Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: g/MKiPnHautdV019fwQf0AFlnuQlPJhB231M10tkdq4=
Subject key identifier: D2:5C:BC:9B:36:12:FF:47:5B:79:C6:D0:0B:55:D3:F0:F0:40:85:B6
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019D97AAEF77F2108AA143B55FE2676F788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 07AC
Signing time: Thu 16 Apr 2026 19:00:55 +0000
Manifest this update: Thu 16 Apr 2026 19:00:55 +0000
Manifest next update: Fri 17 Apr 2026 19:00:55 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: Tg90jfiLITNfwHN5dYTskMB8j+8FqRynbILU6MFNQRQ=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:ef:77:f2:10:8a:a1:43:b5:5f:e2:67:6f:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Apr 16 19:00:55 2026 GMT
Not After : Apr 17 19:00:55 2026 GMT
Subject: CN=d25cbc9b3612ff475b79c6d00b55d3f0f04085b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:4a:9f:72:4b:ce:13:4d:2b:37:37:dd:54:
0b:2c:cf:35:31:67:49:19:55:ff:1c:2e:92:e0:ba:
46:86:7e:1b:04:ad:a8:20:27:1e:18:36:d0:af:70:
cd:11:ba:12:19:d0:01:9e:ee:89:7e:17:9a:46:28:
92:7c:c1:d6:2a:76:c3:a7:94:b4:eb:13:c2:6a:9d:
37:cb:67:01:c3:34:e3:47:17:6f:dc:2d:0e:b7:02:
c8:cb:6c:66:08:43:69:e4:8a:bb:de:de:d3:5a:e2:
5d:02:51:84:94:7b:e6:4a:4d:7d:b1:b1:b0:fc:51:
f6:a8:63:2f:9d:ca:eb:4b:3d:6a:76:18:89:3e:b3:
7a:a7:bf:58:0e:2f:0e:76:3d:64:fc:ba:39:ee:ef:
f7:fb:b0:77:b8:4c:c3:aa:34:27:09:42:20:ef:b7:
c0:e9:b2:d8:75:0a:2f:31:ec:38:91:be:21:c2:c3:
95:25:f8:aa:80:ab:d6:2a:28:6d:c7:27:68:38:69:
01:1f:5e:f8:88:53:2e:74:c0:88:2e:a9:c0:bc:71:
05:87:40:e0:90:18:68:9c:42:f5:dd:4d:2f:a2:a1:
d8:46:c0:e6:df:ee:43:bd:63:62:11:17:e4:1e:6d:
6d:33:1b:21:4d:bd:5b:3f:71:75:95:15:9f:21:06:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:BC:9B:36:12:FF:47:5B:79:C6:D0:0B:55:D3:F0:F0:40:85:B6
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:05:a4:f4:20:47:de:03:49:75:e8:91:c0:69:2f:18:09:
9c:b8:58:a5:bb:23:2b:d9:a3:f4:d2:62:3c:03:b2:90:64:18:
b4:f8:cd:ba:00:66:cd:7b:00:d6:f8:6d:a1:7b:eb:f0:97:a8:
c0:b1:e5:b6:1c:52:d2:f5:d9:4c:34:51:9c:b6:71:1e:ab:b8:
90:88:de:0a:e0:72:28:7c:da:f1:e5:a1:03:a1:06:61:2f:e3:
bf:48:f2:47:00:72:43:c0:1c:e8:f6:92:da:c3:38:fc:ce:a3:
d2:3c:ab:97:61:4e:ee:9d:1f:60:34:85:17:d9:42:72:7b:2c:
1b:71:19:5d:3f:6e:71:b1:35:a9:05:6d:b9:1b:97:28:68:ce:
4f:a8:2d:9e:e7:d0:29:1c:d5:bc:7c:93:34:2d:4c:ec:b6:7e:
e5:8c:4f:ef:12:0c:c8:77:fd:dc:55:20:67:52:e1:78:5d:d3:
84:47:3a:85:60:51:1d:a7:22:95:4f:3a:f7:15:c6:f4:96:65:
9b:0c:51:d0:02:89:fb:70:a7:27:24:37:d7:35:52:59:99:72:
65:2d:10:b4:08:4c:1a:ce:c9:e0:50:c2:bb:65:42:11:3b:36:
96:56:ae:16:aa:38:bf:c1:ca:ae:f9:a7:be:b9:36:7c:2c:bd:
88:2a:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:52 2026 by rpki-client