Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: O3lgqhK35O9NKUU0nQhzNTQKGpIbXFUwmHx2YpoURJI=
Subject key identifier: 5B:0A:E0:D7:E0:CC:BD:74:D4:1F:C8:DB:62:B5:F1:84:6C:93:34:1D
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019E1F47BDF4AA16AA5A880CB1C4FACE5FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 03:00:55 +0000
Manifest this update: Wed 13 May 2026 03:00:55 +0000
Manifest next update: Thu 14 May 2026 03:00:55 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: P2lfDRd/yNSiU0P+wsvETCeSYuIwtXeH5EhdvBI6dtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:bd:f4:aa:16:aa:5a:88:0c:b1:c4:fa:ce:5f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: May 13 03:00:55 2026 GMT
Not After : May 14 03:00:55 2026 GMT
Subject: CN=5b0ae0d7e0ccbd74d41fc8db62b5f1846c93341d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:07:5c:3c:63:9f:c1:17:bb:ea:12:5a:35:
43:1e:6f:63:5c:ee:ad:4b:c5:69:1a:08:5d:65:dc:
13:85:77:b5:77:ee:da:b9:7f:48:1d:a7:93:cb:8b:
39:a8:9e:52:9a:e1:06:19:3c:88:7b:96:e0:a5:90:
bf:5f:b4:e2:3e:7e:43:87:a3:03:e7:72:72:33:be:
6d:ec:c6:73:13:ba:e3:61:80:f8:c9:3e:4e:72:e8:
9d:5f:ac:d7:13:ab:2d:e2:55:5d:21:f3:4f:5b:29:
84:6d:8d:ef:24:d5:8b:c4:f4:6c:25:3d:ad:7b:7e:
b4:f5:cb:27:fe:2f:1b:b8:1f:04:46:08:95:e2:5a:
51:dc:7d:42:53:27:19:e1:20:d2:72:bc:ac:2e:7e:
2f:2e:d5:55:2a:92:fc:7a:18:6d:ff:12:92:1e:92:
18:8b:37:e5:0e:1f:b9:b0:7a:fc:5c:e5:10:07:6c:
4a:bc:02:62:72:82:c4:ae:e4:e8:ec:2b:51:85:a6:
73:50:71:55:93:31:a6:bf:a9:8e:bb:e4:a1:3f:a6:
db:59:ab:33:ee:46:35:c0:9d:9e:99:35:66:23:6f:
2b:37:05:7f:4b:85:1e:22:94:b3:6f:d7:36:9b:2b:
82:94:f5:68:ca:cd:c9:e8:f4:30:9d:8e:fa:66:bf:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:E0:D7:E0:CC:BD:74:D4:1F:C8:DB:62:B5:F1:84:6C:93:34:1D
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0c:88:3e:16:c1:a4:28:fe:ce:7c:99:08:b8:2a:b0:1c:a4:
8b:3c:77:1f:24:67:a7:85:63:d4:23:37:8c:f1:26:8a:10:ce:
b1:53:75:b1:52:1b:5a:c1:fb:73:dd:b8:2b:ad:67:bb:fe:cf:
f0:cf:4a:cb:a5:d7:ca:28:33:3d:fa:0d:5e:ca:f0:4a:cc:f7:
34:da:11:7c:ac:0b:ab:77:7d:fe:73:9b:66:21:f4:d7:7f:58:
9c:17:ff:a6:99:ed:b3:1d:44:a4:78:a4:e7:33:80:78:2d:d0:
a4:35:8e:b0:d8:58:65:f0:8c:40:12:65:f0:1d:e9:35:30:65:
1c:68:fd:7e:d2:4c:df:4b:a9:f6:b5:50:31:b6:da:7b:65:c5:
8e:b1:23:fc:fa:fe:ee:b9:cd:f2:b1:19:5a:0f:35:48:d3:52:
cf:de:a1:2a:91:73:2e:23:62:8b:cf:70:37:12:8b:34:18:32:
40:81:63:97:7a:58:99:82:7b:34:d5:da:83:57:5e:96:1d:3c:
fb:dd:6d:f5:0b:2c:c2:14:39:bb:ee:dc:e9:54:a6:86:b9:d6:
29:f0:75:ea:a6:06:52:ba:9a:63:ca:0a:85:64:36:31:2e:55:
c9:62:c0:da:30:57:fa:b0:82:0e:65:79:f1:bf:6e:0b:1d:a8:
eb:a3:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:48 2026 by rpki-client