Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: ayAP42iMId4AxjFNlB92sHWoD1xPh/WN5/hRyEe9Bd4=
Subject key identifier: 40:60:49:AF:83:B1:23:41:EE:25:40:48:3F:46:D0:4C:A0:A5:32:4B
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019CAD904C76AA0DA3D162A86EAC41CD3D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0D2F
Signing time: Mon 02 Mar 2026 08:00:40 +0000
Manifest this update: Mon 02 Mar 2026 08:00:40 +0000
Manifest next update: Tue 03 Mar 2026 08:00:40 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: mjzRqJMP/yJG/UFR3SNZjG9D/raTkfqyTLwahtiwtYI=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4c:76:aa:0d:a3:d1:62:a8:6e:ac:41:cd:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Mar 2 08:00:40 2026 GMT
Not After : Mar 3 08:00:40 2026 GMT
Subject: CN=406049af83b12341ee2540483f46d04ca0a5324b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:5e:e3:38:27:17:52:3b:e5:8a:e7:9d:3b:
38:9d:c6:fc:4b:24:5b:1a:ff:42:9e:e1:77:4a:1e:
e2:ad:78:e6:34:60:fd:1d:6f:ea:22:c4:68:15:3f:
b9:40:97:54:82:28:2f:1a:b1:a9:38:c8:3c:03:43:
43:9c:9c:39:a9:fa:e3:13:d9:2a:3d:8a:bc:7b:9f:
5c:ff:23:1a:ce:c7:00:71:c3:4b:de:8c:07:42:75:
40:ea:57:8c:f4:c5:e8:0e:37:a5:89:07:77:92:25:
41:29:79:76:1f:7d:d7:db:c1:06:f6:05:d6:e8:3d:
f9:d8:c7:df:50:23:6f:c6:eb:52:b2:74:68:24:ba:
22:2a:93:7f:43:4e:ef:7b:72:8b:3c:ac:cf:13:22:
a1:83:1f:44:ad:8f:c5:ba:7d:68:f8:be:08:87:33:
94:ab:ba:dc:60:6e:46:c4:dc:be:7d:af:6c:2a:cc:
a3:a5:e9:c9:5f:71:76:e9:9e:32:d9:90:02:dc:0b:
1b:48:75:b7:af:b5:35:f6:2a:e0:07:35:72:1c:6e:
ea:6b:38:eb:11:fc:89:ab:14:3f:33:cb:69:89:18:
c1:2d:8a:0f:d3:1d:88:3b:f2:f2:aa:05:84:85:c6:
8c:d4:81:e0:01:d2:ff:bb:92:11:15:e8:25:89:d7:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:49:AF:83:B1:23:41:EE:25:40:48:3F:46:D0:4C:A0:A5:32:4B
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:cb:3d:24:01:91:4d:c1:4f:f2:60:63:83:3c:0e:d8:22:
35:24:64:5f:b6:64:95:3f:ea:b3:90:17:3a:59:cd:a3:c9:9b:
e6:f9:87:59:fe:4d:b5:62:c2:e4:04:38:77:44:4a:a5:a5:e4:
4b:05:a3:92:89:9c:40:ee:94:02:ff:38:55:38:3d:fa:d9:33:
78:61:30:ca:00:88:4b:2b:d5:e5:e7:d4:15:55:9c:c7:fc:ec:
fa:66:8b:e9:56:28:c8:f0:0c:de:c2:fd:ed:7b:69:6e:07:a2:
1e:d4:3f:8c:ba:6b:cd:7e:d3:5c:bd:1d:61:23:55:a0:72:63:
93:bb:4b:82:c7:6f:6f:b4:80:a0:35:3c:c1:57:64:10:47:98:
04:00:59:eb:68:31:ed:67:75:ed:56:8c:8c:f4:5e:92:5a:2e:
43:75:42:be:50:28:b3:bc:61:52:ac:2f:63:57:a4:a0:dc:df:
7b:a0:84:55:2e:ae:1a:fd:44:ea:1e:3c:66:bb:10:10:25:86:
c8:dd:fc:8c:1c:d8:36:72:f7:e1:ff:c2:a2:17:d4:24:14:83:
d4:92:6c:84:c0:4c:7b:d7:df:5a:3a:35:f5:49:4a:ac:8d:cb:
8f:11:4f:1a:cb:6b:88:7e:f5:86:f0:0c:ef:9f:93:5d:b5:80:
fa:14:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:25 2026 by rpki-client