Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: tFunM5mn2hg5FGxbqck+pQwnEFfwXeCyknKId9fmx1E=
Subject key identifier: 18:20:F0:D0:9C:2B:20:E4:44:57:63:06:4F:4A:06:BF:46:9B:7E:19
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019D2997A546F39ABD07EBACAB15A7DA85AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0398
Signing time: Thu 26 Mar 2026 10:01:37 +0000
Manifest this update: Thu 26 Mar 2026 10:01:37 +0000
Manifest next update: Fri 27 Mar 2026 10:01:37 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: JoVzmQh6g/5tNujaV9nksI3BGhe6TS0Z5+8Ltry/QGc=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a5:46:f3:9a:bd:07:eb:ac:ab:15:a7:da:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Mar 26 10:01:37 2026 GMT
Not After : Mar 27 10:01:37 2026 GMT
Subject: CN=1820f0d09c2b20e4445763064f4a06bf469b7e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:46:43:48:7d:51:c3:6e:76:12:46:e0:42:
76:38:31:82:10:35:42:76:32:80:11:be:f3:c0:ef:
e1:07:a5:02:67:76:37:8d:39:97:c6:51:92:d3:b6:
0d:f4:26:7f:6b:2b:ef:7c:13:d1:bf:87:3b:61:53:
c5:48:ce:0f:9c:df:7c:a0:30:ad:96:1c:8b:1a:fc:
d7:79:15:10:28:09:58:12:29:1a:e1:48:5c:af:05:
fb:18:90:64:e5:f8:ff:fd:a1:71:d6:42:16:2c:53:
6b:3e:fc:a0:29:f1:d4:c6:32:fe:20:45:e3:16:a7:
0f:00:4e:f5:7e:16:20:d5:d0:10:dc:8d:f1:c0:45:
16:1d:81:b9:5f:89:81:92:70:52:22:cb:79:92:eb:
de:33:18:c8:7f:b3:dd:61:f8:19:bc:9c:f4:2d:40:
0f:ed:1a:19:d5:d0:fe:a7:05:e5:a7:c9:25:28:2b:
4f:8a:14:91:cf:c7:16:55:f3:2a:51:fc:51:a0:41:
cf:23:0a:d0:41:7e:d7:b1:02:f7:57:a4:be:eb:ed:
1a:f7:d4:38:66:18:33:cd:78:db:31:d8:92:d5:cb:
e2:e7:b7:79:04:e1:f8:0e:89:bf:3e:13:18:f4:1b:
eb:a1:9a:fe:06:de:49:d1:25:23:e6:53:03:24:03:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:F0:D0:9C:2B:20:E4:44:57:63:06:4F:4A:06:BF:46:9B:7E:19
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4d:a4:b4:6d:0a:b5:97:aa:ad:ca:79:b1:d9:06:d9:ce:ee:
9c:94:ce:29:da:a7:7f:f8:25:37:a7:45:52:93:fe:39:d6:ed:
a3:3d:4e:ab:15:7c:ea:cd:34:99:6e:3f:b4:ec:6e:26:0e:22:
92:72:c2:59:73:24:c1:c3:0a:52:69:dd:be:4d:4a:de:83:b4:
48:58:19:2d:49:93:99:96:c6:b2:51:17:ff:f7:65:2b:5a:92:
28:81:88:32:2e:cb:d3:5c:06:76:bd:e3:a4:15:79:f1:53:a1:
94:2b:18:8c:c3:6c:21:b6:9a:8e:04:02:a3:37:27:96:f9:37:
cf:9a:71:e5:de:c8:50:06:8c:2a:02:0e:ab:0b:fc:b8:b8:74:
81:51:14:01:fa:a5:76:8d:80:d8:cf:2f:4a:cf:d0:cd:d8:2b:
7d:84:2f:9e:7d:d8:b3:dc:c3:ea:bb:ac:2b:9c:93:05:b4:6e:
84:f1:c3:89:96:96:90:51:d8:7c:52:a6:56:8c:49:48:41:e1:
94:4e:80:8d:3d:10:07:a5:86:65:bb:ea:4a:6a:d4:7c:ec:76:
2b:5e:4f:00:99:e8:26:6a:28:09:27:7e:40:1a:64:2a:4a:b7:
2d:b0:04:03:e3:de:87:cd:de:4f:a8:88:8e:c2:99:42:f2:f9:
06:15:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:36 2026 by rpki-client