Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: j0lfHl3WUsOk4SkZQ+wLbGhfRtKZkk+9yBsxcB9YPZ4=
Subject key identifier: 11:92:C8:65:16:44:CB:E8:9B:C5:B8:59:3F:8F:C2:97:47:01:FD:41
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 01A0DD605717D3E1A4528B91221A91948BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0F5A
Signing time: Sat 26 Sep 2026 11:01:13 +0000
Manifest this update: Sat 26 Sep 2026 11:01:13 +0000
Manifest next update: Sun 27 Sep 2026 11:01:13 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: YUrjH5lSdPDh1GLZn3jodrchvbGc8qlbAcKb3AWKcSk=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:57:17:d3:e1:a4:52:8b:91:22:1a:91:94:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Sep 26 11:01:13 2026 GMT
Not After : Sep 27 11:01:13 2026 GMT
Subject: CN=1192c8651644cbe89bc5b8593f8fc2974701fd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:ad:f5:f9:27:6d:97:71:79:3d:5a:ee:5b:
6a:01:78:f9:da:fd:01:8a:8b:65:b0:42:5c:52:d0:
a8:a9:06:0e:71:a0:5e:b9:c1:6d:d4:2f:8e:2c:89:
82:34:cd:00:fe:06:79:87:00:5f:0c:0d:d9:2e:97:
97:56:63:f4:99:ff:0f:e3:09:d0:ce:54:fd:29:4b:
e2:5e:4a:ef:0e:93:a1:9b:60:18:d6:ee:ff:1c:0c:
c7:1c:88:a2:85:84:b4:f8:d9:75:6d:61:43:cf:8c:
6c:47:dd:a0:49:7e:fa:91:ae:d7:68:ef:e8:7b:9d:
d9:cf:ce:3a:5f:f7:9c:c3:a2:a6:ff:06:2e:7c:19:
82:7a:fa:e6:ee:84:0c:df:f2:be:5a:2c:07:a5:56:
69:4d:99:81:42:d3:5c:4f:9a:ad:90:97:1a:69:68:
7f:2d:42:6d:e5:2a:bc:86:fb:56:47:8f:aa:41:32:
b2:64:17:9c:5b:03:dc:49:0c:3d:42:0c:71:01:74:
5b:00:54:94:af:2d:ee:b0:62:39:7a:2f:15:c7:86:
d3:05:85:a3:00:79:71:99:02:04:7b:9e:ab:73:06:
f4:38:0c:1e:af:b0:b8:6f:99:98:b6:b6:62:17:69:
98:c3:69:49:88:83:1f:47:a5:47:39:9c:e3:fa:89:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:C8:65:16:44:CB:E8:9B:C5:B8:59:3F:8F:C2:97:47:01:FD:41
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:75:e2:3b:c5:74:a2:d8:2f:f0:05:ee:c4:6f:eb:d5:27:33:
3b:2c:bf:f1:0c:81:a8:e6:f0:60:ba:17:49:ba:7f:58:f1:3b:
43:f3:3a:af:b0:2e:fd:9a:64:09:3f:2a:93:38:d2:bf:24:0d:
bc:be:6a:7f:38:ce:43:c2:c7:a1:43:7d:25:24:6f:7e:76:82:
4a:6c:76:fb:0b:29:69:65:22:78:42:7d:9f:33:52:6b:a7:d0:
48:c4:a4:a7:c6:cc:bb:05:7c:88:1a:37:a2:eb:e2:39:7d:8d:
91:89:d0:88:89:a7:58:e6:1f:14:44:4a:57:43:82:58:a9:54:
ca:e8:19:a9:ce:af:d0:20:fa:a4:0d:7f:62:23:45:5c:35:29:
89:12:0a:87:d3:4c:e5:5a:ac:6a:22:01:0e:99:24:c3:ff:bf:
91:a9:39:f0:89:2a:3d:ac:f3:38:f2:d7:1e:7d:0e:1e:86:b5:
cd:2b:58:6b:c6:40:99:ca:d6:90:f3:bd:b5:ab:36:6e:e7:d9:
fc:6e:b1:46:ef:82:98:fc:69:27:fd:77:b8:a7:59:a2:32:16:
f4:69:55:30:02:6b:db:a6:1f:39:ac:b4:78:42:f2:e7:a9:c7:
98:5a:4e:3c:8f:60:92:8c:53:9b:a8:23:e1:0c:dd:bb:14:b7:
18:53:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:03:42 2026 by rpki-client