Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: bn8wMh0o8OSuiHz9LGsqQxr/MZNK/6douLUxJs3Zr3w=
Subject key identifier: 48:25:9A:04:C8:99:78:8E:3F:82:A1:8C:35:0C:E5:A4:A9:6A:CC:B9
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019D2996DD93A48B15B44C2132249A3EC733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0773
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: 6dGxA7T11h9mmGXbzHrjaT7VyOAlthPqpYtmqQWK5dk=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:dd:93:a4:8b:15:b4:4c:21:32:24:9a:3e:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=48259a04c899788e3f82a18c350ce5a4a96accb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:1d:ff:8d:35:f1:37:fc:fb:c7:ad:ee:7b:
9e:d0:f5:d0:fa:09:d7:f4:bf:9f:f7:e6:99:aa:24:
00:69:d1:4e:a1:66:95:e2:d1:b8:34:82:87:91:a0:
1d:83:a3:72:ca:c4:b1:08:ef:11:e6:f6:12:3a:98:
9b:a6:81:f9:ba:30:4a:dc:78:37:41:62:5b:f2:2d:
ab:42:c1:90:14:2f:84:62:c9:b8:3f:0a:17:d9:e8:
05:51:d1:11:73:62:d9:24:a6:10:ca:dc:d5:de:bc:
c7:df:5c:00:95:c4:f8:09:3b:3c:59:5c:b3:db:76:
d6:e7:f2:b4:d0:6d:c4:4d:54:eb:2f:d6:5b:bf:ae:
96:e6:60:f9:39:e6:a9:ea:1e:c2:b5:21:d9:b6:f6:
be:d6:3d:35:2d:ed:bc:a2:88:e7:9c:10:8f:e8:dd:
25:a7:24:61:91:26:7e:53:87:7c:c9:25:6c:aa:8e:
bc:ab:4a:1c:43:fa:73:b9:f6:1e:35:f8:71:bd:74:
83:87:ce:06:0b:77:62:44:4a:16:2f:3f:e5:82:b0:
86:52:a1:68:37:2c:66:21:3b:c6:75:78:cc:fd:f3:
3f:b2:ac:74:8d:96:46:ec:0a:18:3d:c6:66:81:6e:
52:e7:5b:9a:31:60:cd:56:1c:20:9f:4f:fa:08:29:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:9A:04:C8:99:78:8E:3F:82:A1:8C:35:0C:E5:A4:A9:6A:CC:B9
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:3c:46:85:1b:e2:04:92:e7:2c:f2:b1:5e:d1:90:ae:f8:
a4:39:f1:f1:9f:77:ca:0b:14:b9:73:8c:4b:e9:43:69:97:ef:
18:5e:af:47:a1:60:d5:6f:0f:25:ff:56:26:22:bc:7f:ce:a6:
a3:f7:7a:e8:6b:e3:72:2d:5e:ae:f1:d9:28:92:0e:30:c6:da:
09:9b:12:53:c5:4c:c9:76:5c:bf:87:5e:64:72:20:1b:78:a0:
82:4f:66:29:45:44:6f:3c:3a:88:c6:46:86:26:53:4e:36:29:
0e:01:31:bf:5d:0c:e3:71:4e:fc:8e:39:5a:ac:77:50:95:a3:
9f:ac:78:3d:bc:57:fc:c0:f3:af:ac:f8:fb:c7:90:94:d2:cc:
62:76:59:fa:f4:c2:c6:bf:99:94:a6:eb:39:07:e0:42:10:23:
96:7e:94:39:eb:72:b8:3e:c6:b2:df:d7:90:9d:e7:0c:d0:cd:
40:2a:44:02:5a:f1:03:bb:29:ee:a6:64:7c:a9:44:1a:4c:64:
a6:a7:13:ca:f1:af:ae:6e:21:23:83:91:83:71:09:46:0c:fe:
18:a2:59:7f:c9:9a:6d:41:96:09:04:bb:2b:ce:35:2c:cf:b9:
74:7e:62:6a:53:4a:53:18:2e:42:58:d7:3e:3e:59:c2:93:ac:
3e:84:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:49 2026 by rpki-client