Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: Ry9fK3QjtPhaHYkIDJv9NbXBpgkHJ7CMf8H00lXaNdQ=
Subject key identifier: 26:84:0C:FD:F0:93:25:18:32:53:72:97:72:55:07:1B:14:70:85:28
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019FAABEEC5962D089D0113A0AE2B66A2874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 04E4
Signing time: Tue 28 Jul 2026 22:01:06 +0000
Manifest this update: Tue 28 Jul 2026 22:01:06 +0000
Manifest next update: Wed 29 Jul 2026 22:01:06 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: ZAHshQ4dH28Ai2zOwKlmS/B0f5mMd7As9Lu53SCkALw=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:ec:59:62:d0:89:d0:11:3a:0a:e2:b6:6a:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Jul 28 22:01:06 2026 GMT
Not After : Jul 29 22:01:06 2026 GMT
Subject: CN=26840cfdf0932518325372977255071b14708528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:30:e3:b1:fc:ee:71:66:1c:79:a0:fb:d1:
d3:f8:b0:76:dc:85:15:59:9d:4b:b7:db:48:3f:43:
85:01:4a:73:9d:93:59:81:35:c1:41:b0:90:1d:80:
3f:4f:da:ed:af:ea:33:23:91:10:39:2f:92:7f:2e:
5a:16:0e:e1:6e:5e:09:0a:71:81:2e:cb:8d:81:4b:
84:d0:3c:05:04:b5:d1:ad:4e:b8:13:35:07:27:29:
16:84:f1:2b:3e:ee:f1:8b:8f:04:f1:c6:05:14:36:
97:e4:11:dc:1e:57:1e:27:94:ff:de:81:50:4e:43:
65:2b:7c:1c:8f:c0:d5:5d:58:4f:6d:c2:ca:3d:d8:
27:5d:ea:6c:c7:2e:ef:3d:b5:89:3b:bb:6f:17:83:
b6:0a:b6:87:ca:2a:0a:55:6f:43:d2:fb:ec:bb:56:
e7:35:e0:ae:36:2a:ba:11:ae:9a:c3:ea:76:e5:30:
80:ad:3a:10:08:f2:fb:9f:d0:63:c0:c4:18:45:83:
20:5b:c1:bd:81:64:3f:2d:46:89:b9:e1:39:1a:d1:
08:cf:08:10:f0:f6:08:b1:29:d7:ed:e1:5f:4a:ef:
d5:70:a6:f2:d0:3c:31:23:e4:ce:6d:ab:4c:0a:e2:
47:05:36:69:b7:93:46:3f:d3:bf:02:2c:ac:56:94:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:84:0C:FD:F0:93:25:18:32:53:72:97:72:55:07:1B:14:70:85:28
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:94:9d:53:83:73:e7:10:10:75:51:1f:38:b7:ec:54:66:45:
fa:e8:cc:c6:41:61:ee:6c:4d:3d:91:9c:e8:9c:96:b1:2b:4d:
74:ad:da:c1:99:e4:ec:54:86:94:72:88:c7:32:07:0c:62:97:
6c:08:16:39:7f:73:c5:ae:95:bb:82:53:ff:a3:d5:03:37:34:
47:10:9c:cb:91:d5:66:f2:7f:df:d5:ae:18:ad:ed:35:07:8c:
37:df:5e:7c:87:c3:66:4c:77:57:fa:c7:70:58:4c:6b:c3:c8:
90:7f:ff:b7:f4:1d:8f:b7:20:87:03:7b:88:4c:dc:0a:ab:bc:
d0:2c:b2:cd:de:a3:65:6b:2c:77:34:1d:f4:7f:b2:ac:62:a7:
d9:16:2d:67:6b:2c:0a:0e:c4:d4:25:6c:54:70:c5:ab:cf:cf:
b4:d1:31:7b:b9:d1:c6:50:01:c2:c0:53:13:fe:02:c1:b5:0d:
2b:c8:bc:95:ea:2b:8f:e1:56:65:12:40:f8:5c:52:26:fd:70:
83:0c:71:0e:e7:35:e4:3a:6e:51:44:ab:f2:ec:0d:32:c1:ad:
63:ff:c7:c9:d4:37:8c:bf:d2:2d:08:a6:1e:60:6d:63:38:19:
12:bb:45:96:79:90:bb:fc:ab:e1:92:d6:2e:2d:0d:67:fa:62:
6b:bb:fa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvuxZYtCJ0BE6CuK2aih0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh
ZTAxNDgwHhcNMjYwNzI4MjIwMTA2WhcNMjYwNzI5MjIwMTA2WjAzMTEwLwYDVQQD
EygyNjg0MGNmZGYwOTMyNTE4MzI1MzcyOTc3MjU1MDcxYjE0NzA4NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOkw47H87nFmHHmg+9HT+LB23IUV
WZ1Lt9tIP0OFAUpznZNZgTXBQbCQHYA/T9rtr+ozI5EQOS+Sfy5aFg7hbl4JCnGB
LsuNgUuE0DwFBLXRrU64EzUHJykWhPErPu7xi48E8cYFFDaX5BHcHlceJ5T/3oFQ
TkNlK3wcj8DVXVhPbcLKPdgnXepsxy7vPbWJO7tvF4O2CraHyioKVW9D0vvsu1bn
NeCuNiq6Ea6aw+p25TCArToQCPL7n9BjwMQYRYMgW8G9gWQ/LUaJueE5GtEIzwgQ
8PYIsSnX7eFfSu/VcKby0DwxI+TObatMCuJHBTZpt5NGP9O/AiysVpTn7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaEDP3wkyUYMlNyl3JVBxsUcIUoMB8GA1UdIwQY
MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt
M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk
LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpSdU4Nz
5xAQdVEfOLfsVGZF+ujMxkFh7mxNPZGc6JyWsStNdK3awZnk7FSGlHKIxzIHDGKX
bAgWOX9zxa6Vu4JT/6PVAzc0RxCcy5HVZvJ/39WuGK3tNQeMN99efIfDZkx3V/rH
cFhMa8PIkH//t/Qdj7cghwN7iEzcCqu80Cyyzd6jZWssdzQd9H+yrGKn2RYtZ2ss
Cg7E1CVsVHDFq8/PtNExe7nRxlABwsBTE/4CwbUNK8i8leorj+FWZRJA+FxSJv1w
gwxxDuc15DpuUUSr8uwNMsGtY//HydQ3jL/SLQimHmBtYzgZErtFlnmQu/yr4ZLW
Li0NZ/pia7v6rw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:33 2026 by rpki-client