Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: ZD9l8uyz9qli80ISQ+G0bSkhMVsgWv/YASMvLmxhYEY=
Subject key identifier: 64:FC:0C:92:4C:72:35:33:73:92:57:84:2E:56:25:FB:DE:16:AE:A1
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019CACB4600FD60139B1C6DA825E46BE206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0EE4
Signing time: Mon 02 Mar 2026 04:00:28 +0000
Manifest this update: Mon 02 Mar 2026 04:00:28 +0000
Manifest next update: Tue 03 Mar 2026 04:00:28 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: 6wPbnm889P8MfVWlL8ZS+Wsh82xDUFUPwmk1BaCUMKA=)
2: N-WMFc6DX37aaCb2Ht_ANOztnKQ.roa (hash: 9X1sqEiJTAyhIuXZcN2JWxXDBCpL7N9kje25ka+fIzA=)
3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:60:0f:d6:01:39:b1:c6:da:82:5e:46:be:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Mar 2 04:00:28 2026 GMT
Not After : Mar 3 04:00:28 2026 GMT
Subject: CN=64fc0c924c723533739257842e5625fbde16aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:83:e2:45:ec:77:f3:d6:1c:e7:69:0d:71:
9c:ec:87:e2:46:7e:07:26:70:fe:b8:0e:a8:60:14:
f9:6a:f2:e1:cc:15:ce:9b:fe:d4:8f:cf:7a:c6:4c:
83:ea:dd:70:6a:12:78:e6:53:2d:86:3a:2c:01:9b:
1d:8a:d5:7d:6a:d2:c6:fc:41:e9:5d:7c:5f:e1:38:
d3:f0:06:b7:97:1a:c3:ff:4e:56:2b:9d:6d:ce:43:
44:38:1a:02:76:7d:58:b7:08:ab:27:95:b5:93:be:
a8:d6:49:da:cf:a8:8b:b7:11:4d:20:e1:fb:e1:20:
ab:d7:97:de:63:cd:00:49:70:71:bb:72:00:f0:af:
e5:f6:46:f3:ea:0b:53:02:c5:1c:8a:46:8a:4c:95:
17:28:3a:b6:a4:b7:f5:72:87:5c:39:46:be:8f:2f:
15:40:55:0b:66:df:f1:e5:61:30:3b:79:af:44:0c:
9a:8a:ef:3f:7d:aa:c0:cd:81:e3:02:27:e2:a2:c1:
02:65:84:6b:92:9b:3c:88:bb:8c:95:15:1b:74:9d:
48:c9:e7:11:56:b2:58:d6:22:29:22:f9:c4:2c:7a:
c4:be:b2:41:e6:45:23:9d:94:e8:62:ca:38:54:d3:
e5:5d:5e:95:1d:07:89:ee:df:ba:93:97:13:76:39:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:0C:92:4C:72:35:33:73:92:57:84:2E:56:25:FB:DE:16:AE:A1
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:53:fa:07:17:72:61:bf:83:c0:24:f2:12:39:c9:52:da:ee:
75:36:0a:3d:08:4b:44:81:36:83:4f:35:8c:7f:75:9e:33:cf:
0f:d9:0e:76:2d:45:0b:3a:75:df:41:c8:fd:21:b8:f2:10:fb:
68:e6:78:11:c2:04:f4:cc:f7:2c:90:6d:73:26:fb:f2:e6:a8:
11:12:fb:e3:85:c9:e9:a3:14:01:fd:e4:51:4c:81:8b:44:83:
9f:69:e8:64:a1:ca:1b:d1:c6:c9:7d:a6:66:a7:28:22:b4:fe:
bd:37:86:0a:6b:07:df:3d:01:3e:5f:ea:0b:30:74:2c:7a:ac:
97:46:b7:ef:96:69:50:46:32:32:8b:b4:3e:30:cd:ac:2d:2b:
d9:25:e0:61:07:c1:9e:c6:1c:46:6a:af:95:03:9e:bc:f1:a6:
b4:70:e9:d0:82:5c:90:60:79:77:bd:b2:24:16:96:42:43:b4:
a2:cc:83:39:69:18:f9:1a:43:df:11:f8:07:14:ee:e3:f1:7f:
fb:4f:4a:4f:e6:32:86:08:b0:7f:5e:b6:5e:74:44:c7:19:4a:
c2:25:eb:40:eb:68:bb:aa:19:f9:dd:c3:68:41:b0:93:ae:e9:
ed:26:f3:9c:c7:38:3f:63:a8:f4:16:eb:87:d4:07:54:fd:45:
af:f2:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:45 2026 by rpki-client