Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: 4jeQw96T1V3un96XZa2nuqeaOfLPD80ihlYqXzm5mBA=
Subject key identifier: 27:E2:51:C4:4B:8F:AD:03:C9:2E:D0:63:4A:A1:C6:FC:B4:7F:38:D8
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019FA8D0280C3405580818F1242BDD599B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 08BE
Signing time: Tue 28 Jul 2026 13:00:41 +0000
Manifest this update: Tue 28 Jul 2026 13:00:41 +0000
Manifest next update: Wed 29 Jul 2026 13:00:41 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: LJlKITPTH9EzxB4e0Y+mvwoCUd0GlLvZcS6BwemOVXI=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:28:0c:34:05:58:08:18:f1:24:2b:dd:59:9b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Jul 28 13:00:41 2026 GMT
Not After : Jul 29 13:00:41 2026 GMT
Subject: CN=27e251c44b8fad03c92ed0634aa1c6fcb47f38d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:76:14:d1:95:f5:25:ac:6d:d5:0a:08:74:
5c:1a:db:92:21:f8:36:1d:55:ca:af:cb:45:f6:76:
20:dd:e8:4b:49:85:79:fe:c2:ac:e9:ed:b0:72:15:
f3:cc:d5:f2:d6:ba:46:88:0a:cf:76:fb:82:dc:6d:
e3:c4:19:88:f1:a8:79:da:f9:52:5f:87:a0:e3:55:
b8:cb:f0:28:2a:1d:87:e8:2a:17:ec:89:d3:8f:52:
96:bf:5a:ef:84:d0:dc:dc:8a:64:b2:87:db:92:de:
44:61:2c:e9:07:79:c1:3a:e9:b6:c5:00:fa:48:64:
f6:2a:23:08:34:93:6e:06:b4:dd:9c:ff:1b:4c:c5:
47:3d:e3:08:ee:58:50:de:fa:4f:f6:61:7c:10:51:
dd:11:f7:c2:0d:bb:4f:82:2e:cf:e3:38:ff:23:41:
90:50:28:63:20:d5:64:24:40:b8:f7:6f:34:89:d2:
1c:15:cd:11:2a:c9:ac:1a:c0:9c:2b:05:0d:15:48:
5a:b7:53:1f:5a:c7:f6:48:93:0f:ca:ae:cb:c1:2a:
52:a4:9e:b7:b5:64:db:c2:26:78:b0:07:d3:13:bb:
fe:16:d5:e5:99:e5:bd:db:4f:45:51:c8:3a:83:35:
28:fc:0e:c3:5b:a7:1b:5f:a8:d7:5c:61:a8:99:7e:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:51:C4:4B:8F:AD:03:C9:2E:D0:63:4A:A1:C6:FC:B4:7F:38:D8
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:41:63:44:b4:0f:e8:de:d7:25:69:12:f3:d7:64:32:d6:
c7:05:74:63:91:8d:01:a1:5d:16:af:a8:19:19:dc:d2:cc:d7:
13:d5:00:d3:c9:32:c2:89:4a:b4:ff:4e:7f:3a:33:9f:4e:53:
c9:59:39:dc:ee:c7:46:8e:ab:61:04:66:23:af:92:0c:a1:78:
88:b9:9b:de:92:dc:e7:c5:87:8e:72:cc:8a:39:04:51:89:eb:
b4:58:fd:d2:f2:56:e1:7e:0c:04:fa:fb:f5:e6:31:45:5d:1e:
86:d1:d0:83:ae:fd:b3:da:a7:71:26:85:15:fa:29:42:45:1a:
85:f7:be:2d:9d:94:d5:62:9a:87:3e:19:12:ce:bb:47:3d:59:
1b:49:56:b3:81:a2:ea:29:24:ca:ed:a1:03:59:9f:22:90:6a:
43:b8:c9:00:69:9d:90:ca:58:fa:37:32:73:01:ca:0a:39:16:
f1:29:d8:af:9f:a4:1c:7b:a2:1c:f2:63:fd:d5:ab:b6:ce:01:
a6:b0:07:0a:bb:fe:b3:70:f2:e0:02:e3:32:52:b5:7f:10:da:
00:a0:48:a0:48:7f:0f:a8:66:49:06:51:1b:f3:43:af:a7:27:
71:8c:ac:e0:71:ba:7f:3e:94:d9:3b:df:42:bf:34:fd:50:fe:
22:2e:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:10 2026 by rpki-client