Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: pZCDMWPOYlDVKhYvPKu3QR7WbCK544/jbRrUd1G3d9k=
Subject key identifier: A9:6B:CD:9A:B6:65:CB:88:D6:BF:53:9F:98:A6:F6:A6:6C:50:4B:FE
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019FADF74C98A502158CDDC7A505AF92950A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1715
Signing time: Wed 29 Jul 2026 13:01:33 +0000
Manifest this update: Wed 29 Jul 2026 13:01:33 +0000
Manifest next update: Thu 30 Jul 2026 13:01:33 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 0ChZpl62Jt1VGIGVgXy3KbbG/GNRjaM8U/q0lFIQXOI=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:4c:98:a5:02:15:8c:dd:c7:a5:05:af:92:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jul 29 13:01:33 2026 GMT
Not After : Jul 30 13:01:33 2026 GMT
Subject: CN=a96bcd9ab665cb88d6bf539f98a6f6a66c504bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d5:90:33:cc:be:1c:d1:22:a6:46:93:8a:8d:
f0:15:79:82:2d:40:38:c9:5f:79:ec:d6:ef:b3:89:
29:53:cc:a6:e5:50:31:28:ce:65:da:79:82:d9:78:
00:4d:d3:f7:95:fc:83:e1:f6:f2:c6:6d:c2:f6:33:
5a:b4:9f:f0:83:12:34:89:38:45:34:02:7a:68:91:
33:1e:17:14:43:8a:7c:a6:61:89:62:b9:d1:4b:b5:
2b:3a:81:c9:42:51:ec:26:dc:e5:a9:6d:89:89:60:
76:02:e8:bd:8b:48:0f:85:d8:1a:24:c0:e1:a3:86:
27:dc:1a:bd:65:b9:35:50:f8:0f:e8:c3:07:a7:5f:
d8:e0:29:52:30:11:12:17:cf:fd:60:f0:70:cf:0a:
e2:53:68:61:4a:23:2a:79:ec:7e:8e:a9:fc:ff:9a:
61:87:fd:b1:a1:5d:fa:0e:5e:73:cf:2b:17:dd:3e:
86:9b:83:d9:41:cb:cd:c2:16:cd:50:67:ba:ab:63:
99:16:df:b3:93:a6:f7:8f:29:f7:b5:f6:5e:d1:5d:
8a:87:62:ca:25:d6:dc:d2:5c:b9:a9:19:b2:66:61:
96:87:e8:da:e8:a4:e2:35:df:07:83:7b:f5:78:ac:
dc:75:12:87:bc:e1:b0:ca:b6:ca:fb:d9:23:81:98:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:CD:9A:B6:65:CB:88:D6:BF:53:9F:98:A6:F6:A6:6C:50:4B:FE
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9a:1e:42:78:24:c3:70:a8:b3:50:87:ff:b9:b4:3c:82:15:
3c:2a:70:cd:1a:e4:13:59:97:b6:2c:b5:35:45:e1:ac:ca:75:
c4:c4:83:1a:52:c4:11:b9:2f:27:5e:d1:13:89:39:8a:54:cf:
d2:6b:6c:aa:29:e7:87:da:52:db:0f:78:fd:7a:56:d4:b0:8b:
8e:e8:fe:bc:11:1f:da:16:30:b5:bb:23:31:7c:60:c6:d1:df:
c7:ba:9b:d2:f4:cf:3f:c2:98:a7:03:c3:0b:f0:99:60:06:5a:
e6:cc:18:89:ee:39:5e:7e:98:c6:2c:61:64:bb:b2:65:45:55:
59:40:78:6c:6a:75:8d:2a:b5:99:c9:71:48:87:23:f5:fc:a3:
48:6a:95:b4:7d:f0:13:fc:79:89:64:2a:69:a8:d1:93:c2:7e:
30:d2:a7:a8:83:77:8b:e4:54:bd:88:4d:66:7f:30:2f:7b:d7:
b7:75:ad:4f:5f:6c:78:3c:f8:48:24:65:32:e8:13:41:a9:3f:
ad:25:45:15:3a:4f:09:bb:14:2d:07:71:34:2f:c6:94:c3:f6:
73:57:59:58:c9:a6:17:2f:85:88:c8:54:99:91:b7:64:4b:e7:
af:2c:87:66:3b:b8:4d:57:6d:f4:99:9d:5e:3f:90:a5:e6:f8:
88:d7:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:54 2026 by rpki-client