Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: hABsLnh/QKGXYsCBB8f3KOhaB862oE/BZPjteXsUGkM=
Subject key identifier: 16:DB:77:2F:A3:7A:8A:34:CE:01:17:F6:74:83:F9:E2:FF:83:54:A3
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 019E1DFEC4C4E47E8EDF96EF6D91535107F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:36 +0000
Manifest this update: Tue 12 May 2026 21:01:36 +0000
Manifest next update: Wed 13 May 2026 21:01:36 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: 3gnGRmE2AEyA1iyWXuCFpmiBp6DFz8g+0GGj3XDYiRI=)
2: eN72_JOrglIivcRIrkUpJBSTrpQ.roa (hash: AlV36PTHBMVTau6gOr573zu4YRN7qhKbu3yDLrxxjYM=)
3: jgptn0oWvPfILsGhYu7AQtAVGQI.roa (hash: esf6xdXJXvTREZt/uQo773kjs6wVF4kHKSB6ECh3KeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:c4:c4:e4:7e:8e:df:96:ef:6d:91:53:51:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: May 12 21:01:36 2026 GMT
Not After : May 13 21:01:36 2026 GMT
Subject: CN=16db772fa37a8a34ce0117f67483f9e2ff8354a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:3d:81:5f:65:56:a2:3e:7a:f7:8f:f6:fb:
fb:73:a5:a9:9c:24:af:59:c7:44:77:c2:42:28:49:
72:8a:02:4b:62:df:38:e9:6a:db:27:62:a0:4d:4c:
c6:80:01:d4:3b:83:73:2f:81:de:18:03:ce:bb:06:
19:67:7e:c4:58:5e:16:6c:07:21:f4:38:2d:b7:f7:
d8:13:b8:38:2d:e8:03:4f:c0:66:11:61:df:87:38:
7a:a2:e5:e2:18:13:2f:d6:42:bf:31:c4:5f:22:1b:
09:75:69:06:a0:6f:ef:9b:8c:8c:01:76:16:e4:d6:
d2:1a:1d:a8:99:93:12:73:2d:4e:72:6c:31:27:6e:
3d:81:19:91:f7:8d:bb:67:40:5e:7d:3b:34:d2:ad:
e1:6c:85:4b:ed:b8:45:db:d3:cc:90:c6:6f:dc:cb:
6b:fe:86:a2:43:8d:21:29:36:eb:b7:6f:12:f3:e2:
3f:b4:13:9b:66:31:2f:cf:7d:5d:48:3c:eb:96:c1:
ee:8e:59:e5:da:11:80:89:c7:4f:be:bd:86:3d:00:
ff:39:18:d6:13:bd:17:ea:cb:e8:92:f2:57:c4:1a:
a7:d2:5d:d0:98:25:18:12:56:66:fd:64:b7:b2:ca:
9c:93:53:9b:1e:e8:54:e0:72:c4:2e:25:75:1f:7a:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:77:2F:A3:7A:8A:34:CE:01:17:F6:74:83:F9:E2:FF:83:54:A3
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:76:cc:3e:39:0a:fb:ad:23:98:cd:0c:e5:dd:e2:95:c8:06:
3b:64:11:bd:87:a9:9b:aa:b7:5f:f0:35:d3:24:07:e7:d4:a3:
c8:1b:94:a1:06:0d:0d:07:95:8b:ed:7f:97:f1:31:d7:0b:f2:
58:ad:39:50:93:3d:3c:cc:05:f5:32:23:3a:6f:37:44:7e:87:
20:0e:fe:77:33:c6:c6:97:8a:78:62:a1:2b:f0:b6:d2:7e:3d:
a3:57:3a:7e:f3:63:50:24:60:86:e6:dc:14:c6:80:6f:30:30:
4b:de:65:69:c0:a6:b3:c4:ec:ac:83:ca:51:e7:18:1b:65:bc:
31:74:c9:11:34:17:34:7a:ce:12:96:e7:da:84:a2:09:a1:f6:
b4:f1:9c:03:1b:fc:1c:b8:9e:78:6e:e9:02:5e:8b:b0:12:1d:
7a:51:94:6b:8a:4a:f2:a9:76:4c:ca:34:14:21:43:6f:4f:13:
68:2d:32:96:a7:ce:e2:53:08:0e:fe:da:c7:78:15:10:e2:78:
e3:9f:56:3b:62:27:62:de:e6:9e:1e:d0:c1:50:cf:ed:0a:7e:
25:2b:9f:e3:6c:b1:78:a0:42:f4:4b:0d:92:e8:c2:ba:0f:5a:
54:aa:60:a8:e5:cd:9e:e7:be:d2:80:e4:dd:ac:9a:fb:0c:ab:
bf:61:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:18 2026 by rpki-client