Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: 0DpvDg+W6Gzh5YYa9YNWJZ6NszD6mawfMlEq5+XTI20=
Subject key identifier: C2:BE:DE:EE:0F:22:9F:56:CE:64:87:50:57:9E:9A:A5:15:BA:72:A2
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019CAFED2F3E5BED0F7FFFAE479B1747DB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0359
Signing time: Mon 02 Mar 2026 19:01:22 +0000
Manifest this update: Mon 02 Mar 2026 19:01:22 +0000
Manifest next update: Tue 03 Mar 2026 19:01:22 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: 01Ncu3opWrvkWspKXNFoK44v3AXj6vNsyKQJERkdsjg=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:2f:3e:5b:ed:0f:7f:ff:ae:47:9b:17:47:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Mar 2 19:01:22 2026 GMT
Not After : Mar 3 19:01:22 2026 GMT
Subject: CN=c2bedeee0f229f56ce648750579e9aa515ba72a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:f6:fe:b3:49:12:ee:52:53:e9:36:44:54:
2c:e4:b2:e8:ce:54:42:61:d7:17:7e:e6:9a:f0:ec:
1e:54:da:00:90:49:21:e8:de:f2:87:b3:10:ac:2d:
b5:2d:f5:dc:04:37:4b:72:6b:70:84:d3:43:65:b9:
e8:cd:7e:58:18:b9:ba:61:46:97:e9:9c:f7:c0:39:
93:f2:94:cc:9a:4a:d6:f2:5c:f9:c2:24:60:a8:42:
a2:6b:95:05:f2:0c:38:b8:45:fc:29:79:47:20:7e:
61:2d:13:a9:1c:81:e1:e3:a3:35:f5:8c:ef:e7:1c:
1f:5d:ff:92:94:ac:be:af:e4:a9:1d:b7:f7:0b:a5:
39:50:26:0c:ce:82:8e:d3:0c:4c:41:56:9b:37:f0:
43:d3:14:90:aa:8a:93:34:9c:29:20:00:7b:7b:cd:
75:a0:88:f4:bd:ed:0b:fa:9d:05:a4:2e:8f:9e:e6:
a2:d5:60:19:18:6f:1b:fb:f3:3a:f0:79:49:4b:db:
f3:ad:02:2e:c9:24:93:26:f0:1b:55:b1:01:a4:f3:
d4:6d:e0:62:38:54:e7:b7:69:e9:af:00:a3:15:4e:
cf:d2:ad:a6:2d:b9:7c:8f:63:be:35:60:1b:cb:3a:
1c:ed:fe:9e:38:6e:fe:f6:e8:5a:d6:2e:57:f6:e9:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:DE:EE:0F:22:9F:56:CE:64:87:50:57:9E:9A:A5:15:BA:72:A2
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:7a:9a:4b:d7:7e:5a:bf:c9:a2:37:ed:98:ae:62:b7:29:
01:08:68:61:b4:24:7b:bc:94:a1:2b:10:12:20:62:61:a0:f2:
e2:21:47:70:0e:96:fc:89:f5:f5:21:63:21:a6:69:b4:e9:b9:
0c:0d:68:04:b6:e3:b6:3f:de:88:79:d3:e0:95:54:df:db:12:
14:68:14:01:bf:28:39:57:7b:29:93:7b:49:0f:3b:34:f7:66:
e5:d7:b6:98:b6:dc:67:be:5f:a4:2a:3d:6e:6a:e4:30:7f:50:
56:5b:55:23:c4:76:e6:b2:56:7f:ec:15:0f:c8:96:9e:a4:96:
b3:7e:d5:02:c5:3a:3d:5c:16:cb:32:96:3c:d0:64:ca:9e:46:
53:77:72:6e:cc:9f:8d:7c:0d:ee:32:83:58:c6:52:63:a8:0c:
90:f6:2f:c3:34:ad:38:af:66:87:09:07:bb:7e:56:dd:ca:ed:
41:20:4e:b6:1a:6d:32:1a:8e:a2:ad:29:72:d8:38:a5:3d:74:
ea:95:24:ae:17:70:10:5a:61:41:de:d4:5f:5f:a0:76:86:65:
9d:73:b1:dc:15:bf:bb:db:5c:54:95:9a:6b:2c:30:26:21:23:
6b:d4:27:19:84:23:dc:3b:45:71:3d:61:bc:23:9b:df:c7:78:
31:c3:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:20 2026 by rpki-client