Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: Yf/X4xOun+Ml716L2F/29cG5tu0mwmTj2OexAG2BAvM=
Subject key identifier: A8:D0:36:AC:EC:40:FC:E0:27:1F:A9:7E:F2:3B:A9:94:23:F7:B6:53
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 019FA9E32FEAF8B91566ABF83F804DD5200E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 1710
Signing time: Tue 28 Jul 2026 18:01:06 +0000
Manifest this update: Tue 28 Jul 2026 18:01:06 +0000
Manifest next update: Wed 29 Jul 2026 18:01:06 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: PtQlvI6jrXVOfkd60jsvGUXS+MKvNA/wG6d12q/oxDE=)
2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:2f:ea:f8:b9:15:66:ab:f8:3f:80:4d:d5:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Jul 28 18:01:06 2026 GMT
Not After : Jul 29 18:01:06 2026 GMT
Subject: CN=a8d036acec40fce0271fa97ef23ba99423f7b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:b0:f8:96:0e:73:c8:cc:e8:8b:c2:7e:5d:
16:5e:12:4e:c4:aa:c0:64:09:c9:75:9e:3c:09:ba:
17:f4:5a:09:3f:66:d7:d4:e9:68:e2:d2:75:c2:6d:
85:aa:f1:1a:54:7c:5c:41:e1:8e:f5:ea:de:c4:e0:
bb:85:b6:a0:4a:1f:bb:54:de:aa:d6:1e:15:4f:b8:
4b:06:b1:28:6b:ed:2e:59:59:fa:1a:69:f1:7c:26:
9c:eb:4c:bd:97:41:ac:71:d0:0f:9a:a8:53:96:e0:
b0:00:12:49:a8:73:da:e7:74:15:c0:14:62:59:62:
d0:bd:af:56:b3:14:86:81:19:ca:89:e0:c5:06:65:
0b:6b:04:51:78:3a:7d:ae:00:cb:1c:e6:d0:fd:8e:
f5:ee:8d:33:95:1c:aa:c4:65:a9:88:b6:9c:8d:f0:
f4:4b:ed:85:a7:e7:09:48:b5:50:ab:5b:5b:a9:56:
db:f6:0b:7e:c5:51:c5:29:5b:6e:aa:7d:9a:a7:96:
9e:cd:3d:e2:9d:0a:d7:3f:b5:c9:30:f9:e2:a9:35:
77:66:d2:95:0c:fb:e1:b4:c1:14:1e:69:e6:9b:34:
5d:58:84:15:5a:c2:5c:96:6e:45:55:d0:c6:56:f7:
c0:c6:dd:f7:b7:bd:43:8d:fa:7d:d7:b9:e0:12:28:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:36:AC:EC:40:FC:E0:27:1F:A9:7E:F2:3B:A9:94:23:F7:B6:53
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:c9:22:76:ee:ed:34:4e:b5:b0:60:b1:b1:03:91:a8:77:
9d:3f:36:9e:0a:de:b5:ac:01:c1:61:fe:67:c6:31:d4:eb:ad:
7c:69:3b:3f:fc:de:12:5e:f3:98:21:4c:d0:de:1a:1d:a7:77:
cc:b0:d3:41:1f:7b:c1:96:ba:ac:33:9c:a6:88:fd:8a:6a:65:
f8:23:0e:b6:76:98:21:ea:22:4a:97:15:3d:ea:c7:0c:d8:59:
5c:f0:dd:03:6e:d1:d0:ef:bc:69:38:39:7e:39:05:75:ec:e6:
48:5f:99:5b:ea:9d:1e:87:56:0c:5f:16:d3:07:da:f2:21:74:
a7:9b:c2:2f:c9:c9:09:78:2a:85:93:79:32:08:76:12:41:03:
f1:66:94:9a:53:0b:b3:bf:c7:f5:37:6d:d0:0a:01:c0:ee:26:
73:b5:58:05:6c:18:50:0c:48:cd:27:fa:79:d4:54:f5:cd:1e:
ad:f9:7b:2f:9b:36:60:16:a5:34:c1:cc:7a:90:e8:0b:4d:0c:
78:5b:39:1a:8b:7d:4a:f2:54:6f:62:fc:5a:35:cf:43:f4:6f:
9d:bf:a4:a5:80:56:a2:e4:87:69:82:de:f4:cd:10:73:39:07:
f6:dd:71:26:6b:08:7c:6b:83:22:19:df:0c:a2:e8:06:cb:91:
98:57:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:37 2026 by rpki-client