Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: M3mTCERNkclcTE0gm3BDh5tIbTnnz/CrsBaQPCZamtI=
Subject key identifier: 38:9A:30:56:8B:0B:BE:08:8D:1E:E1:31:D2:48:1B:A2:4B:66:92:7C
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01A0E7E451ADD9CA7EEA44173574FA9CAA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 17BA
Signing time: Mon 28 Sep 2026 12:01:34 +0000
Manifest this update: Mon 28 Sep 2026 12:01:34 +0000
Manifest next update: Tue 29 Sep 2026 12:01:34 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 5nWfOqpVVdN+xzl9feCo8YiZqoX/4QuF0h5S9kxE82M=)
2: nkTurxzRwWG3JBRFRuSg4cqlERA.roa (hash: IdP8M0+iJ8T5mkltOuC1Z8AWKXU9ULTOI59bHhqX46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:51:ad:d9:ca:7e:ea:44:17:35:74:fa:9c:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Sep 28 12:01:34 2026 GMT
Not After : Sep 29 12:01:34 2026 GMT
Subject: CN=389a30568b0bbe088d1ee131d2481ba24b66927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:08:c7:d3:62:46:93:fb:95:c1:3e:11:17:
9a:83:55:2d:70:65:c9:f0:10:2c:dc:07:fc:d9:61:
3c:31:2b:9d:83:68:5d:02:ef:52:1a:80:29:cd:a2:
ab:b3:2d:a3:88:9f:9a:41:ba:79:57:c0:fb:19:0e:
fe:7a:fd:f8:f7:3b:20:4d:7d:f9:26:7c:ef:7c:7c:
53:ae:0a:bb:44:b4:79:70:a5:17:f7:ee:48:16:8e:
85:0e:d8:30:d8:31:82:aa:70:65:a9:7b:22:2f:80:
25:82:7f:02:df:56:5c:13:72:e7:e5:03:f4:47:3b:
42:61:b1:7d:5f:2a:b4:2f:41:0f:73:54:37:a8:02:
2a:ee:87:c1:ef:20:71:4c:d5:a0:66:cb:71:49:fb:
8e:d6:7e:c3:4a:d5:60:d7:4f:68:ea:ca:8d:ca:88:
ad:29:a8:02:43:ae:85:38:60:7a:b1:32:a5:89:49:
72:a9:50:33:c9:8d:31:17:b3:e7:70:b6:f5:49:92:
08:75:37:e3:87:a7:cc:66:bf:8e:e9:0a:8f:76:f2:
98:bb:bd:6e:f3:ec:d6:12:b0:70:e4:c7:67:ed:4b:
8a:c6:ca:f8:88:d7:5c:23:24:04:17:3b:bd:a2:00:
2c:d0:bb:6e:58:97:f7:a1:dd:54:59:9d:2a:54:a7:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:30:56:8B:0B:BE:08:8D:1E:E1:31:D2:48:1B:A2:4B:66:92:7C
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:ba:6d:a4:64:a5:81:2e:c7:73:7e:60:79:94:f2:57:5e:
b8:5c:ea:f4:c8:d4:79:95:86:b5:d6:4b:f4:85:2d:52:8c:f1:
a6:e8:2c:e4:65:8d:ba:6f:a3:6c:9a:fc:d9:ba:54:48:89:86:
13:bf:cb:b3:61:06:92:da:4f:34:59:99:1e:90:fa:43:fc:90:
11:17:86:56:4c:b2:9e:5d:34:50:4c:54:89:36:63:b1:9f:4d:
f6:4c:96:b9:56:f3:b1:3c:0c:a9:be:4c:00:a3:df:96:f4:a4:
58:0a:ff:40:d4:a1:e7:b4:4b:d7:f9:57:c7:e5:20:e6:66:ba:
6a:cf:9b:59:cf:79:87:1f:7b:b7:07:b9:df:bd:29:82:4c:27:
75:53:6b:b2:ac:fd:5c:de:e7:12:f7:25:8a:94:c8:ce:2d:97:
d6:80:e6:3b:16:f1:e1:93:46:c3:6a:6b:d2:43:ea:e5:bf:03:
40:3c:e0:3e:0a:43:21:28:6f:c2:6a:75:58:5e:2d:0f:2e:5e:
dd:15:03:52:9c:fe:c8:44:ab:25:6a:66:b6:13:ca:fc:49:66:
44:a1:bc:5e:f8:18:2e:ad:38:d6:00:99:f3:4b:1a:eb:68:69:
08:5b:37:56:aa:d7:9d:e8:05:db:79:43:07:e8:13:5c:ab:71:
b9:16:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:08:35 2026 by rpki-client