Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: rQ6A/VpnGKgoc07KaYXe1OFp6LQqvnm7fej78hYdhYs=
Subject key identifier: A9:6D:0B:5F:6F:DF:10:5A:92:F4:4D:72:FC:FC:98:AA:7A:5C:56:ED
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019E1D23002C7F7EE9A6517F7BC020E749A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 1081
Signing time: Tue 12 May 2026 17:01:33 +0000
Manifest this update: Tue 12 May 2026 17:01:33 +0000
Manifest next update: Wed 13 May 2026 17:01:33 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: nHth/PkQqtvvPwIX6vZYOnPSj5MjtMKJ0008Ql89wi8=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:00:2c:7f:7e:e9:a6:51:7f:7b:c0:20:e7:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: May 12 17:01:33 2026 GMT
Not After : May 13 17:01:33 2026 GMT
Subject: CN=a96d0b5f6fdf105a92f44d72fcfc98aa7a5c56ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:36:02:bf:1c:42:64:d9:ff:92:7d:25:ce:
5f:b6:74:54:a3:1a:a1:57:b6:04:47:73:bf:31:ea:
4d:84:f7:b5:6a:8e:86:aa:99:e5:92:26:7b:be:e8:
f8:94:20:12:9d:83:80:7e:48:82:98:46:24:69:cb:
53:b9:82:a4:22:78:f1:68:b3:0f:ae:00:b0:70:ff:
65:db:b7:3f:cc:d0:f8:8d:14:45:69:30:c2:ae:02:
7d:89:3b:f8:59:1b:4e:64:a0:6a:44:9e:9a:20:c3:
6a:35:2a:e0:f4:20:e9:27:5c:a7:df:b4:14:44:e5:
1e:6b:ad:18:43:cd:59:81:3c:c6:5f:e6:03:b2:37:
db:a5:63:6e:d0:84:71:8f:49:ac:61:25:f2:1e:80:
4e:a6:cc:da:7a:f9:dc:3d:0d:46:28:51:4c:eb:9d:
d6:1f:aa:1a:84:34:1f:f1:8b:d4:24:0e:b7:42:ab:
cd:bb:a9:88:c1:bf:ab:5c:17:3c:10:98:62:cf:40:
6e:b8:e6:c7:37:12:76:5e:ca:72:4b:db:04:05:e2:
10:8f:dd:f6:7a:0f:bb:4f:7e:39:a1:6b:7d:8d:1b:
df:8b:df:69:1a:aa:48:8b:08:b9:35:d0:32:ab:1a:
74:a2:a9:88:69:71:af:5e:ce:7c:f3:40:b3:da:eb:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:0B:5F:6F:DF:10:5A:92:F4:4D:72:FC:FC:98:AA:7A:5C:56:ED
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5e:7c:6c:35:b0:81:a4:6c:0a:2e:92:92:f5:d4:98:66:b5:
8d:a5:7f:fa:7e:34:c6:0a:8c:0b:c9:d2:7e:76:31:98:a9:66:
c8:2d:d9:f4:75:02:79:e1:b7:19:63:d4:b6:6b:49:15:1a:7e:
83:7a:f5:e3:91:41:07:8e:e4:e2:3c:6f:d5:9f:1c:e2:4c:f3:
23:24:58:fe:8f:86:00:1a:72:a3:d1:37:89:11:e5:76:e5:e4:
ae:0d:af:09:3d:48:5e:cb:c7:00:44:66:c2:ce:74:ef:af:47:
20:7c:8e:71:35:a5:d2:7d:e8:2b:ef:9d:8a:6f:ca:85:cf:56:
97:65:91:1a:95:53:a5:fa:f1:f1:a7:c3:48:31:10:12:93:5a:
e3:80:cf:2b:41:8e:d2:27:7e:68:39:d0:7a:b1:00:73:52:3f:
76:9a:b6:25:fa:0e:68:24:b9:fd:27:aa:65:33:52:80:7d:96:
28:58:3f:f9:4f:c5:72:4e:47:74:5f:1d:47:f2:70:ba:22:1d:
16:1f:50:39:89:9d:37:15:5d:7f:9d:d6:bc:6f:81:2f:2a:89:
6d:92:dc:10:98:30:70:28:80:db:13:28:0e:0d:0c:1b:27:3e:
28:98:dc:22:8d:06:50:98:ef:b1:a6:0c:00:46:b6:4d:ae:e9:
92:a3:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:17 2026 by rpki-client