Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: V9dFhgjs1Eiyq4VF9crg3/BCekMr2oXJbut2JkxVTwU=
Subject key identifier: CF:2E:A4:61:2D:AF:90:1B:F6:CB:03:F4:52:DC:B0:04:2D:09:DD:09
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 01A0C5C56C2B9C3F6CBC9EA3DE4C3ED9731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 21:00:44 +0000
Manifest this update: Mon 21 Sep 2026 21:00:44 +0000
Manifest next update: Tue 22 Sep 2026 21:00:44 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: FM6bNy6ONpYWGUUYqvTL6+mTxt1RLHOurbdLUAdvYxI=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:6c:2b:9c:3f:6c:bc:9e:a3:de:4c:3e:d9:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Sep 21 21:00:44 2026 GMT
Not After : Sep 22 21:00:44 2026 GMT
Subject: CN=cf2ea4612daf901bf6cb03f452dcb0042d09dd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:70:66:27:14:16:5d:07:ca:86:ff:6e:1c:
0f:b4:97:43:f5:36:ca:75:c4:92:46:fe:c5:8b:5f:
37:28:5f:58:c0:4f:cc:84:0b:90:fa:4a:a3:a3:23:
2b:c0:83:d9:8c:ea:77:fe:b3:7f:fb:af:50:7b:2e:
3e:9a:72:bd:cc:07:58:d2:ac:21:c9:ac:72:33:50:
c0:da:b1:a9:7d:ba:03:aa:05:ef:a7:21:fc:a9:8b:
79:ee:52:ef:8d:67:4c:2d:0d:8d:29:45:32:58:f8:
e4:61:76:c4:86:56:5e:74:04:10:76:b0:f9:04:57:
6e:c1:83:ff:33:90:d4:cc:db:d3:19:fc:f2:22:08:
d5:63:7d:23:95:5b:09:c9:90:40:eb:02:26:d7:24:
1b:ac:6d:9b:5d:86:88:d6:ad:59:e4:20:7a:4b:0a:
12:69:0a:58:7d:9e:92:c8:91:4e:c4:cb:39:e4:ab:
c3:d0:78:69:91:d9:2e:32:4a:24:a3:63:b6:76:08:
b0:22:1a:8d:96:44:ab:e9:4b:2c:12:50:3e:21:8c:
21:f8:0d:b5:b8:c7:02:7a:b2:94:50:74:e1:63:e1:
ae:92:8b:eb:fc:32:c1:1f:c3:11:27:34:d2:94:b8:
04:4f:f3:b0:4b:1d:8d:12:a7:67:b3:11:8b:64:f2:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:A4:61:2D:AF:90:1B:F6:CB:03:F4:52:DC:B0:04:2D:09:DD:09
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:df:14:6b:eb:37:f3:6c:7d:06:00:5d:e7:20:87:45:ba:
f8:83:64:f6:7a:eb:e9:41:1f:13:2b:e2:b0:a0:1f:a3:c3:26:
58:68:bb:22:01:9d:00:b4:44:7d:31:70:08:ec:29:81:2b:02:
fa:0e:c1:7e:87:4b:c2:20:f7:58:66:bd:80:37:39:8b:4f:32:
8a:74:a5:cf:da:63:05:82:a6:60:14:c6:f0:f0:7a:f7:25:48:
f5:01:4c:4f:2c:cd:ac:14:af:4b:a5:fa:36:86:90:2c:2a:4f:
88:cc:9e:e1:b8:22:95:24:6b:08:8d:c7:f6:af:68:39:25:c1:
a9:bc:42:d0:e5:8f:5a:fe:01:90:1a:76:cf:17:07:b1:87:ab:
c5:58:36:0f:f3:24:1e:ba:33:d9:55:78:79:a7:8b:ec:4c:25:
ba:db:fd:6a:29:c9:74:e2:15:26:1f:4e:0a:c7:5b:38:5c:7d:
7d:ec:f2:b3:a8:bd:3f:f3:48:2d:df:b9:a8:3a:a4:f0:7b:1b:
91:ed:e6:a0:97:f3:8e:a3:62:fb:6b:c3:ca:d6:49:ea:e7:28:
21:5a:97:fb:d2:59:a0:46:46:19:fb:96:ca:f2:fd:49:58:c7:
97:54:8d:9f:dc:54:55:a2:16:da:cc:3b:23:c3:ba:e5:27:40:
c5:f1:e0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:57:19 2026 by rpki-client