Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: xNEk8jPhue+bpfRtzEfJ7mYkVn7dAVe+F1kQvsa3POc=
Subject key identifier: DD:B4:C3:9A:41:66:86:5E:50:E3:8F:AE:23:38:6E:AC:09:6E:68:87
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019DA4540A3CACF64BED80DD8CE8483A2CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 06:01:04 +0000
Manifest this update: Sun 19 Apr 2026 06:01:04 +0000
Manifest next update: Mon 20 Apr 2026 06:01:04 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: Krih/9D5FSjPtgxUvzhUp5i4pGXx/s/8eYSwMlKs198=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0a:3c:ac:f6:4b:ed:80:dd:8c:e8:48:3a:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Apr 19 06:01:04 2026 GMT
Not After : Apr 20 06:01:04 2026 GMT
Subject: CN=ddb4c39a4166865e50e38fae23386eac096e6887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:dd:88:1d:24:a7:f7:36:e7:4e:87:3b:fa:
d7:b9:db:aa:6c:2d:7b:f3:8e:e8:5c:9b:78:b6:9f:
a6:60:8a:9d:1d:53:b2:72:e1:b1:9a:f0:74:b5:ba:
1b:fd:ca:c2:64:53:8f:79:33:d4:14:92:d4:76:42:
22:8c:30:45:9e:b8:04:a2:10:ab:64:66:1d:b4:ab:
11:5b:48:bb:f4:30:43:57:ac:77:fa:e2:0b:6e:46:
b2:96:56:c2:f2:f2:7d:cc:7a:3b:cc:7e:7d:e8:e7:
f9:f8:ac:39:2b:52:a8:aa:60:11:db:b9:31:79:04:
dd:fe:31:6f:04:76:c1:65:ec:98:8a:57:34:ee:d8:
0d:74:c5:34:bd:b8:6b:f3:87:84:76:58:a0:f6:a8:
0a:b4:2b:36:ea:a5:e6:69:55:69:5f:7e:25:fd:6d:
86:43:28:8e:2e:d3:8b:dd:c3:f6:c8:4a:41:72:84:
5f:12:f1:3b:b5:03:04:be:9d:65:71:d2:59:f5:0f:
01:77:02:4b:bf:5d:d0:2e:5b:7b:83:3a:a3:2c:b7:
f6:07:3d:3e:eb:0b:1e:08:71:5f:dd:88:c9:7c:f5:
63:47:46:3b:c4:d4:da:17:d3:34:0d:7c:cb:ba:c5:
b1:9e:41:09:52:68:c1:04:df:3f:ef:48:81:d7:b2:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:C3:9A:41:66:86:5E:50:E3:8F:AE:23:38:6E:AC:09:6E:68:87
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c5:57:05:79:d8:18:11:2a:b4:73:db:d5:08:d6:c9:90:cc:
56:be:6a:de:c8:c6:70:0b:c7:0f:41:54:8c:e9:0a:05:1a:3a:
90:da:f8:e6:0f:33:d0:54:fa:e9:18:f7:87:31:6f:e2:2e:32:
32:23:0f:95:52:f6:1f:2d:04:fb:be:ca:2e:03:06:f6:44:7d:
37:ed:e0:d6:fe:2d:db:dc:9f:68:c5:ed:84:ac:1c:1f:0f:2c:
39:da:9e:c0:8d:e6:4c:81:61:eb:0e:43:9a:ab:a5:61:0e:33:
18:80:db:e5:79:ed:23:81:d8:78:73:a7:0d:11:ff:87:f1:82:
18:ed:60:d4:57:82:41:80:b3:66:74:e1:9d:07:8a:e0:7f:67:
08:48:41:16:e6:66:66:40:e1:44:1b:2f:a1:34:d8:72:57:3c:
de:a5:c8:1b:07:e6:a4:8a:49:f5:05:5b:50:7a:2a:80:c3:6f:
66:ef:d3:84:82:3c:93:fe:b9:2d:d0:e3:b5:8e:2c:59:60:0e:
58:0a:a7:93:92:90:f9:a4:c2:38:e6:81:9e:6b:58:5d:b5:6f:
71:b2:ae:a3:79:09:e6:63:b6:a6:e0:45:d6:2c:ce:9b:57:86:
27:ce:e5:22:d0:e9:ff:aa:65:60:a5:d0:e5:cf:6f:94:60:0b:
17:2d:fd:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVAo8rPZL7YDdjOhIOizbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi
MzE3MzgwHhcNMjYwNDE5MDYwMTA0WhcNMjYwNDIwMDYwMTA0WjAzMTEwLwYDVQQD
EyhkZGI0YzM5YTQxNjY4NjVlNTBlMzhmYWUyMzM4NmVhYzA5NmU2ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WHdiB0kp/c2506HO/rXuduqbC17
847oXJt4tp+mYIqdHVOycuGxmvB0tbob/crCZFOPeTPUFJLUdkIijDBFnrgEohCr
ZGYdtKsRW0i79DBDV6x3+uILbkayllbC8vJ9zHo7zH596Of5+Kw5K1KoqmAR27kx
eQTd/jFvBHbBZeyYilc07tgNdMU0vbhr84eEdlig9qgKtCs26qXmaVVpX34l/W2G
QyiOLtOL3cP2yEpBcoRfEvE7tQMEvp1lcdJZ9Q8BdwJLv13QLlt7gzqjLLf2Bz0+
6wseCHFf3YjJfPVjR0Y7xNTaF9M0DXzLusWxnkEJUmjBBN8/70iB17JFNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN20w5pBZoZeUOOPriM4bqwJbmiHMB8GA1UdIwQY
MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt
MmQ4NDdhM2Y3ZDJmLzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmItMmQ4NDdhM2Y3ZDJm
LzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcVXBXnY
GBEqtHPb1QjWyZDMVr5q3sjGcAvHD0FUjOkKBRo6kNr45g8z0FT66Rj3hzFv4i4y
MiMPlVL2Hy0E+77KLgMG9kR9N+3g1v4t29yfaMXthKwcHw8sOdqewI3mTIFh6w5D
mqulYQ4zGIDb5XntI4HYeHOnDRH/h/GCGO1g1FeCQYCzZnThnQeK4H9nCEhBFuZm
ZkDhRBsvoTTYclc83qXIGwfmpIpJ9QVbUHoqgMNvZu/ThII8k/65LdDjtY4sWWAO
WAqnk5KQ+aTCOOaBnmtYXbVvcbKuo3kJ5mO2puBF1izOm1eGJ87lItDp/6plYKXQ
5c9vlGALFy39Yw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:00 2026 by rpki-client