Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: rnBsBzsGMP5epbrY7M5JUd5/ZbJKy+TMCWOHfq7rf2M=
Subject key identifier: 8F:4A:04:BB:E4:A0:00:01:BD:5D:3D:6E:A7:C2:F3:B5:76:85:6D:63
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 01A0D42682E7314AC3E06B71B46BCE6173B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0959
Signing time: Thu 24 Sep 2026 16:01:28 +0000
Manifest this update: Thu 24 Sep 2026 16:01:28 +0000
Manifest next update: Fri 25 Sep 2026 16:01:28 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: o1fHnP8o3YwyDNc3sJ3cRhxez0wXVfN3ShGCw1tRFIc=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:82:e7:31:4a:c3:e0:6b:71:b4:6b:ce:61:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Sep 24 16:01:28 2026 GMT
Not After : Sep 25 16:01:28 2026 GMT
Subject: CN=8f4a04bbe4a00001bd5d3d6ea7c2f3b576856d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:2c:3c:35:0e:8e:76:87:a6:31:1b:32:c0:
3d:56:cb:a5:b1:f2:a4:dd:73:6e:d6:78:f0:18:72:
1c:8b:ad:1c:44:03:b6:30:ae:06:08:3d:c4:b2:eb:
95:d0:87:45:29:d9:c8:0d:17:80:fc:10:d3:c7:b1:
22:4c:9c:ed:a4:fd:a6:40:a4:b3:d2:5b:8e:13:3b:
b9:09:af:10:fa:6b:94:e6:45:0f:3f:fe:37:f4:34:
cf:67:4f:d5:5d:9f:70:d5:09:1e:14:df:11:98:35:
3b:0a:dc:ce:59:a6:f6:c7:24:09:bd:c6:d7:c4:14:
9c:7f:8e:c8:6e:23:9a:57:53:0f:b6:b0:31:10:1a:
25:75:62:b6:0f:44:ed:a9:1c:c8:28:cb:a5:b1:e0:
e5:5d:cd:49:af:a6:d7:40:19:ec:52:8a:3b:01:78:
51:cc:03:13:59:fc:47:bf:b2:ea:3e:52:67:29:ac:
fe:50:7f:af:bd:27:08:6f:c3:bc:7d:5a:11:aa:e6:
27:f9:8d:08:10:21:7a:97:ca:a6:50:64:91:31:b5:
8f:b9:53:f8:f6:28:91:3f:48:7c:3f:39:92:61:2d:
39:77:8e:e2:5e:a5:4d:ec:60:9e:82:46:00:4c:43:
73:bb:49:ef:06:46:6c:8a:f2:52:15:86:57:4b:19:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:04:BB:E4:A0:00:01:BD:5D:3D:6E:A7:C2:F3:B5:76:85:6D:63
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:58:b5:86:a1:35:4d:11:f6:df:2b:b2:47:5b:f6:6f:ad:94:
2b:1a:b1:da:b4:04:51:41:ae:94:05:f1:1e:af:83:2b:61:10:
ce:c7:1e:0a:73:4c:7a:62:57:8e:44:94:f8:7d:a2:5b:f7:ad:
2c:00:af:28:b8:3c:40:33:a1:c2:70:67:c8:16:d4:68:d0:88:
45:fd:bc:e3:8f:00:c3:51:5d:b0:26:8f:17:bf:9c:41:ca:c6:
f5:66:f1:a7:33:c9:dd:dd:89:d5:92:29:40:4f:4a:bc:f6:ae:
4f:1b:b6:0c:5d:7d:46:23:8f:d9:12:37:db:db:9f:fb:36:3b:
9c:9a:8e:44:46:0a:6a:14:6a:64:2c:d0:66:60:1c:9d:31:b6:
12:f6:39:ab:f7:1f:bd:ba:03:ba:71:3a:af:b8:df:e5:f4:8e:
30:23:9d:7b:26:5a:4e:e1:21:3a:93:57:9f:08:ea:01:34:a5:
09:ac:8f:e7:22:8a:51:6a:34:6c:cb:54:8b:34:32:22:3b:9f:
12:b8:e0:19:25:2d:a8:db:22:a8:92:4d:b5:04:52:40:54:5d:
2c:d8:a6:8a:d2:10:9e:17:8a:27:c0:54:c6:e8:9f:0c:c6:8b:
7d:cf:8e:50:24:8e:5b:b0:38:53:d6:87:79:c8:e7:f7:77:7d:
df:0f:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:58:34 2026 by rpki-client