Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: ByWJUdNUT1qDAN+x7Agkyltoh+QIESCyZQk6cQfFvSc=
Subject key identifier: 9B:EB:BB:12:43:3F:E1:9A:49:EA:1F:FA:C6:6A:36:0B:20:16:39:5C
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 01A13A1227CFA74076E006FB78553E36C6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0F8A
Signing time: Wed 14 Oct 2026 11:00:30 +0000
Manifest this update: Wed 14 Oct 2026 11:00:30 +0000
Manifest next update: Thu 15 Oct 2026 11:00:30 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: cK+hGrvv+e1tU1Fm+lm1XUhDQo3j2uNtUKYcRgtUFUg=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:27:cf:a7:40:76:e0:06:fb:78:55:3e:36:c6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Oct 14 11:00:30 2026 GMT
Not After : Oct 15 11:00:30 2026 GMT
Subject: CN=9bebbb12433fe19a49ea1ffac66a360b2016395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:3d:84:28:e0:35:b5:55:e1:4d:f5:d9:03:
18:a9:2b:75:a8:9e:0b:74:b1:92:3f:d8:11:e3:ba:
d3:f2:12:18:32:6c:2e:30:6f:19:4c:bb:e6:48:bb:
3f:9d:7e:27:ae:b0:5c:96:27:ee:2e:70:98:d6:e3:
d2:9e:ac:a9:e9:c5:59:44:75:5a:63:19:42:ab:98:
5a:b1:c5:75:09:8b:b8:d6:9d:9d:67:00:f2:5b:40:
1a:95:8c:8b:f0:f5:5c:a3:fa:02:c8:9b:fb:d7:37:
9d:2d:2a:02:97:83:c4:d7:c6:33:76:29:1f:3c:c8:
05:5c:0a:64:26:c7:8e:6d:ee:b2:64:92:f1:25:cd:
0c:a1:fc:4c:62:a5:45:e9:7d:40:2a:01:c5:d8:d8:
42:13:13:4d:ae:ee:42:41:7d:e1:69:52:e3:13:df:
5f:d1:3d:47:e1:57:07:66:ad:82:be:53:d9:0d:fd:
4c:3b:8f:75:98:b9:4a:78:9e:04:26:45:b4:93:5e:
ab:f1:8e:5a:17:a0:7d:c3:01:19:97:3e:26:a8:67:
98:0a:82:aa:95:4f:89:b3:bc:14:e1:d0:b2:13:b8:
00:02:02:86:7a:e8:65:e3:93:ff:e7:5d:62:03:1b:
26:d7:b0:16:5d:10:4c:9a:1c:43:f7:a9:49:24:35:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:BB:12:43:3F:E1:9A:49:EA:1F:FA:C6:6A:36:0B:20:16:39:5C
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5e:04:05:64:7e:fe:ff:e3:43:d4:fa:e9:88:c8:d1:78:46:
4f:ab:18:02:b6:43:e3:1c:71:5a:f4:21:44:84:c2:78:41:9e:
b3:e2:6a:8f:41:fe:f9:6d:3a:fe:7f:e8:8f:95:07:0e:58:20:
8a:98:26:c3:71:6c:a2:79:87:8f:36:64:ab:4b:d0:68:da:ce:
9e:3b:5c:0b:e8:ec:d3:df:ae:bf:07:85:8c:9c:ee:2c:33:35:
cb:ab:22:74:1d:e1:64:5b:3e:bc:44:f6:b1:79:f4:1a:c5:4d:
f4:5e:00:e6:22:c4:67:c0:7f:7c:2a:3a:b7:ac:6f:22:f2:72:
47:a4:c5:1a:e6:56:29:94:58:ee:22:d0:8b:fa:c3:a5:d5:2f:
73:8a:f4:4c:7e:57:4e:e2:65:95:f0:c8:bd:8c:12:31:43:37:
eb:a2:99:6c:1a:63:17:ba:4b:c7:6b:96:c2:77:cc:c4:a7:d9:
e1:eb:ea:9a:37:84:88:c9:f6:f7:02:d2:92:47:13:ef:03:9d:
05:1b:9f:02:cb:63:0f:13:13:03:c3:13:bd:6d:14:30:14:b3:
4c:45:6b:96:62:b9:00:83:14:0e:3a:4b:4a:76:87:4c:06:de:
80:fd:82:10:9f:fc:29:be:35:49:83:45:a8:6e:91:2c:03:c2:
1a:15:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:41:06 2026 by rpki-client