Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
File: 0WkNdbRvruYmp5o7Dn32tqcj8yk.mft (raw, json)
Hash identifier: S6BJ/LYBqviOc1GkfgluURhX8fDwZ7GfVaN3jxcbKJ8=
Subject key identifier: A8:64:03:57:A0:92:D1:83:32:2A:D2:49:2C:36:1B:40:A8:8F:77:85
Authority key identifier: D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
Certificate issuer: /CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Certificate serial: 019E49C4BA7B522131E8CBE5DABB7EAC7CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
Manifest number: AB
Signing time: Thu 21 May 2026 09:01:29 +0000
Manifest this update: Thu 21 May 2026 09:01:29 +0000
Manifest next update: Fri 22 May 2026 09:01:29 +0000
Files and hashes: 1: 0WkNdbRvruYmp5o7Dn32tqcj8yk.crl (hash: /beAZ1tSM86oTnW6V6SKE3F8JdcDLaEzjp6DijPwb3I=)
2: 1-yp1lR1t9CHfuX3rrZ9tBUSW6YU.roa (hash: ysaq9zqofJGOE0NIkNp0CsTNypyLgdEzk9CWYMwusP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:c4:ba:7b:52:21:31:e8:cb:e5:da:bb:7e:ac:7c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Validity
Not Before: May 21 09:01:29 2026 GMT
Not After : May 22 09:01:29 2026 GMT
Subject: CN=a8640357a092d183322ad2492c361b40a88f7785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:cf:0f:ce:ab:72:20:5f:3c:15:e3:82:ee:
e7:7b:f5:9c:22:79:7d:72:07:6e:b7:09:19:48:14:
39:dc:51:67:fe:c2:2c:d1:6e:6f:90:11:08:45:bf:
93:df:9a:3c:d6:9b:21:2f:a4:ee:2e:82:e8:cf:a7:
d6:72:22:3e:05:a2:fd:8d:24:98:a4:7c:c1:00:e5:
9e:29:1a:35:7c:e2:46:b0:dd:a2:4a:8c:74:55:00:
7a:35:b1:1a:05:eb:a1:13:38:1a:15:eb:67:d4:7a:
04:16:24:cc:74:2d:9e:e1:0f:1c:7d:9e:bd:9e:cb:
9e:2b:61:3f:10:48:e1:da:29:bd:f3:eb:ee:e6:e2:
10:06:d9:be:3f:77:91:ea:8e:66:e0:04:4c:fa:0c:
e3:7d:d4:18:36:5f:5c:21:ec:a7:23:68:27:15:79:
53:ec:ac:f2:02:6a:3f:dd:f2:3a:79:2b:2d:86:07:
01:65:bc:6d:0a:82:6a:2b:45:a7:a2:08:6d:ec:0b:
fc:66:df:00:eb:9a:4e:e2:e8:6e:fd:93:12:c6:e8:
6b:ea:28:75:22:bc:e0:58:56:61:bf:84:4f:eb:a1:
cd:ac:ea:89:6d:0d:b8:a7:0b:d6:20:4c:4b:70:67:
59:1e:3a:e6:cf:fc:d4:f7:e1:a3:ef:c8:ca:6c:36:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:03:57:A0:92:D1:83:32:2A:D2:49:2C:36:1B:40:A8:8F:77:85
X509v3 Authority Key Identifier:
keyid:D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:48:24:0e:05:ea:de:a5:06:cd:2a:ae:d7:22:e5:09:2d:3d:
c6:63:de:f3:9b:97:3b:7e:be:c7:22:6b:34:80:55:61:ab:c3:
5a:b7:10:83:ef:57:8d:6e:31:4d:ee:db:e6:18:89:35:0d:51:
1a:7e:bd:06:71:7b:44:78:29:df:c2:40:24:71:78:d8:9f:c5:
cb:aa:ba:43:c4:91:2a:21:5b:20:e6:28:30:2e:d6:3c:1c:2f:
ca:b6:3b:5f:b2:10:06:51:60:41:93:69:71:8e:dc:ba:66:a4:
29:61:c7:50:f8:ab:93:db:e5:4a:ef:bc:8b:b5:a9:fe:81:fa:
e5:8d:c1:10:87:ff:a6:87:a0:cb:8a:6c:28:6b:92:36:1e:06:
0c:57:d0:ce:5e:91:9e:75:59:f9:cf:d8:00:b6:85:96:ec:d9:
68:d6:54:45:eb:39:ec:e4:ce:f8:9f:0c:37:f8:26:38:97:22:
e9:71:ff:13:7c:6c:f1:67:fe:90:ef:ff:27:d9:6f:5c:b8:ec:
be:ba:98:35:4c:a1:48:a3:3b:d8:70:40:ef:5c:de:ae:d1:36:
64:84:f0:8a:77:0e:e7:1a:e0:05:cb:56:13:e6:26:8e:49:87:
5f:db:fc:47:19:2d:a4:04:df:85:7a:ad:69:52:ee:ea:c6:7a:
15:ae:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:25:36 2026 by rpki-client