Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: h7CoT1Gdkd3/+y4M9oD1qUHG6qwOYkLskRKbXTXFh+g=
Subject key identifier: 3F:26:80:13:66:C4:7D:61:48:DE:88:96:E4:FF:09:94:E7:51:D0:2B
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019F93241FF624300ED570544108F822D13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0EAF
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: x5l6lMaAOfxgbqmWJoAYKxZN2ySlQH5lJvSoznkVVnA=)
2: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (hash: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1f:f6:24:30:0e:d5:70:54:41:08:f8:22:d1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=3f26801366c47d6148de8896e4ff0994e751d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:e4:2d:24:03:2e:a0:6d:1d:fa:2f:27:c2:
18:da:11:7c:24:d6:bf:7c:06:fa:94:2c:e1:a4:09:
cf:f6:1b:5a:68:bd:29:9b:13:65:08:94:52:c6:0e:
76:e5:54:0a:e9:1e:a7:08:fb:07:b3:2d:80:08:33:
f3:57:39:75:a6:55:8a:11:38:f0:46:01:42:42:61:
e8:75:68:af:6b:93:7e:a8:d5:bb:40:25:39:b1:9e:
61:a0:fc:2c:ff:88:f6:7c:f8:ee:2e:f5:a6:35:5c:
d6:2f:fc:09:e0:30:09:ba:33:0d:2b:3d:16:43:2f:
c0:f7:35:6a:03:f2:47:8a:3e:c0:5a:61:1b:38:09:
e4:41:ec:b4:c8:f9:52:39:a2:d7:48:a1:e9:d2:dc:
1d:cf:fc:f2:01:a2:e2:6d:d4:c8:24:3a:cd:15:df:
31:d8:5c:2d:ae:d4:51:48:ac:19:d1:3a:df:03:27:
66:01:79:a1:d9:ec:6b:6a:50:23:b3:db:2c:df:81:
4b:b0:6e:0b:46:c4:97:27:b8:b7:7c:66:73:47:58:
f8:9b:1e:2e:84:cf:69:b5:8c:b4:66:f9:98:e2:88:
44:00:25:91:00:d6:b3:32:61:08:ef:b7:4d:d0:f1:
64:0e:7b:74:12:44:2c:98:04:6c:20:27:22:a0:66:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:26:80:13:66:C4:7D:61:48:DE:88:96:E4:FF:09:94:E7:51:D0:2B
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:45:5c:81:cb:0f:5b:8d:72:d7:ce:09:6c:cb:02:af:be:5c:
d3:84:b0:54:a5:b5:5d:21:5a:f5:7d:fc:4d:4d:5c:e1:65:53:
43:c6:5e:1a:54:a1:56:8f:08:77:10:54:2a:85:be:89:12:37:
4f:d2:4c:19:4a:e9:1f:e7:ff:d6:f6:50:e7:85:53:51:44:2a:
45:45:5a:85:89:67:ed:08:9d:c4:c3:b8:de:c4:9c:c6:39:6d:
4e:bc:07:3e:81:4c:55:1c:d2:91:85:93:cf:27:b1:fa:c4:48:
ad:9d:22:a1:a5:fc:a7:0c:5c:be:31:df:8b:66:ee:58:89:53:
fd:45:18:da:eb:28:71:0d:72:f8:8f:79:a0:08:22:e5:95:ae:
9e:e6:5a:be:5c:1e:59:85:f7:b6:48:a3:81:66:1b:3e:8d:8d:
a2:d0:74:96:39:dd:61:91:6c:16:e3:4b:e9:e5:ff:a6:df:1b:
06:2e:de:ef:4f:91:2e:47:95:14:05:5d:da:16:a6:d3:e0:a5:
88:dc:83:05:16:2f:99:5e:be:af:b3:86:a0:38:eb:84:58:b1:
a7:9e:7e:26:8f:13:ab:b6:9b:ae:bc:59:e5:1d:b2:0b:00:e2:
28:a6:11:77:63:40:ca:6b:aa:d2:e9:fb:cf:bd:c2:53:fa:fc:
fb:30:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:30:02 2026 by rpki-client