Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: tB4wJZNMn3h+ULaGRZFCLo1C95ybizBVi7fZJY61rpE=
Subject key identifier: 58:BA:0C:C8:1B:47:97:BF:C6:86:0F:53:4E:66:0A:99:D3:AC:11:80
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 01A0C47B51AA07753CB0B5D4F13F2B7FBA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 15:00:11 +0000
Manifest this update: Mon 21 Sep 2026 15:00:11 +0000
Manifest next update: Tue 22 Sep 2026 15:00:11 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: jGZeVkQvZ+7X+Wanm65e3qXhnG8DCyzgk8Qn1zB+ob4=)
2: Qd0QU2IncFPsjVCskf3um5QV14Y.roa (hash: tYPrbjqZzNEuofSUn5IUkl+i1pTB4fAA+xmGJsosBpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:51:aa:07:75:3c:b0:b5:d4:f1:3f:2b:7f:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Sep 21 15:00:11 2026 GMT
Not After : Sep 22 15:00:11 2026 GMT
Subject: CN=58ba0cc81b4797bfc6860f534e660a99d3ac1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:2a:79:37:dd:d5:90:74:4e:ad:ed:b5:a9:
2e:dd:ea:5e:15:59:c6:7d:b7:7f:29:25:f2:0d:14:
18:a8:27:a4:f6:a8:2a:e5:22:73:a6:61:89:1b:f1:
b1:95:c1:76:1c:c3:05:a1:53:a9:c3:d4:ee:a4:46:
03:78:22:86:49:db:3d:ab:1e:4d:76:bf:33:55:f0:
4d:72:60:f8:59:70:09:b3:ce:5c:19:6c:db:1f:00:
33:04:e0:92:c3:4d:d8:85:fe:7a:2f:07:50:e1:2b:
0e:bb:e5:3b:7e:8a:8a:b9:94:23:04:d6:0d:11:3f:
da:35:01:88:60:5d:7e:2a:4c:8d:f4:c2:16:00:8a:
10:f3:1b:5d:aa:e8:d9:c8:40:e7:93:90:83:13:84:
a9:72:f7:9a:0e:cf:b1:17:8a:89:ca:f8:49:ec:28:
9e:76:ff:fe:03:5b:2b:af:26:1d:5b:65:ad:a5:ea:
66:49:7b:0a:8e:0a:dc:70:0e:0f:72:35:16:20:89:
e8:6a:c1:6d:2f:67:3c:1e:2c:9d:15:4a:6e:a0:4e:
c7:67:07:64:3f:68:93:7e:99:7a:9a:6a:55:6b:24:
8e:34:23:27:af:1d:72:1b:8b:21:c3:87:92:e8:a4:
56:d9:28:d9:7d:61:7f:c2:b3:4a:87:37:3b:66:ae:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:0C:C8:1B:47:97:BF:C6:86:0F:53:4E:66:0A:99:D3:AC:11:80
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:35:9f:be:9d:d1:e8:b0:19:88:16:f2:a7:f0:18:0b:60:b0:
01:e0:f9:4f:74:01:3c:89:6a:08:e5:fc:3e:5e:65:e2:cf:95:
da:ef:79:0e:77:fe:47:91:04:6a:1d:62:29:f9:7a:0e:22:96:
2d:cf:67:23:84:db:a3:b9:df:eb:3a:df:1d:c0:05:1c:24:8c:
9b:2b:72:d7:74:a7:d8:55:25:4a:5f:fb:53:53:af:8c:77:55:
12:27:57:5a:f8:b4:c3:75:7d:70:12:40:e0:7a:e8:28:2a:ce:
cb:01:fd:c2:25:bb:a6:73:26:8a:56:28:46:91:73:81:2e:9c:
af:b1:58:53:4a:9a:c5:20:12:18:fc:2f:04:a1:74:9e:58:16:
34:17:7a:66:cc:25:ee:fd:0b:ea:0e:e8:43:fe:3d:ac:ec:3d:
4e:d8:06:2e:7b:6e:1c:39:05:0e:7b:c0:20:88:0d:24:18:ed:
e5:26:12:ff:a8:24:f5:9b:43:51:95:f6:02:0b:a6:0f:de:cd:
3f:75:d8:d6:4a:a5:ca:14:a5:51:6b:ba:25:c1:ae:db:af:ac:
96:a1:35:53:3a:86:5d:6e:8b:e2:9d:78:62:41:89:85:e6:29:
bf:a8:86:7d:8e:2a:45:fa:44:4e:4c:b2:c5:26:87:f7:64:dd:
23:73:e0:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe1GqB3U8sLXU8T8rf7p1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjdjZDBlYzRjM2JjNTRjNTk0MzEzMDdlZWMzNmVmMDM4
Mjc3MzMwHhcNMjYwOTIxMTUwMDExWhcNMjYwOTIyMTUwMDExWjAzMTEwLwYDVQQD
Eyg1OGJhMGNjODFiNDc5N2JmYzY4NjBmNTM0ZTY2MGE5OWQzYWMxMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OYqeTfd1ZB0Tq3ttaku3epeFVnG
fbd/KSXyDRQYqCek9qgq5SJzpmGJG/GxlcF2HMMFoVOpw9TupEYDeCKGSds9qx5N
dr8zVfBNcmD4WXAJs85cGWzbHwAzBOCSw03Yhf56LwdQ4SsOu+U7foqKuZQjBNYN
ET/aNQGIYF1+KkyN9MIWAIoQ8xtdqujZyEDnk5CDE4SpcveaDs+xF4qJyvhJ7Cie
dv/+A1srryYdW2WtpepmSXsKjgrccA4PcjUWIInoasFtL2c8HiydFUpuoE7HZwdk
P2iTfpl6mmpVaySONCMnrx1yG4shw4eS6KRW2SjZfWF/wrNKhzc7Zq7YwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi6DMgbR5e/xoYPU05mCpnTrBGAMB8GA1UdIwQY
MBaAFNH3zQ7Ew7xUxZQxMH7sNu8DgnczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgt
OWNiNWQ4OGZkZDM5LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgtOWNiNWQ4OGZkZDM5
LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzWfvp3R
6LAZiBbyp/AYC2CwAeD5T3QBPIlqCOX8Pl5l4s+V2u95Dnf+R5EEah1iKfl6DiKW
Lc9nI4Tbo7nf6zrfHcAFHCSMmyty13Sn2FUlSl/7U1OvjHdVEidXWvi0w3V9cBJA
4HroKCrOywH9wiW7pnMmilYoRpFzgS6cr7FYU0qaxSASGPwvBKF0nlgWNBd6Zswl
7v0L6g7oQ/49rOw9TtgGLntuHDkFDnvAIIgNJBjt5SYS/6gk9ZtDUZX2AgumD97N
P3XY1kqlyhSlUWu6JcGu26+slqE1UzqGXW6L4p14YkGJheYpv6iGfY4qRfpETkyy
xSaH92TdI3PgSw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:15 2026 by rpki-client