Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: MOsRdkCPELiiTJ13q9uAKikC12xlCZO75+jB3opHfu4=
Subject key identifier: 5B:0C:A9:43:3B:07:13:3A:28:C3:7E:05:45:2A:9C:E8:BF:09:21:41
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019CAB343F40F3653A4DB16CF3A7CA9C79D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: Xls6k1hSI3yVTPxl+HWZKzdZwydPi0BEXahi+UYdNaM=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3f:40:f3:65:3a:4d:b1:6c:f3:a7:ca:9c:79:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=5b0ca9433b07133a28c37e05452a9ce8bf092141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:eb:e2:df:46:66:67:57:e5:00:58:8a:9c:
c5:05:e6:e3:a0:57:9c:a0:09:79:60:b4:a9:cd:de:
58:96:60:9a:10:88:de:5b:de:a6:95:f1:ff:7a:33:
f4:63:96:b3:37:8b:30:72:eb:c1:15:89:01:ac:9d:
ab:11:ad:b5:f7:4e:fa:02:8a:bf:49:df:95:23:22:
58:36:07:00:78:c7:0f:1c:a7:69:0a:77:a0:98:eb:
d6:47:cf:2a:87:92:5c:22:d8:45:3c:fb:df:c3:e5:
09:be:9c:89:5d:18:6f:79:ca:be:44:7e:a4:eb:0e:
e7:6d:86:06:6d:f9:a9:0c:51:07:55:f0:d1:3f:d6:
d4:ad:d1:b7:a8:fe:d7:b9:56:0d:53:65:a3:ee:b2:
a2:be:28:2e:c7:3a:07:f6:61:7c:96:e4:27:ab:c9:
c7:73:48:b6:29:e6:9a:81:a9:be:85:8b:38:86:c7:
32:f0:43:89:22:5c:34:cd:fc:5c:61:18:08:cb:43:
e3:59:11:3a:2d:e6:41:e9:f5:21:28:2e:3f:55:d2:
13:2f:24:66:a2:cc:f3:46:1a:23:22:1e:0a:c2:a5:
69:ee:fe:02:23:76:e8:90:9e:88:40:c7:0e:9c:61:
20:ff:43:49:9f:8d:c1:01:99:06:a7:c1:61:5c:77:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:A9:43:3B:07:13:3A:28:C3:7E:05:45:2A:9C:E8:BF:09:21:41
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:d6:ea:76:c3:16:6f:78:21:e1:b4:19:df:9b:a9:45:c2:
24:3f:ee:64:f7:d0:eb:89:7c:fd:c9:1d:5e:5e:cd:95:60:5a:
c3:c6:58:d9:c1:05:13:a9:52:0f:d8:84:c3:15:ff:07:b5:36:
92:0a:39:c0:c4:65:f2:e6:9e:14:48:69:91:0b:cb:bc:27:d4:
1e:93:a7:00:10:5a:ce:f1:88:7a:bb:33:be:c0:99:57:8c:3c:
9f:16:39:c9:f3:94:89:27:3c:43:14:60:d2:a4:46:74:25:bd:
df:5e:d7:bd:05:88:94:2e:4b:7b:49:97:f4:72:37:a7:fa:f1:
a5:f0:1c:74:3b:de:b1:ff:0e:71:25:b0:66:a1:03:14:f6:53:
43:07:72:86:c8:bf:bc:30:4f:41:41:40:87:ea:58:75:b5:82:
21:d3:55:68:90:07:39:d9:6f:8f:e7:fd:7b:fe:3d:a4:8e:54:
e7:0d:e1:5d:59:2d:c7:5f:cd:cf:aa:99:ae:bd:f5:01:32:42:
46:fc:24:d4:d1:97:eb:fb:5f:a3:5f:c8:7e:22:b9:f6:54:e5:
aa:a4:40:2c:a1:f6:4e:33:39:d5:64:14:5f:ea:45:0a:f1:60:
8c:15:71:46:4c:c4:3d:ba:a9:e5:46:05:62:16:1f:42:4e:e7:
54:89:d9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:32 2026 by rpki-client