50:a4:43:18:9e:
cd:2e:0a:d2:9b:a8:aa:62:60:26:6e:b4:0b:fb:7a:
0e:72:7b:f0:db:c2:79:8c:26:cf:e6:0a:b4:63:ca:
f5:98:2f:7b:c9:4b:50:80:60:00:e5:d7:bb:7b:e7:
d8:e9:be:8c:62:f9:14:44:ad:9c:42:23:1b:cb:7b:
fd:23:3c:e4:32:98:bf:2f:d0:f3:08:5d:51:51:15:
50:63:71:9f:50:e4:13:b7:ea:b0:a5:20:49:9f:c6:
91:71:79:6e:50:58:1e:02:51:93:4f:82:5f:d6:59:
93:3a:b7:e2:d5:4e:e9:95:3c:0d:93:d4:b7:cd:b5:
72:99:38:01:65:85:c5:2e:32:49:48:56:09:02:2f:
7b:78:36:41:46:f9:2c:b5:15:36:3e:72:e2:5e:58:
dc:b4:39:3b:8e:bd:d3:f5:5a:e2:65:94:57:46:2b:
37:d8:7a:bc:b5:b0:9e:38:c8:48:9b:fc:9d:c8:12:
ce:74:3f:35:a0:b1:cd:b2:8b:dd:1f:1c:45:e7:89:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:A9:D9:02:6E:79:22:0A:4D:06:EF:2D:AA:5A:29:5F:9C:72:AA
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:63:9f:a4:01:0f:a9:b4:f4:00:82:42:ba:d1:5e:b0:8e:66:
f0:d3:97:6a:54:6e:3e:7c:d4:ef:0a:ac:04:a3:60:fa:46:4b:
d9:51:1a:b6:1a:0a:c4:da:91:05:7d:1a:09:ee:93:86:14:f1:
88:be:d0:42:df:ba:f0:a7:f1:7b:76:cd:a1:c2:51:0f:eb:24:
d2:6e:01:9c:43:25:e9:5a:b1:c7:5e:72:5e:de:fd:5d:1c:45:
14:6c:22:6c:5e:75:f2:07:c9:dd:8b:ac:6d:ef:61:01:63:cf:
21:bd:e4:18:9c:eb:3a:7b:b6:dd:1e:bf:2d:2c:f7:8b:f0:e9:
42:f5:61:57:0f:da:f0:c5:3c:31:32:8d:99:d4:94:c4:1d:e2:
db:e2:be:33:7c:dc:1c:4c:c2:e8:93:c5:55:21:5c:50:4c:60:
0c:7a:81:99:c9:11:92:aa:c0:dc:6b:78:4f:f1:13:46:ef:9c:
d0:92:f9:36:57:5d:0b:00:42:d1:c1:1b:60:d2:af:e7:34:78:
bc:10:81:2b:c9:8d:51:75:46:a6:8a:cc:1b:b5:1c:c7:41:57:
92:52:dd:49:8a:a2:18:f0:2f:39:52:8b:50:ed:6b:a0:d5:8e:
f5:9c:0a:1d:88:93:68:e5:59:c3:74:0c:7a:21:34:72:8d:3c:
43:89:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:46 2026 by rpki-client