Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: nbKlFvGJot/+p/pZfSnOqB5kXa9TMNC3Dmkhou5ixyE=
Subject key identifier: B8:A7:F9:9F:16:5B:A6:9E:CE:1C:85:57:B0:AF:C1:7C:A7:37:42:59
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 01A0DD97EC0FEF2A1195500C0404773A2B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 0562
Signing time: Sat 26 Sep 2026 12:01:56 +0000
Manifest this update: Sat 26 Sep 2026 12:01:56 +0000
Manifest next update: Sun 27 Sep 2026 12:01:56 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: LHdBYQl21UuYhIzPIi8QdnzhRK8l1x7i6oo6g23xK3U=)
2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:ec:0f:ef:2a:11:95:50:0c:04:04:77:3a:2b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Sep 26 12:01:56 2026 GMT
Not After : Sep 27 12:01:56 2026 GMT
Subject: CN=b8a7f99f165ba69ece1c8557b0afc17ca7374259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:27:04:be:df:c6:8b:7b:f9:05:bb:98:78:
b0:b0:1f:61:15:10:67:c3:cf:8d:93:73:12:94:b5:
f3:d8:ad:fe:cd:f6:77:13:d5:cf:fd:ad:68:e4:1f:
85:73:fe:46:00:4e:4f:6d:c5:57:a8:f4:32:86:32:
0d:ef:73:61:90:8d:03:04:a4:0d:16:95:f3:0c:d4:
89:cc:11:b8:73:76:51:6c:83:1d:ca:e7:ff:e2:7b:
de:a2:d3:d7:9b:b8:5c:d0:6e:e3:24:4c:30:06:77:
c4:da:c6:a9:8f:05:84:6d:9d:3b:f7:5b:f1:63:12:
89:b7:36:7b:8c:d6:d5:e0:b3:22:c9:b7:90:c4:3b:
c9:d3:b0:a0:a0:68:03:20:e5:f4:34:35:46:e9:9c:
13:ed:af:59:67:e8:f3:26:27:e8:41:b4:59:79:a6:
97:9b:c1:fa:7c:95:ae:e9:1d:de:86:e3:41:81:44:
6d:9e:a4:8d:77:80:62:70:e7:d4:05:eb:90:12:4e:
bd:cd:ca:e5:e3:6f:91:37:f2:5a:7c:0c:53:9d:f6:
ef:6c:c2:6c:f0:bd:6e:c5:2b:f0:ae:19:e4:29:41:
a4:90:a0:90:ec:2c:d4:f2:ab:05:8a:d9:f8:87:bc:
e3:08:cb:41:3f:07:0f:0e:8c:a5:a1:3f:9f:76:10:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:F9:9F:16:5B:A6:9E:CE:1C:85:57:B0:AF:C1:7C:A7:37:42:59
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:3c:a2:8b:fd:a9:18:6e:18:36:6c:18:b1:11:76:61:4a:
3e:c4:6c:57:e7:7b:74:8b:b2:48:0f:49:65:e6:63:ed:05:1c:
d8:b2:cc:79:e7:d5:de:2d:b4:60:0d:c9:1d:9d:50:91:e1:07:
b5:1c:e1:de:85:09:a8:e3:a5:36:f1:2d:c5:76:94:47:83:18:
28:0f:6a:93:67:a9:81:88:1f:99:b4:c8:25:3b:5b:64:bc:38:
d6:9e:d8:02:eb:47:22:b9:4b:20:cf:de:a7:a3:9a:41:dd:1f:
b8:98:79:cb:ab:a0:2c:2f:c4:8d:de:08:a0:cf:a2:6f:c5:88:
85:ce:df:14:cd:9c:7c:83:6c:f0:2e:77:4a:39:bc:7b:b7:33:
b9:dd:79:1c:ab:09:78:f4:52:5f:0e:cc:ee:85:56:b2:a9:bd:
35:5b:01:cb:3b:d5:4b:ae:63:02:8a:ad:5f:1f:9e:13:3f:8b:
ae:66:93:0b:66:4d:90:2f:e5:ee:ba:26:5c:53:ac:f2:3b:58:
e5:19:b9:bb:2d:1d:9b:f3:ca:cf:d3:88:90:d2:cc:29:8e:90:
c1:78:30:40:e8:0a:9b:d5:31:fd:37:45:94:30:51:3f:a0:20:
51:73:64:9c:21:c4:50:68:26:2c:f7:de:d2:e6:2a:a0:3f:e1:
72:fc:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:00 2026 by rpki-client