Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: IPrMj2HHca27LbqYudJJmSSTm2TpGc3NEMxnhA9dR5Q=
Subject key identifier: 7F:E9:DA:EA:01:F8:6D:44:65:6D:FF:69:E7:80:0D:41:5B:05:A2:5E
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 01A0E96509C9080D659E907E7215B31B0812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0589
Signing time: Mon 28 Sep 2026 19:01:47 +0000
Manifest this update: Mon 28 Sep 2026 19:01:47 +0000
Manifest next update: Tue 29 Sep 2026 19:01:47 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: NTRCpwUVnJKlJK7x5+tG0IyomErjhHHzt2fG79Hmdqk=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:65:09:c9:08:0d:65:9e:90:7e:72:15:b3:1b:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Sep 28 19:01:47 2026 GMT
Not After : Sep 29 19:01:47 2026 GMT
Subject: CN=7fe9daea01f86d44656dff69e7800d415b05a25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:d5:13:64:b1:b6:ed:72:d1:7c:cf:d9:a6:
38:be:ea:88:f2:4e:ee:c8:10:03:af:b6:ba:35:e4:
e3:9d:cc:cd:eb:77:07:f6:a6:b0:ed:a4:5e:2a:d8:
b9:d9:77:f7:ba:b8:a7:35:6c:8a:07:43:f3:37:af:
5a:18:2f:c4:b7:5c:19:7f:74:45:9d:52:ad:88:19:
f7:af:0e:e5:db:3a:d8:f2:4a:98:ac:3e:ac:d0:40:
f1:2a:39:59:2c:25:ff:e6:2f:40:1e:3e:7f:c9:7c:
b7:05:4e:db:21:8f:26:62:cd:49:eb:a3:94:9e:da:
2e:3a:46:e3:ad:a4:3f:d3:de:25:c8:87:33:c5:0f:
99:30:38:8f:c4:3d:ca:4a:f2:43:e9:be:a4:80:b5:
f4:a4:e6:a0:f4:73:08:44:7d:39:73:73:e5:64:fe:
2b:76:b9:58:7d:97:6d:75:bf:cf:a2:56:15:ec:cf:
c0:1f:6c:ec:2d:8b:79:c3:de:d5:a3:8c:4f:ac:f0:
61:22:67:9a:06:de:b3:42:92:89:08:8d:b3:68:a9:
09:26:2f:1d:7c:b1:cd:61:ca:01:fa:a6:02:47:11:
4a:1c:9f:c1:c0:89:09:fc:47:e6:ac:8e:03:f8:f5:
cf:6a:b3:50:92:c5:e4:27:6c:98:89:dd:a1:fd:25:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:DA:EA:01:F8:6D:44:65:6D:FF:69:E7:80:0D:41:5B:05:A2:5E
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c0:5c:02:a3:33:1a:d4:d7:d2:23:b7:72:41:3d:40:dc:ee:
44:5e:20:a9:25:2a:75:0a:c6:2e:cc:9f:3c:d6:79:01:fa:73:
a6:94:4b:35:96:7d:43:62:6f:63:8b:67:7c:a6:07:64:7c:18:
cc:2a:34:54:1e:28:57:89:fa:9f:f7:17:86:a1:c9:9e:82:2b:
05:99:61:f9:83:e5:78:6c:50:4c:d9:58:7a:48:45:37:61:01:
5d:57:8f:c0:84:d1:1a:03:03:f3:f2:62:47:d0:4e:c5:73:77:
59:93:3b:58:f7:75:08:04:b6:7c:a1:30:87:89:46:be:1f:40:
5f:26:e9:ca:93:80:27:db:dc:6f:47:13:fe:31:90:ed:9d:10:
32:8f:99:32:fa:47:fd:bd:76:09:8c:00:02:d6:e4:7e:4d:43:
b6:4c:4e:8e:e4:31:37:64:a8:a7:49:71:4b:84:09:c3:77:06:
16:ee:c8:04:9c:ff:85:48:1f:9b:5b:38:18:50:1f:c6:40:82:
0b:4d:80:4e:d0:08:ec:6f:eb:55:c2:66:80:1f:3f:a6:14:0e:
f7:7f:a6:1c:6d:0a:b5:03:c6:bf:a0:06:7b:0e:a9:25:ac:38:
6c:36:96:e9:b0:60:40:1d:ce:3e:69:b6:24:5f:e9:a1:1b:3f:
e5:a5:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:12:51 2026 by rpki-client