Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: qlcorZ15pHGHYDExuntUOwKp9N3SYd6xvnppOXPlNJI=
Subject key identifier: 1D:2F:A1:A4:9B:57:DE:17:A4:1F:84:11:1D:FC:54:D8:2C:0F:06:92
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019D9AE38BE78CFD4B42A08131DBB84BC649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1602
Signing time: Fri 17 Apr 2026 10:01:36 +0000
Manifest this update: Fri 17 Apr 2026 10:01:36 +0000
Manifest next update: Sat 18 Apr 2026 10:01:36 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: bJiE+Z67SSRoLtKFYduBdvbMMc95KqEPcIj36u5nwXA=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8b:e7:8c:fd:4b:42:a0:81:31:db:b8:4b:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Apr 17 10:01:36 2026 GMT
Not After : Apr 18 10:01:36 2026 GMT
Subject: CN=1d2fa1a49b57de17a41f84111dfc54d82c0f0692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:aa:3c:4c:f6:09:e8:23:be:50:95:ea:46:
1c:c4:b5:ee:4e:2a:1f:0c:a3:00:6f:69:a8:3f:99:
20:58:e2:3f:c5:51:f2:fa:4b:8d:dc:5e:9d:a9:ab:
39:d6:b7:70:2a:51:6d:a0:19:06:1b:d6:d7:7f:07:
25:43:ce:e8:bd:34:f9:2c:e9:06:dc:78:e8:7d:15:
ab:a1:90:06:2f:ed:f4:8d:e6:db:14:f5:bc:67:04:
f1:63:1d:50:56:4e:58:97:b6:13:a5:4a:b2:42:49:
d9:6d:b6:d4:c7:2d:b7:66:e7:92:84:11:6a:e9:a3:
6c:5f:24:69:52:e4:c2:9b:32:9c:25:83:23:9d:ff:
18:87:bb:44:aa:30:8c:dc:e1:ee:e8:44:04:be:e3:
20:d0:7c:e9:b1:a4:d7:0f:04:44:0f:a6:2c:d8:6b:
18:fa:1d:1e:59:73:7d:17:52:dd:85:00:9b:32:4e:
6a:1f:d6:3d:73:9e:cb:51:95:3e:0f:1b:a3:0e:59:
cf:49:21:ab:82:1a:ed:67:45:4c:2d:09:57:36:8e:
ce:3f:7c:92:af:69:13:ee:4a:c3:0d:af:ae:c3:30:
06:f6:ad:f1:4f:20:3d:cb:7c:18:d0:53:d1:61:0d:
da:3d:f9:ec:e6:b1:37:e2:56:ea:f4:9c:73:0c:3c:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:A1:A4:9B:57:DE:17:A4:1F:84:11:1D:FC:54:D8:2C:0F:06:92
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:62:09:98:23:52:8a:7c:02:59:36:ac:2e:51:c8:e5:a8:f0:
8c:73:19:f2:d3:02:90:66:1c:5e:95:29:66:8f:96:a3:1c:20:
e1:6c:e4:b7:2f:51:a1:71:1b:1b:5c:96:59:1b:0c:c5:68:06:
24:ce:25:83:da:84:95:90:af:b7:14:0c:40:c2:5b:0d:57:0d:
e1:37:c0:a6:e9:ef:23:7d:46:1b:80:6e:6e:de:6d:b1:40:a7:
86:0f:04:48:50:5b:d4:7d:d1:8d:bd:26:50:a9:93:ca:c7:c9:
df:19:6a:6b:10:ce:fa:21:40:89:22:40:8c:a6:5a:db:c1:82:
b1:25:39:f7:79:37:7f:e5:69:65:a4:8a:b4:33:2f:0f:f5:e0:
c2:1a:76:83:69:af:c7:85:78:52:06:26:ab:b3:72:be:b6:a8:
59:1a:43:07:cf:94:e8:02:d9:d5:81:29:5d:ca:25:44:9d:20:
da:1a:fc:72:db:09:f8:dc:96:f1:69:ef:d8:6d:fd:5a:90:f4:
05:c3:7d:01:a2:37:8c:30:ae:89:0d:a9:1e:a6:7f:8f:77:f8:
91:b7:b1:b3:89:cd:f3:1a:d8:8f:3e:16:73:31:b9:49:13:c7:
cb:c4:7e:28:1f:e8:28:6f:59:fe:64:31:b8:2e:41:40:13:4d:
ec:f1:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:58 2026 by rpki-client