Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: BwtwLHeyBNLgNkxCCFkVJYorkqv5Gyfq1gyFAXYSyLM=
Subject key identifier: 44:09:6A:EC:79:9B:32:06:98:AE:62:E8:E7:46:8D:60:47:83:CB:28
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019E1EDA2409BEA378928BFD3B19212DA5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0417
Signing time: Wed 13 May 2026 01:01:12 +0000
Manifest this update: Wed 13 May 2026 01:01:12 +0000
Manifest next update: Thu 14 May 2026 01:01:12 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: LUtQvMOHUGXKDtc73vFq2QzN4+Nz8Dcct74MNxTM6JI=)
2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:24:09:be:a3:78:92:8b:fd:3b:19:21:2d:a5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: May 13 01:01:12 2026 GMT
Not After : May 14 01:01:12 2026 GMT
Subject: CN=44096aec799b320698ae62e8e7468d604783cb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:64:2f:a4:c0:71:87:e1:24:6d:f2:00:14:
5c:5d:7c:2a:1f:93:12:8f:64:a3:2a:3e:d0:57:0d:
18:a1:64:b7:fb:bd:88:8b:c0:aa:cc:e0:38:21:da:
a8:19:b1:08:09:5e:35:9b:a4:4d:53:55:82:39:cb:
5f:11:f0:64:08:d0:23:ab:4b:66:f4:4e:ab:03:5b:
79:1f:de:ca:35:31:32:dd:d1:2b:23:7a:85:73:96:
31:00:e5:2c:11:02:fb:62:2f:c4:f6:4e:19:a0:13:
c5:d0:4b:29:05:3c:5c:13:e6:23:f3:5d:9c:a3:c5:
5b:88:88:3e:d5:00:95:21:c8:df:94:e6:eb:a5:0b:
ae:17:7f:ae:81:15:34:d0:99:39:24:c1:c5:07:54:
95:70:74:6f:93:55:e6:0b:8c:16:2c:4c:fb:3a:da:
34:43:52:8c:2e:b9:12:f2:27:99:87:e9:b2:04:cb:
9f:0c:a7:04:18:aa:27:93:82:11:b7:33:af:ca:6f:
cf:5f:66:ed:38:24:48:93:f7:0b:e2:b6:46:c6:ac:
c2:33:55:29:b7:50:8d:25:db:4e:ce:ab:3c:f6:59:
48:19:71:37:0f:0e:2d:1e:08:e6:7d:08:0b:62:f3:
20:bc:f1:a2:8e:40:ab:ab:0b:a7:94:ab:9c:ed:24:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:6A:EC:79:9B:32:06:98:AE:62:E8:E7:46:8D:60:47:83:CB:28
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f1:7e:27:cc:bd:73:84:7d:d6:1e:ee:81:a7:ed:68:09:28:
81:2c:d5:f2:d9:b2:43:d0:1c:51:5a:f3:96:54:6c:d7:ab:6d:
b6:c2:4e:5a:bb:8f:91:d5:07:23:9a:0d:4e:bd:d6:49:6d:45:
d1:d5:4d:76:d9:dc:45:3c:bf:e0:24:14:15:48:eb:bf:25:20:
a2:f4:6a:e0:a3:97:65:a9:a4:bd:96:ab:3d:6c:8a:75:99:13:
69:72:d9:75:9b:d9:5d:dd:16:c3:75:0e:15:21:25:57:23:78:
e0:96:10:5c:24:a6:92:15:50:74:54:9f:73:eb:cf:91:ed:ec:
21:18:7e:17:13:fe:0b:51:ae:37:25:20:cb:49:c7:2d:d3:96:
03:3f:52:50:52:60:30:62:7d:44:03:47:2b:0b:cf:51:62:60:
23:6f:da:3f:ae:ba:12:e7:7a:5f:12:26:d9:bb:4a:2f:36:c6:
1e:12:5c:79:c1:56:f6:ce:31:7a:41:6b:e9:f0:d2:25:0f:c7:
47:f3:39:33:ea:f8:7e:f3:33:6c:f6:92:b7:c9:dc:64:ff:12:
b3:83:26:4c:6c:d6:3b:59:ed:d5:d0:95:71:6b:25:fb:e5:52:
b4:99:c2:2b:fa:13:6a:65:34:f9:42:a3:5b:7e:44:61:f2:57:
b4:2c:5e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2iQJvqN4kov9OxkhLaW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh
ZTAxNDgwHhcNMjYwNTEzMDEwMTEyWhcNMjYwNTE0MDEwMTEyWjAzMTEwLwYDVQQD
Eyg0NDA5NmFlYzc5OWIzMjA2OThhZTYyZThlNzQ2OGQ2MDQ3ODNjYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1slkL6TAcYfhJG3yABRcXXwqH5MS
j2SjKj7QVw0YoWS3+72Ii8CqzOA4IdqoGbEICV41m6RNU1WCOctfEfBkCNAjq0tm
9E6rA1t5H97KNTEy3dErI3qFc5YxAOUsEQL7Yi/E9k4ZoBPF0EspBTxcE+Yj812c
o8VbiIg+1QCVIcjflObrpQuuF3+ugRU00Jk5JMHFB1SVcHRvk1XmC4wWLEz7Oto0
Q1KMLrkS8ieZh+myBMufDKcEGKonk4IRtzOvym/PX2btOCRIk/cL4rZGxqzCM1Up
t1CNJdtOzqs89llIGXE3Dw4tHgjmfQgLYvMgvPGijkCrqwunlKuc7SRNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQJaux5mzIGmK5i6OdGjWBHg8soMB8GA1UdIwQY
MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt
M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk
LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/F+J8y9
c4R91h7ugaftaAkogSzV8tmyQ9AcUVrzllRs16tttsJOWruPkdUHI5oNTr3WSW1F
0dVNdtncRTy/4CQUFUjrvyUgovRq4KOXZamkvZarPWyKdZkTaXLZdZvZXd0Ww3UO
FSElVyN44JYQXCSmkhVQdFSfc+vPke3sIRh+FxP+C1GuNyUgy0nHLdOWAz9SUFJg
MGJ9RANHKwvPUWJgI2/aP666Eud6XxIm2btKLzbGHhJcecFW9s4xekFr6fDSJQ/H
R/M5M+r4fvMzbPaSt8ncZP8Ss4MmTGzWO1nt1dCVcWsl++VStJnCK/oTamU0+UKj
W35EYfJXtCxeRg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:13:16 2026 by rpki-client