Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: EeDvZJAWlhjM/R/tY11udnmlN6hg8zkYSlr2XDBcr1A=
Subject key identifier: 0C:01:BD:88:26:FC:96:7B:7C:3A:EF:60:0A:23:3D:D4:5F:82:7C:F2
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019F8FB544B1014A135D8005BE5216E773B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 08B1
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: lShcLLRTaEjd6GkVAKUjkWIwRjEf7fNuH2wK8Iv3/e8=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:44:b1:01:4a:13:5d:80:05:be:52:16:e7:73:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=0c01bd8826fc967b7c3aef600a233dd45f827cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:a4:51:65:a3:94:51:9c:9f:b0:bc:b6:3b:
f0:a0:63:ea:cb:e6:86:60:0a:ce:1d:d7:f9:bd:18:
ed:cb:e1:cc:2a:0b:15:55:67:62:c3:ba:4a:bb:74:
84:c9:fb:64:90:4d:64:ad:a3:e3:0a:07:77:98:41:
fd:b7:bf:95:da:5b:0c:91:43:d5:03:48:e5:b7:ed:
ca:1f:ea:22:00:14:c0:36:3f:89:2c:d2:5d:a7:74:
77:fb:7e:58:15:75:22:d7:56:ab:e7:ac:70:6d:5c:
c6:ac:bb:be:34:11:d6:80:bf:a9:61:31:3e:fc:ab:
c0:ea:47:5e:e7:10:2b:15:2c:74:43:06:e1:e0:32:
86:9d:12:9b:0e:70:6a:ac:4d:2d:bd:ec:b5:97:d4:
f3:d0:df:64:b0:f8:28:58:98:6c:cb:2f:c2:df:13:
5a:fb:47:56:ad:a4:2e:4d:60:ca:2e:93:80:bf:de:
d4:6c:98:53:7e:ab:55:ad:c8:fd:5b:62:ed:41:42:
5c:a3:c0:70:f8:19:0d:ac:59:11:b7:12:99:95:e1:
e8:fd:fc:7e:c9:53:a7:c7:11:0a:12:35:3f:44:1a:
c9:7e:d9:c6:69:06:03:83:06:41:3a:42:c4:0b:e5:
af:ed:d3:b3:9c:07:5c:d6:08:c9:7d:26:91:f7:df:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:BD:88:26:FC:96:7B:7C:3A:EF:60:0A:23:3D:D4:5F:82:7C:F2
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4f:96:d2:e1:14:e2:ae:f6:29:4e:72:41:bb:84:ac:ab:cb:
c4:f3:24:ca:21:5e:86:af:51:19:58:58:26:52:00:77:39:7a:
ce:0c:3a:db:da:3b:2f:43:33:04:4e:48:10:6f:5b:78:43:dc:
30:b6:f3:3c:ef:1a:21:c1:df:16:58:9b:1a:02:58:f0:cd:eb:
48:e6:82:41:d6:5e:f2:e1:45:a5:e3:93:9c:e2:16:57:e8:79:
d9:c6:33:5a:02:e2:fe:2c:37:1f:3f:ab:97:67:c5:9a:10:dc:
d3:9c:63:78:13:c6:c4:a0:af:7f:e6:33:1c:a5:aa:58:c7:08:
9e:83:34:c3:3f:f6:38:d1:9e:89:ae:c1:80:64:6d:18:e7:7c:
82:29:85:bc:64:f6:41:d8:f4:5b:3c:4d:f1:2e:80:70:b0:73:
96:d2:b2:5d:16:9f:4d:55:fb:4b:db:00:22:4e:28:37:7b:6f:
3b:08:c8:c3:4d:b9:28:2d:c0:5b:23:1a:37:ab:82:10:14:8b:
d1:7b:44:9e:92:1d:c1:53:df:0f:64:17:20:d7:02:2f:5b:05:
97:50:3a:c6:9f:b8:e0:1e:88:a0:b4:71:5b:e0:c6:82:d9:7f:
d3:d4:d1:71:2f:ba:81:92:a5:98:37:ac:09:a3:a0:c7:54:4d:
b1:f2:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:34 2026 by rpki-client