Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: VIZtSZkyPJT78G/YXTvZIe0dPm4xHrz0cxXK9c2jXho=
Subject key identifier: 0F:A9:F4:3A:3D:52:35:0A:35:74:89:2C:1B:5A:8F:38:19:2D:D4:86
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 01A0DE3C1EBFFF2E03BB8BBFEFDFC3598DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0768
Signing time: Sat 26 Sep 2026 15:01:16 +0000
Manifest this update: Sat 26 Sep 2026 15:01:16 +0000
Manifest next update: Sun 27 Sep 2026 15:01:16 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: 1PbOui3PLB/9Bw9x6Cr3fqAq4KQslE8gJGx9SQ9+w3I=)
2: PBy6RtlfcDlGYKQC96uBlitoIlA.roa (hash: ojEK+JsCI/EYNMzf6oz6tDrWJ6bHMpNxw4BtdlAh7Ls=)
3: b-ePuu9SrmhEXBMPt86xMQ-pphc.roa (hash: ypt0as7xpwN512+ygzUQi3tGsik5JKD0RnuDrs7wXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:1e:bf:ff:2e:03:bb:8b:bf:ef:df:c3:59:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Sep 26 15:01:16 2026 GMT
Not After : Sep 27 15:01:16 2026 GMT
Subject: CN=0fa9f43a3d52350a3574892c1b5a8f38192dd486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:e4:00:13:47:29:54:fe:a0:9a:98:70:40:
f5:ba:de:ac:a8:39:69:ce:00:49:e1:95:d1:10:79:
b8:e3:98:95:c6:e1:b9:04:62:52:fa:17:6a:dd:9b:
37:2a:60:1b:e6:7f:2b:96:9d:98:8f:d3:02:d7:28:
b8:be:65:f7:00:2f:e0:17:53:d8:08:e6:b0:d0:40:
25:5a:f4:f5:c8:f9:6e:14:10:f7:0e:5d:c8:7c:51:
72:03:aa:66:75:32:cf:30:6e:92:bd:f9:04:b0:c1:
ad:b7:ef:87:32:b0:d5:82:45:4a:02:a3:6f:fd:a0:
17:48:6d:36:37:f4:b7:08:41:41:bf:eb:30:8b:82:
a9:5f:8a:fa:f0:07:0f:b0:ea:5b:dd:7f:c7:46:de:
74:fb:2c:ce:06:f5:10:b8:6c:89:e6:6f:16:d7:e4:
d9:cd:00:4c:d4:49:63:76:e6:2f:1d:c3:99:0b:0f:
3b:c2:b3:84:cd:f5:8b:79:81:ec:39:d5:40:e8:27:
d8:cf:68:83:c5:58:fa:90:d6:cd:a4:95:9b:ce:ae:
c9:52:e5:a9:80:6b:b8:88:2f:c4:41:cd:90:a6:b0:
f7:18:59:37:6b:cd:d6:5e:5e:07:7b:b8:d0:9c:22:
c0:b0:75:c7:5d:5e:1f:ce:35:86:f3:f5:1c:5f:99:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:F4:3A:3D:52:35:0A:35:74:89:2C:1B:5A:8F:38:19:2D:D4:86
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:97:e9:e7:9d:58:60:ab:26:bd:b1:09:c2:5c:7a:78:ec:
17:09:a8:b1:15:2a:0a:cb:89:ed:9f:5b:f1:52:be:3a:5c:79:
c6:94:e9:67:c4:75:ea:b8:f2:38:1a:3e:7e:e7:79:13:59:66:
98:07:85:b5:20:da:a8:01:42:8e:08:83:a6:eb:72:ba:4e:e7:
c7:bc:41:86:30:dd:62:0b:55:2b:c9:8f:21:12:cf:89:38:22:
c3:78:39:fd:09:93:31:d5:6e:89:42:b2:22:a3:f3:24:2d:16:
b5:b0:84:20:27:44:8b:1a:4f:ea:12:43:87:2a:e6:6d:10:4e:
1a:d1:18:05:7b:94:8b:1d:2e:84:cb:cf:96:c2:1a:7e:69:7c:
99:f2:04:db:14:01:51:51:8b:a1:55:a5:6b:6f:66:02:6b:51:
0f:30:bb:22:c7:1e:b4:27:aa:b6:bf:57:93:2b:29:94:5a:d2:
7a:f2:a6:31:1b:63:80:90:a9:53:a9:9c:81:f9:7a:10:97:c2:
ed:98:df:fe:dd:57:6e:c7:6e:3b:9a:18:d4:6c:3b:44:a1:b8:
a2:8f:4d:28:c4:3f:c8:ce:93:9c:b0:3c:3a:e6:bd:6c:37:79:
f5:93:b2:09:3e:b0:86:c8:5e:05:32:36:b3:8b:92:df:ae:20:
22:5e:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:30:55 2026 by rpki-client