Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: Y1KrpAzB8X2t9jUKgziTlBAqsqkunDv5/2MApsQ/gc8=
Subject key identifier: C7:0C:6B:E4:78:B5:E8:F5:38:08:AB:E3:43:E2:CA:D7:F6:6D:11:AF
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019D9B1A2E16F1CE80711F4056B4BE0E4992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0DAA
Signing time: Fri 17 Apr 2026 11:01:17 +0000
Manifest this update: Fri 17 Apr 2026 11:01:17 +0000
Manifest next update: Sat 18 Apr 2026 11:01:17 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: jDJ8KSkVNm5QxxrGFt2lOgyuQDAy0UKKIPJ7nkG2lrU=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:2e:16:f1:ce:80:71:1f:40:56:b4:be:0e:49:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Apr 17 11:01:17 2026 GMT
Not After : Apr 18 11:01:17 2026 GMT
Subject: CN=c70c6be478b5e8f53808abe343e2cad7f66d11af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:8f:de:bd:a7:55:ff:e6:23:46:7c:81:09:
f6:3a:40:4f:ae:b7:75:78:b3:d4:44:f8:24:82:4a:
66:ad:99:46:86:ae:fc:0d:6d:f1:6f:47:a4:2c:61:
a1:13:0c:59:d7:a8:3b:14:9e:74:67:3d:8b:01:71:
bd:a3:c1:47:9c:14:e6:f7:a8:f6:e6:dc:c4:14:b5:
bb:f9:3f:7e:a5:fb:e4:9b:99:24:7b:5b:19:d0:a8:
d6:19:4c:82:d9:32:63:b4:b9:bf:46:f1:ae:b6:4f:
1f:44:2f:34:b1:34:8d:a1:15:6e:7f:6b:72:42:a5:
55:b0:a8:58:63:0e:77:96:75:d3:a4:a9:36:d5:2e:
91:ba:cd:2a:19:61:e3:10:ee:0d:fc:df:3b:df:44:
15:7e:32:b9:5d:92:cf:58:20:76:62:f6:47:87:83:
cb:33:ac:3c:fb:04:1f:af:68:f3:09:0f:01:ca:6b:
39:ef:82:1e:60:8c:ff:01:eb:77:14:65:f8:2f:34:
f0:0b:a8:bc:4b:f6:23:3a:0e:72:dd:6e:1e:6d:8c:
03:41:76:ee:d2:26:07:01:07:42:25:99:50:01:1a:
dc:97:6a:b9:97:0a:d5:04:9e:cf:64:16:67:a2:c0:
32:c2:f5:9a:21:00:4e:e3:72:f8:4b:92:a0:4d:49:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:6B:E4:78:B5:E8:F5:38:08:AB:E3:43:E2:CA:D7:F6:6D:11:AF
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:c6:35:6a:bc:3a:8f:01:df:5a:33:c8:eb:e2:86:54:50:
a6:b0:4f:70:bc:bd:57:59:15:7d:5d:ea:89:82:e1:49:fa:fd:
79:f0:d5:75:2f:98:55:1c:de:3b:b5:d7:43:69:d3:80:c3:91:
50:8e:c0:a7:ab:ef:26:9e:36:88:cb:77:f1:1e:b6:03:e3:21:
fb:90:83:f7:fb:f1:5a:26:f1:67:14:0b:f7:c3:a2:43:d8:9f:
ba:f2:a3:b8:f8:d2:fb:b8:fb:16:6e:70:ad:9e:36:69:2a:ba:
55:15:29:56:92:02:15:74:41:07:81:9a:8a:79:d7:99:ad:95:
e8:37:02:56:15:bb:10:96:9a:50:da:1c:96:07:1e:6f:7d:3d:
84:37:c8:41:8e:11:43:07:74:d7:f9:61:54:ad:69:2c:ae:63:
11:ae:08:b2:12:59:0b:3d:26:5e:c3:e7:05:f8:fb:c7:7f:4b:
8d:6c:a7:90:f1:0a:ec:ef:0f:12:4a:4d:f4:b8:42:e1:5c:b0:
9f:d5:22:42:96:54:f0:38:3f:8f:bd:1f:12:06:d4:bf:a3:0f:
23:35:d1:1d:69:f2:66:45:43:8d:23:8e:1c:7b:7a:4f:b5:bc:
46:da:8f:4e:a6:5e:78:dd:7a:c1:77:9c:00:84:1d:52:da:03:
80:87:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:49 2026 by rpki-client