Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: rw5+nfFon+/yTkrwVSuc1mWogaN88edfxQZkb1c7D7c=
Subject key identifier: A0:90:BF:A2:71:14:6B:BF:2E:AC:A1:F1:05:92:B5:F9:81:63:93:EE
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019E2023CA1FC345A513D59628FF7383ACC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0F87
Signing time: Wed 13 May 2026 07:01:16 +0000
Manifest this update: Wed 13 May 2026 07:01:16 +0000
Manifest next update: Thu 14 May 2026 07:01:16 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: fjDbE/0RA7BgORSC/CTmK92cxT8QSYmeVW0MqDY/RPw=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:ca:1f:c3:45:a5:13:d5:96:28:ff:73:83:ac:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: May 13 07:01:16 2026 GMT
Not After : May 14 07:01:16 2026 GMT
Subject: CN=a090bfa271146bbf2eaca1f10592b5f9816393ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:b8:40:41:19:fb:eb:c9:ef:3b:d7:24:7a:
a0:cf:ed:be:15:cb:28:46:51:68:ce:3a:43:85:cd:
6c:1b:6c:72:8d:bd:f3:d0:e2:5f:79:de:d2:41:38:
2c:03:f2:53:29:71:ea:48:1a:15:17:88:1d:29:c7:
c0:83:90:97:19:81:7b:b2:98:bb:6f:f4:90:5e:0c:
e5:04:69:a9:2b:00:ec:fc:8b:5e:8f:ed:de:6b:34:
56:08:73:c2:26:49:51:31:84:8f:4f:c2:ba:36:ed:
72:4d:85:3f:e1:11:93:c6:a7:e5:1c:46:d7:b7:ff:
ce:0c:38:bf:14:79:9a:36:1e:10:b7:b6:00:5d:0c:
74:84:27:93:32:e3:1a:96:03:15:f5:42:4f:8e:6e:
59:b4:42:c4:50:8c:f3:4a:e5:ee:33:00:fa:2b:51:
c2:96:f2:bc:63:d0:b9:ff:01:da:fd:2a:46:24:eb:
1e:8d:92:7e:b6:f1:d6:2f:02:a8:3c:4c:aa:40:12:
a1:94:b6:03:a5:ac:fa:a5:08:f9:f9:44:07:26:21:
d7:fc:8b:64:ff:33:fa:ce:70:06:8e:ad:61:07:a3:
38:7a:14:20:52:0c:24:86:6b:99:99:b7:26:7c:15:
00:94:20:56:69:ac:79:52:35:f7:b0:73:6c:0b:7b:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:BF:A2:71:14:6B:BF:2E:AC:A1:F1:05:92:B5:F9:81:63:93:EE
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e6:f0:29:7f:43:73:83:c2:92:e6:12:8b:b1:59:52:ea:b0:
23:53:ae:95:93:e5:99:72:ee:84:fc:3c:d3:7c:43:4b:84:c2:
ba:06:6c:05:a3:82:37:5c:72:70:7e:0e:9d:96:34:df:2b:52:
f8:78:c3:db:b2:f8:37:6c:09:f0:74:bc:ab:96:e3:f3:7e:d1:
f4:04:59:29:19:e7:f6:d9:72:34:b4:b7:f4:e8:1c:a5:68:7a:
f3:00:97:e8:88:c6:a4:43:73:6b:1d:3a:4a:09:6c:6f:93:4e:
10:ad:7a:63:2a:15:14:6d:0d:fd:eb:d6:90:9d:63:e7:94:ef:
96:70:12:1f:ae:37:88:f1:d0:28:aa:cc:2b:15:a1:5c:e0:a2:
bf:a8:e2:d3:4e:d7:af:96:e4:62:16:fd:ef:40:84:78:77:70:
f6:4a:cb:92:f0:c8:b4:dc:53:ae:50:fc:a8:16:0c:85:84:08:
41:f1:c8:9d:0e:54:dc:bd:db:4b:2e:6f:35:d3:46:be:10:79:
f0:cd:f3:b6:41:d0:6d:b9:77:00:6d:7a:15:31:0d:35:c6:bf:
2d:70:67:31:8d:91:7d:45:bd:82:d7:49:a5:20:7b:4a:c2:71:
d6:68:f3:6b:c7:37:02:3d:6c:c6:38:da:af:ee:0a:ab:17:88:
fa:d0:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:09 2026 by rpki-client