Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: FEYqTawAyuQsN9aMP+mfoHPiwoS3JaHlZMGxTvkWv6M=
Subject key identifier: 52:D7:F3:E7:10:3F:23:DA:E6:73:23:A1:A0:77:14:E6:FC:84:77:71
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019FA9E2E57456567113BD258AD10BA03B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:47 +0000
Manifest this update: Tue 28 Jul 2026 18:00:47 +0000
Manifest next update: Wed 29 Jul 2026 18:00:47 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: q2xCGZmagmaHU222jCuc/4/aJdv2/xyxidovJd9Js38=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e5:74:56:56:71:13:bd:25:8a:d1:0b:a0:3b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Jul 28 18:00:47 2026 GMT
Not After : Jul 29 18:00:47 2026 GMT
Subject: CN=52d7f3e7103f23dae67323a1a07714e6fc847771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:bc:76:46:a2:aa:65:85:e1:ee:7d:36:8c:
8a:75:d1:72:61:9a:05:53:95:35:27:75:9f:0e:fa:
a4:22:f5:97:42:b9:62:0f:d2:8e:96:bf:74:10:85:
82:1b:48:17:55:a7:b1:a4:5e:fe:2e:24:c5:f9:41:
10:8e:05:b3:d1:82:7e:9b:2e:76:3e:22:93:1b:aa:
f3:8d:d0:37:1d:49:db:a7:31:37:f3:26:89:aa:a6:
ed:b1:7f:9a:d3:43:a6:ad:19:f8:6f:62:ec:48:c9:
91:e2:53:f5:4f:11:4c:bf:e0:45:a0:42:b8:37:a4:
01:3e:7d:a2:d9:3a:47:38:e0:c8:a8:7d:47:81:52:
52:51:5b:b6:36:7d:94:d0:da:fc:4f:61:e8:09:cc:
1d:c1:9b:80:52:53:42:34:a5:6d:ef:de:72:07:38:
2b:3e:47:3b:aa:3c:49:c2:ab:2d:fe:3a:b9:14:8a:
c8:20:fa:9f:ce:73:77:16:24:cd:3e:18:1c:53:87:
5c:bc:64:38:3b:6e:85:ea:e3:5a:d9:16:d7:8c:77:
36:1f:5f:70:90:1b:8b:e1:b7:1a:e5:c2:57:34:0b:
be:af:e8:d2:44:5f:ec:2c:e4:d5:67:66:f6:83:dc:
c0:05:0d:cb:4b:79:29:fb:12:35:ad:10:9f:60:fb:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:F3:E7:10:3F:23:DA:E6:73:23:A1:A0:77:14:E6:FC:84:77:71
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9f:d9:7c:69:7b:77:12:d8:ff:b4:7e:2b:4f:ef:11:33:9d:
c6:38:b2:4c:85:d8:b7:dd:79:4f:13:ce:30:0e:ea:38:5e:77:
f9:9d:19:c6:25:dc:0c:bf:2d:7c:00:b7:c0:2c:90:e6:2c:10:
c0:79:3f:91:ac:1d:cf:24:38:0d:9c:b9:47:66:dd:c9:fc:b5:
e0:3f:ee:fe:0a:9d:56:c8:b8:47:00:c6:c7:2b:c2:59:3d:7d:
1b:5b:19:e7:7e:22:2b:bb:ad:2d:03:4d:f1:44:24:0f:52:bf:
3d:87:4d:2c:49:62:6d:c9:fa:74:89:10:88:1f:02:c8:2a:f7:
e2:c4:14:8a:2a:61:ce:34:d1:0f:e0:bb:f9:f0:d6:12:88:88:
62:ee:a7:8b:b9:b3:0e:bf:2b:27:69:d0:7d:2c:4b:00:a1:b9:
1f:de:60:35:7a:62:be:87:e7:8f:72:dc:ee:82:fc:90:43:1a:
87:96:96:d1:52:af:51:00:bc:22:93:19:e2:9f:5c:81:c7:82:
3d:5d:93:3e:3e:22:4c:25:02:b7:5b:26:21:12:81:c0:c2:90:
8c:c3:39:9e:62:71:14:53:d4:b7:89:4b:dd:16:ef:93:11:60:
fb:15:77:7d:fb:8e:87:4a:78:3b:db:4c:4e:7e:93:d1:63:29:
c7:9a:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:58 2026 by rpki-client