Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: V02ByQSS/pp3FP8LDDxJqLxEZ9iLnQCIRyNQkx/AcJc=
Subject key identifier: 86:4E:A7:1D:A4:E0:42:6F:B4:14:73:2D:B5:74:EC:35:2F:C7:D5:81
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 019D992B5BD4AE214E6B131A98452E05B34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 12FC
Signing time: Fri 17 Apr 2026 02:00:48 +0000
Manifest this update: Fri 17 Apr 2026 02:00:48 +0000
Manifest next update: Sat 18 Apr 2026 02:00:48 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: HUElnaT2MFjBuNLr+aJs5r2kBDAR0aqz9EXaGgnngp8=)
2: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (hash: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5b:d4:ae:21:4e:6b:13:1a:98:45:2e:05:b3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Apr 17 02:00:48 2026 GMT
Not After : Apr 18 02:00:48 2026 GMT
Subject: CN=864ea71da4e0426fb414732db574ec352fc7d581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:9b:8b:61:ca:1b:72:33:b3:1f:a0:69:1f:
15:d9:75:15:28:19:ca:36:89:51:03:12:25:e1:5e:
66:0d:a4:39:5e:1b:1c:93:b6:a8:e8:24:f8:08:bf:
78:f7:a9:be:ad:f0:f3:33:68:ce:fc:48:f8:c0:9e:
57:bc:50:77:82:15:89:2c:95:d5:1a:81:42:59:a7:
d0:41:8f:17:72:34:64:b1:59:c6:51:00:74:96:c2:
c0:ce:92:16:e8:42:b7:df:b4:33:18:df:dc:69:19:
b2:5f:4c:2a:46:28:0a:39:30:6b:31:11:f4:eb:4e:
27:3e:21:9a:d9:23:45:fb:20:a2:e8:92:f4:e3:54:
ed:f7:57:fc:f4:3c:b7:0d:82:12:d7:03:91:fd:06:
e7:00:5c:22:bd:bb:5c:75:9a:7f:07:d4:33:cd:8a:
76:e8:9d:70:40:88:90:ef:02:74:4e:87:e6:8c:74:
60:f2:0d:59:f3:58:b2:82:c6:9f:47:91:bd:19:93:
65:2a:24:5a:98:14:1b:bb:70:4b:f3:c7:f8:37:f4:
da:c2:ca:64:db:7f:27:77:58:d8:50:9b:89:e7:11:
70:d7:1b:e6:e5:06:28:ae:12:c9:91:db:6a:3d:3b:
7b:f1:02:35:cd:bb:6b:31:66:bf:96:25:f7:13:41:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:A7:1D:A4:E0:42:6F:B4:14:73:2D:B5:74:EC:35:2F:C7:D5:81
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f2:2a:9c:6c:7c:99:21:ef:a1:3d:ff:b4:06:e6:9e:80:fe:
0d:c8:d7:d4:8a:90:0c:e8:7b:2a:b0:38:c4:af:ff:af:c7:d5:
27:1f:e7:14:2b:91:3f:ce:61:ec:2c:90:53:39:dd:51:59:ba:
67:39:49:30:3d:fe:2c:00:c2:13:2f:b1:7c:d8:04:f6:a5:7c:
5b:f9:a5:7d:6f:2c:82:61:72:f2:9e:d3:c3:c6:9b:0e:c9:25:
67:81:d6:cb:38:7d:b5:c1:ef:99:0b:7f:3e:d2:b6:df:b8:d3:
52:ff:c8:af:69:6a:dd:17:66:06:d1:ee:fa:53:57:00:d3:77:
73:4b:87:c0:85:1b:e6:4e:07:39:8d:56:f0:63:d5:f5:09:9a:
28:d2:58:da:84:5b:c6:9f:c6:cc:46:ab:64:a9:91:a7:3c:88:
69:5b:8e:59:a5:7b:c5:c8:3e:36:5b:e2:39:b0:aa:aa:19:4e:
fe:f4:5d:86:2e:4b:e3:40:f8:6f:cf:6d:0d:87:98:4b:19:b4:
8c:e6:d8:d3:7e:65:a6:9b:fa:de:9d:0c:46:cf:38:19:47:c4:
aa:6a:fd:a0:01:9c:1b:e2:ab:e4:0c:1a:45:bf:98:dd:77:35:
87:b9:ca:72:9e:b2:ed:13:c9:26:cd:91:c5:ff:07:15:c9:d9:
b7:6a:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:56 2026 by rpki-client