Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: t4tVtsNJWsYAlRunxpS38j6p3amJX+DdiWlpTDoA2kM=
Subject key identifier: C9:CF:10:14:BA:E9:D5:9E:C0:CD:E6:C5:B5:E4:46:C0:11:22:02:AB
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 019FA82BF436A743CE05ED60BCDDDA8ADE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 10:01:20 +0000
Manifest this update: Tue 28 Jul 2026 10:01:20 +0000
Manifest next update: Wed 29 Jul 2026 10:01:20 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: U4p1XNku4ekYxheGcPcnVyF8W3JpuwFRQURv+LYHTvM=)
2: gZRVVjbr0VF9kLZepM4sAakfV64.roa (hash: OS+DVlQyVLtcNxKCYd+cy14Vh3Z+rz6mTy8GBtTKd0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:f4:36:a7:43:ce:05:ed:60:bc:dd:da:8a:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Jul 28 10:01:20 2026 GMT
Not After : Jul 29 10:01:20 2026 GMT
Subject: CN=c9cf1014bae9d59ec0cde6c5b5e446c0112202ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:b2:28:b7:07:6e:bb:bc:92:f2:e4:64:e0:
41:22:0f:30:91:8b:f6:fd:ae:45:fc:f4:ca:4c:05:
a2:78:c2:3a:85:71:84:e3:8e:0a:a8:fd:f8:11:76:
2a:5e:3a:1e:9f:fc:8f:d4:bc:57:8e:5c:fb:c5:d5:
30:f7:e5:c6:76:19:d0:cf:2d:06:2e:0f:4d:de:4a:
fe:be:91:61:9b:32:d0:9f:b9:80:95:54:fb:e2:a7:
8f:83:a6:d3:05:ca:48:74:db:16:f8:bc:08:f9:b9:
6b:c5:5b:4c:09:e9:bd:ce:4c:6d:b3:2f:62:30:86:
5a:84:eb:34:28:4c:84:5d:bf:2d:d6:5c:dd:27:56:
66:2a:58:8e:6d:34:35:59:46:eb:97:67:e5:04:6a:
e7:8b:79:3e:64:87:27:78:de:47:4d:65:83:53:19:
47:d1:83:76:4f:5a:7e:59:a0:52:e7:85:45:30:8b:
88:3e:db:08:76:53:3a:83:fa:df:fe:0a:c4:01:95:
50:5e:32:c7:5f:00:38:85:3e:48:d2:52:62:ed:2f:
fd:fb:f2:40:d5:8b:24:d1:3b:6a:90:ad:f3:50:fb:
1d:bc:d6:18:5d:e4:2f:df:ff:e5:46:4e:01:b9:86:
0b:8d:14:36:4b:95:7a:ac:b6:e3:41:21:65:93:9f:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:10:14:BA:E9:D5:9E:C0:CD:E6:C5:B5:E4:46:C0:11:22:02:AB
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:69:9a:74:99:35:aa:6d:8a:63:07:e8:23:4e:2e:5f:1e:e9:
3d:44:cd:02:02:de:fd:97:1c:f3:79:3e:1f:7f:bc:90:00:4a:
de:59:86:e5:b3:dc:93:2e:7b:a4:10:5d:20:31:8e:31:c8:f7:
75:6c:df:42:71:f2:ce:9e:c7:88:c2:2c:dc:ac:b8:64:d7:ac:
ea:1b:1e:ea:5d:1a:a7:23:f8:2c:ed:e7:9a:37:52:5e:bd:eb:
b7:5c:f7:f7:77:44:82:9e:1e:2b:11:8f:72:c8:98:1d:4a:e2:
15:d8:6d:ee:07:f6:ac:40:6b:f3:67:c0:07:85:e6:78:f9:22:
13:7b:95:0c:97:33:ec:a5:d4:70:83:09:fa:09:1a:7d:84:56:
30:8b:2b:6c:1a:c1:cf:a7:dc:9f:be:34:91:f9:38:9d:86:e7:
a3:da:1f:11:bb:ec:f5:3d:40:ef:af:4d:80:bb:b6:10:93:46:
4a:c3:49:70:08:bf:a8:76:52:a5:d2:44:7b:62:72:c3:b9:9c:
d1:f0:26:bc:e0:a0:01:b4:9a:60:75:4c:b8:0e:68:d1:f9:a5:
04:69:b0:ba:6c:f5:c5:82:ff:52:89:1a:8c:fe:84:8b:d0:41:
c3:7a:de:9c:eb:81:85:3a:de:66:16:8b:47:8f:52:5a:72:56:
4b:7c:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:30 2026 by rpki-client