Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: sZUBR60VAeDDem8j5vdwWZJa2PexngOH1t4J0gWYaLU=
Subject key identifier: 0B:4E:4D:21:91:75:CB:38:AC:D4:DA:3F:DC:0F:FF:7E:CB:59:94:C5
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 01A0C9A1DCEC99B7F025B04324A94D70A5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 17A5
Signing time: Tue 22 Sep 2026 15:00:23 +0000
Manifest this update: Tue 22 Sep 2026 15:00:23 +0000
Manifest next update: Wed 23 Sep 2026 15:00:23 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: dT6XxPNaofQUZUBg3PsS/TrurkvWlY+BGBGh/5NrrBY=)
2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:dc:ec:99:b7:f0:25:b0:43:24:a9:4d:70:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Sep 22 15:00:23 2026 GMT
Not After : Sep 23 15:00:23 2026 GMT
Subject: CN=0b4e4d219175cb38acd4da3fdc0fff7ecb5994c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:26:0f:79:e1:03:f7:b1:12:ad:f8:85:3e:
a2:00:f8:68:77:c9:76:2b:9e:61:99:21:31:36:03:
c0:fe:25:6c:79:7b:85:89:66:3b:1d:25:61:f5:88:
13:7a:3f:f9:c2:81:02:eb:ab:79:6d:36:22:03:14:
e6:0e:b4:34:bb:56:25:ea:74:61:b7:ca:a5:f5:e0:
71:62:5c:17:aa:a3:1b:55:8b:b2:36:a0:e7:7f:52:
48:74:b5:cc:af:38:86:66:9e:26:2e:60:18:6c:7e:
e7:56:39:10:51:27:b5:f8:40:04:ba:66:ff:b4:cd:
db:bf:d1:65:3c:61:6d:ec:a7:1a:47:52:c1:9c:c6:
1a:67:65:c5:cb:70:30:f4:2b:18:48:23:4a:97:d9:
f6:5f:81:ac:56:d2:1b:f5:bf:b1:25:1b:89:21:e3:
8e:d4:8d:dc:0a:31:68:ea:ca:8f:10:c5:39:81:ca:
9d:3b:07:d6:14:a6:be:31:5d:98:43:4b:a0:d4:6e:
50:41:cb:a9:40:2e:44:ae:a5:f0:c6:c9:51:7f:72:
a2:9b:e1:09:51:17:a7:85:7f:f4:91:86:c9:a1:c3:
c6:9d:ad:03:45:a1:9b:f0:f5:3f:5a:f3:4b:aa:01:
f9:e8:72:01:78:82:1b:68:3f:a1:1d:59:4c:43:16:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:4D:21:91:75:CB:38:AC:D4:DA:3F:DC:0F:FF:7E:CB:59:94:C5
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6f:c6:83:1a:7a:b9:38:a2:77:81:ac:fd:33:6f:f3:33:c4:
fb:8c:df:24:f2:67:03:69:f3:c0:29:c6:94:1b:79:e5:63:0c:
5e:22:21:b1:46:4e:cc:f8:30:86:4c:6b:a0:ff:cc:14:d7:d3:
80:9d:91:7e:8c:90:00:f3:e1:51:62:73:23:f2:30:27:5d:f4:
13:ed:1d:76:3b:ff:bc:32:2d:ec:81:af:bf:b2:21:de:99:26:
0b:e3:42:8e:a0:17:8e:ac:c2:6d:a4:86:fb:62:18:ac:44:a2:
87:24:ef:26:9c:93:22:49:7f:ab:91:b6:7e:99:c4:48:2f:9d:
58:e0:8c:ef:f2:0d:7d:0f:e9:c4:1f:67:c3:79:5f:35:50:10:
08:7e:6c:96:33:36:ae:52:48:29:29:5e:28:3b:65:b8:d9:e2:
71:e8:2a:2e:4b:e5:55:2e:6f:b1:b5:02:70:60:75:3c:90:86:
ac:53:91:52:23:f6:a9:91:f0:df:d1:87:3b:00:40:1c:6c:2c:
1c:1e:e5:9d:19:3c:30:24:26:21:8e:38:df:5a:69:ce:83:fa:
00:7b:9e:ce:05:94:b4:f6:b3:68:9e:c9:c8:97:1e:40:b4:c8:
91:a0:c8:54:b9:ee:78:12:a7:6d:23:30:93:3d:70:36:7f:73:
88:51:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:18:58 2026 by rpki-client