
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: 3jPCTfkiXBqm7vtwlZ6y8UUT4JFhM/YOA8adO9U3xqg=
Subject key identifier: 0B:F8:9D:E9:C4:D6:C4:5E:5F:5B:F5:11:AF:8A:0C:2D:93:CF:E7:2A
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019F91A41DBCE115465AEADA6B38F5DE3DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 04D7
Signing time: Fri 24 Jul 2026 01:01:19 +0000
Manifest this update: Fri 24 Jul 2026 01:01:19 +0000
Manifest next update: Sat 25 Jul 2026 01:01:19 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: phNjc52CV1H7nrgMJGIYLtAeVGAx3tRycdUJdMAaOtw=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1d:bc:e1:15:46:5a:ea:da:6b:38:f5:de:3d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Jul 24 01:01:19 2026 GMT
Not After : Jul 25 01:01:19 2026 GMT
Subject: CN=0bf89de9c4d6c45e5f5bf511af8a0c2d93cfe72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:61:10:67:ed:45:41:83:50:49:ee:e0:90:
9e:c5:93:80:53:b7:61:e4:ee:06:7d:8c:f8:b3:e0:
01:33:01:90:46:09:5f:af:ed:2f:4a:40:16:46:57:
5f:e5:36:69:a7:e1:4f:59:b8:c0:fb:af:62:8f:da:
f0:4d:27:60:cc:d3:7d:21:c2:1c:b7:e9:5c:85:bc:
36:f2:58:3b:15:13:67:44:1d:bb:02:01:b5:f6:d8:
c3:bd:71:e2:2e:db:c5:bb:f2:ff:f5:63:f8:bc:4a:
eb:ed:ce:0f:49:aa:6e:b4:a6:cd:2c:e2:1c:89:ec:
b5:01:08:cb:d1:03:fe:b2:ed:3d:a6:c3:b5:c4:9f:
ce:fa:00:95:73:4d:76:03:e1:e7:47:c5:bb:75:ab:
8d:6c:5a:9a:8d:02:09:42:47:86:fb:3c:3a:9d:25:
52:2b:ce:c2:b4:44:7d:2f:ab:34:89:3a:c8:86:80:
75:02:a8:3e:95:c6:ed:e2:40:73:8c:32:0c:56:9a:
21:23:81:65:c0:ec:8d:72:9f:a6:46:e0:4a:82:b5:
56:b8:aa:e3:16:dc:ae:31:c8:d3:6a:b2:f1:7a:20:
fe:99:45:2f:6a:cc:da:b7:b1:be:e4:11:0b:57:3a:
82:bf:ba:54:55:32:e6:14:07:64:5a:74:4f:69:d7:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:9D:E9:C4:D6:C4:5E:5F:5B:F5:11:AF:8A:0C:2D:93:CF:E7:2A
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:ce:c3:39:db:06:e4:be:c8:d9:18:36:7f:41:51:40:1e:94:
fc:05:b1:7d:29:4a:5f:95:2b:91:a1:5d:24:1c:65:7a:2f:a2:
7f:c3:6c:bb:c1:51:84:40:59:ab:26:c1:90:d5:6c:ac:b7:e3:
39:53:28:6b:ab:e5:70:1a:4b:6d:b4:68:27:cc:ee:bd:1c:0b:
ca:ab:cb:43:03:93:4d:08:2e:cf:79:5c:6b:a0:50:47:8b:cc:
e1:89:d1:2c:3a:a8:66:af:9a:7f:ef:42:2b:15:98:24:91:51:
91:54:7a:a7:1c:25:d5:4d:0e:53:c8:ee:f1:f4:90:39:e2:af:
3d:c2:1b:a6:b4:a7:99:47:9f:2e:91:f6:de:3e:94:b0:2c:6b:
d2:6d:e2:02:af:82:0e:73:af:76:a0:a3:39:0b:7a:70:1c:a9:
03:de:a6:76:d4:f1:35:ea:07:80:91:34:76:bb:24:d7:23:bc:
98:a8:03:ae:93:84:b2:de:1c:11:a2:3e:98:07:ba:0b:75:14:
4e:61:0c:74:70:62:11:91:5e:1d:f8:c4:60:c2:9a:0d:6f:18:
90:35:f8:c0:6e:b3:11:a8:b3:52:c8:4f:92:57:05:5a:33:2b:
ab:67:cd:42:78:29:f3:36:a9:31:a9:a1:bc:e5:f2:4e:96:8e:
52:7e:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:50 2026 by rpki-client