Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
File: 0WkNdbRvruYmp5o7Dn32tqcj8yk.mft (raw, json)
Hash identifier: O6fiocIEGd5dN1Wx7Jflx40Ooh77SPdFTo9zqsUdc0U=
Subject key identifier: 47:4F:91:42:48:E6:E3:ED:A0:E0:BB:51:38:2D:D7:C9:DD:EA:F6:8E
Authority key identifier: D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
Certificate issuer: /CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Certificate serial: 019ED4D0555581B6B043750594EFC9854216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
Manifest number: F3
Signing time: Wed 17 Jun 2026 09:01:23 +0000
Manifest this update: Wed 17 Jun 2026 09:01:23 +0000
Manifest next update: Thu 18 Jun 2026 09:01:23 +0000
Files and hashes: 1: 0WkNdbRvruYmp5o7Dn32tqcj8yk.crl (hash: Dki/KUVgB0OP6vML/abAj8LKdM5O0LhFynBTv5DVyuY=)
2: 1-yp1lR1t9CHfuX3rrZ9tBUSW6YU.roa (hash: ysaq9zqofJGOE0NIkNp0CsTNypyLgdEzk9CWYMwusP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:55:55:81:b6:b0:43:75:05:94:ef:c9:85:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Validity
Not Before: Jun 17 09:01:23 2026 GMT
Not After : Jun 18 09:01:23 2026 GMT
Subject: CN=474f914248e6e3eda0e0bb51382dd7c9ddeaf68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:e8:b1:1e:85:51:9a:b3:a7:f4:9e:ea:77:
05:09:c3:d2:d1:84:b3:0f:11:73:12:c3:d6:99:3e:
02:be:e8:85:a8:eb:e0:cd:34:fb:98:d0:a0:81:b8:
0e:9c:28:f5:68:3d:9a:b2:ad:58:2f:4d:e8:ba:b8:
ea:30:27:b9:a0:76:55:95:21:f9:e9:94:90:c1:4a:
6f:cd:cc:87:91:a3:bc:da:38:cc:7f:32:af:94:8b:
20:a6:cb:07:aa:2e:da:ca:ad:60:7c:47:1f:19:85:
4a:24:07:ce:9a:2b:27:80:8d:3c:4a:55:93:5c:49:
1f:37:13:54:47:01:03:23:e1:88:b3:d4:5b:d0:25:
5a:dc:74:47:61:b1:b0:31:91:55:53:84:1d:bc:7b:
0e:59:71:e2:64:cd:11:d9:46:c3:44:74:2a:28:13:
1e:ec:72:75:14:e8:a6:0e:93:69:dd:f9:63:ae:9c:
57:34:10:b9:81:7f:2f:80:33:16:42:24:bf:64:d2:
8c:3b:27:8d:b8:a8:e0:3f:5c:dd:5c:f4:7c:2c:89:
8a:6c:c9:dd:a5:8d:a2:b3:b7:0c:fb:39:89:aa:37:
35:20:63:5a:cf:9f:7b:80:0e:ee:36:bc:b9:ae:4e:
1b:eb:2f:4b:12:0d:3c:34:8b:82:89:e0:f7:a3:75:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:91:42:48:E6:E3:ED:A0:E0:BB:51:38:2D:D7:C9:DD:EA:F6:8E
X509v3 Authority Key Identifier:
keyid:D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8c:c2:b8:fb:81:dc:71:bc:59:6b:e5:42:ac:ac:98:65:8d:
cf:00:c6:67:e5:c1:9e:72:bb:11:07:83:99:81:64:9e:0f:e1:
57:ec:f5:f0:36:ab:72:1d:b5:98:f5:7b:50:a4:a6:64:69:cb:
a9:7e:16:f2:ce:f7:8b:24:48:06:ec:f9:e6:31:fb:c9:72:84:
11:82:d9:69:d7:28:78:ec:6f:7e:aa:a0:f7:61:f4:eb:02:00:
4f:ef:a4:98:87:da:18:bc:6b:27:93:58:ee:3c:33:aa:7d:2d:
e3:d7:c6:ff:43:9b:39:d8:16:64:09:ae:97:0c:56:ac:2d:a6:
7b:47:94:20:53:2a:3e:0b:39:59:61:ee:76:59:f0:93:7b:34:
66:15:1d:87:03:54:40:2d:b7:b7:8d:bb:7d:d5:67:75:c8:56:
52:2c:d5:6d:2a:0f:3d:f6:88:81:8e:b1:4f:19:ec:e5:f9:29:
2b:84:c8:11:3b:c6:5d:62:a6:5d:06:80:bb:8f:d2:b2:8e:59:
a3:bb:5f:9d:ee:99:ae:6e:0f:e8:5d:e1:bb:72:86:aa:58:5e:
28:81:0e:36:fb:ec:e6:c0:d1:9a:15:24:e2:11:2d:ea:c8:91:
cf:ad:20:50:d8:e7:75:84:2e:95:0f:9d:af:e8:ec:8c:24:64:
d0:d1:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:04:51 2026 by rpki-client