Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: bjlguPaA0L6BS86E1Awhw8ZlWqpKZgES0baN/ZqIags=
Subject key identifier: 08:B9:1C:7A:A3:76:D4:E9:B8:58:14:2D:78:21:B3:48:FE:E8:14:57
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 019EBE7FB42F3E56D96C01014DFA90083A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 08A9
Signing time: Sat 13 Jun 2026 01:01:40 +0000
Manifest this update: Sat 13 Jun 2026 01:01:40 +0000
Manifest next update: Sun 14 Jun 2026 01:01:40 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: iOIhP8S4IuFv8o4cria92UCoJpHO9bPa/Fgf9fIPxkI=)
2: mRB5Hkvcj1hKYhRgNGxK5sq7CD0.asa (hash: OW2a5vSieuRwC1YjVzbLfoP6BZPPRx+bPmnYVgXy6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:b4:2f:3e:56:d9:6c:01:01:4d:fa:90:08:3a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Jun 13 01:01:40 2026 GMT
Not After : Jun 14 01:01:40 2026 GMT
Subject: CN=08b91c7aa376d4e9b858142d7821b348fee81457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:e7:49:70:32:4f:5d:b8:ac:fb:d0:0f:2c:
95:e6:44:f2:5a:fb:6d:04:cf:c6:dc:38:f7:ec:0b:
63:0d:78:38:ae:40:f2:8a:ae:7d:33:39:89:0d:38:
0e:e6:7f:b8:90:94:47:f8:07:c2:09:b7:ad:ea:72:
7e:b5:ec:15:16:45:f3:c1:c0:e4:8f:3b:22:0c:bf:
89:ec:46:81:8a:2d:90:1e:69:dc:71:fd:dc:b0:d0:
e6:92:0d:81:00:ac:a0:2e:78:99:c4:94:f9:1e:6d:
8d:2c:30:3f:c4:e2:70:7d:45:df:54:30:da:77:3a:
29:0c:56:0c:48:05:87:e9:69:d0:f2:6a:af:bf:7c:
01:2a:74:6b:c1:d7:ed:0d:66:ff:40:ad:4a:2a:5e:
7d:c3:4f:9e:64:ae:a7:10:12:a0:fd:97:05:d7:77:
e1:c7:3d:e6:b8:b5:c8:a9:82:ab:06:44:7e:8c:2d:
65:ea:e8:24:1b:24:7d:17:9b:98:af:3d:8b:d9:74:
ae:84:b6:8e:79:25:77:ac:d7:22:6f:b0:fe:d9:27:
d2:ed:40:d0:55:eb:50:5c:e4:0e:61:37:e5:70:2a:
d3:7c:a1:c0:28:1b:0f:df:51:3b:89:a4:d9:f0:94:
c9:b5:05:eb:3e:2d:c9:0b:b7:79:7f:c7:d3:43:8f:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B9:1C:7A:A3:76:D4:E9:B8:58:14:2D:78:21:B3:48:FE:E8:14:57
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:83:b4:6b:ee:36:c8:0b:eb:65:09:14:16:1f:17:42:d0:bc:
ce:bd:6c:f3:ff:7a:08:8b:67:8e:b0:b2:de:16:bc:96:1e:29:
1e:84:a3:b2:49:60:da:bd:aa:16:8f:fe:b1:d4:34:6e:be:26:
38:6a:ed:d5:c6:b3:f1:87:66:dc:de:76:ec:6b:57:ab:f4:c9:
11:81:e2:33:f0:80:49:97:d6:05:60:b4:1a:b9:25:39:36:2f:
12:7f:0f:26:3c:b1:ca:f9:10:9e:97:1e:4a:78:ec:cc:02:b5:
bf:50:f4:f2:c0:4e:24:58:57:54:e3:45:52:a0:42:77:4b:8e:
67:82:a1:be:0d:a2:c1:6f:a7:72:35:e2:c3:c8:bf:e9:2b:97:
8f:d1:41:48:fb:0d:37:f0:2b:ed:12:a5:00:00:f9:78:97:3f:
bb:7f:49:5b:9e:60:bc:45:80:98:67:4a:d9:79:18:ed:4e:65:
41:5a:fb:c1:23:ca:44:34:12:e3:f3:6f:d6:c0:d3:4d:fb:a2:
09:11:ce:0e:a6:cf:ae:ff:1d:7f:f2:e5:a4:d4:0f:92:47:82:
6d:e4:79:cd:1d:0d:13:a1:ef:7d:63:36:de:5c:bc:43:01:ab:
2a:21:0d:12:72:67:31:f4:78:93:b3:78:14:2b:45:ca:28:87:
c5:02:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:09 2026 by rpki-client