Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: NfHvBM78qMIL0l9JNVETw+YswdHxvaqEnXhydb9Ah74=
Subject key identifier: D2:A3:85:ED:72:FE:53:59:CA:C2:98:E6:9D:C8:D0:E9:24:C9:7E:0D
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019CAD59C4FF3CC6650E47828727FC929C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1587
Signing time: Mon 02 Mar 2026 07:01:07 +0000
Manifest this update: Mon 02 Mar 2026 07:01:07 +0000
Manifest next update: Tue 03 Mar 2026 07:01:07 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 0TUy7xpWZ9K796zUF7drQkbRMlMLhBNX/toW74DA1kk=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c4:ff:3c:c6:65:0e:47:82:87:27:fc:92:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Mar 2 07:01:07 2026 GMT
Not After : Mar 3 07:01:07 2026 GMT
Subject: CN=d2a385ed72fe5359cac298e69dc8d0e924c97e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:91:07:1a:1b:61:a5:dc:bb:4b:4e:00:b3:
88:4b:9f:29:f8:fc:a7:e9:85:68:78:c9:a5:b7:8b:
29:bc:08:32:ec:22:51:da:77:b0:86:9e:f6:1c:4e:
fd:fc:b6:c4:b9:69:03:72:92:e3:a6:45:c4:f3:01:
d9:37:5a:4c:14:dc:23:8c:b1:da:ac:4a:25:19:de:
85:d0:fc:b7:a0:01:84:b6:01:b5:08:0d:ef:d5:2d:
69:52:3c:0a:e3:02:00:fd:bd:41:f6:32:42:69:d9:
ad:35:d7:99:38:da:d1:63:41:7e:76:87:88:c2:34:
e3:8d:11:63:b5:73:be:dd:cc:b1:86:2d:3f:e4:ca:
74:8a:84:c1:b1:7d:d0:ba:e9:7d:b7:ce:f5:2d:a1:
35:e0:62:99:56:77:90:84:a6:10:00:18:4d:68:e4:
0e:96:40:ec:6f:19:07:5f:2e:2f:9f:9e:36:5e:8e:
9b:af:54:2b:26:e8:10:68:6d:92:57:d0:59:76:52:
d3:65:58:ac:d3:82:a5:34:5d:30:db:eb:fc:cb:af:
81:76:db:64:3e:6c:7c:3c:7e:e1:31:e8:8e:fc:21:
b2:c3:f8:26:a1:34:dc:9c:92:66:58:58:0f:5b:bf:
0c:3f:79:7a:cc:fc:95:d3:4c:30:83:3f:4e:f5:9d:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:85:ED:72:FE:53:59:CA:C2:98:E6:9D:C8:D0:E9:24:C9:7E:0D
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:61:a4:40:fe:b5:d3:f9:45:6a:d4:c4:82:12:43:a2:e0:
70:69:2a:12:a3:0a:52:2c:fc:75:e9:07:5d:70:c2:b8:e6:b1:
dc:51:3b:02:63:6a:0f:8b:60:88:d0:b1:30:67:e5:ad:55:4a:
1a:f4:0e:89:e2:bd:17:f3:0d:4a:cd:f4:c2:46:62:ca:1f:f6:
28:47:17:db:cb:40:6b:b9:59:28:58:d5:6e:43:f2:05:9a:82:
2d:b8:f6:e8:5f:c4:c5:c4:72:f7:7c:90:02:e5:30:93:5a:2c:
5a:a2:27:0b:4b:13:0c:d1:ae:09:f3:1e:dc:3b:38:af:4f:40:
4f:44:4a:3c:6b:95:f0:1b:55:4e:d6:0f:49:71:bb:61:d2:b5:
47:b1:68:64:99:68:90:4f:1e:0c:63:3e:c5:ff:ac:68:be:e4:
2f:6a:80:c9:3f:ce:5b:0a:8a:0c:40:3f:77:55:b0:c8:86:bc:
57:b8:b1:d2:e1:3b:79:57:73:30:3a:36:7f:d1:3f:5e:19:ac:
84:7c:2b:ec:35:b2:20:c0:8f:44:7b:a1:e5:83:e7:2e:c9:cd:
fe:f0:1e:14:a0:58:fe:96:49:65:47:34:8e:cc:9d:6b:01:9e:
81:ee:e9:fe:fc:b0:ee:9f:e7:6b:bb:6e:2b:9b:13:89:73:7a:
27:de:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:51 2026 by rpki-client