Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier: AjKdoPtuuEyZ/1o8VrrsswJbkoSgbIqGQS2Hpw5Mmtk=
Subject key identifier: F2:A1:B7:57:FF:65:5F:31:BD:F6:EF:AA:CC:59:7A:79:D2:E2:F4:EC
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 019CADFE420750EE02D3BCCD30FA13917719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 10:00:47 +0000
Manifest this update: Mon 02 Mar 2026 10:00:47 +0000
Manifest next update: Tue 03 Mar 2026 10:00:47 +0000
Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: u0ZbW9O1+k6I60radGS0H1O7heRoUouyitMEOnmii+Y=)
2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:42:07:50:ee:02:d3:bc:cd:30:fa:13:91:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Mar 2 10:00:47 2026 GMT
Not After : Mar 3 10:00:47 2026 GMT
Subject: CN=f2a1b757ff655f31bdf6efaacc597a79d2e2f4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:ad:f1:ff:c0:08:f5:07:99:d3:83:51:45:
77:60:54:b4:fa:91:89:57:67:e3:3b:9c:d4:a3:b9:
39:5a:cd:5a:63:b6:4c:c0:1b:85:7e:ac:a6:e7:d6:
83:26:5f:0a:d8:e5:a0:05:b9:0c:8e:66:0b:69:e9:
1d:75:03:04:cd:99:35:6b:c7:05:10:8b:8d:b4:86:
71:9d:c9:5b:61:32:2d:b6:28:50:5b:38:4f:45:f7:
7d:13:dd:fc:07:3d:11:f8:c2:d3:e1:59:43:94:0b:
97:28:34:c6:5b:ed:b3:52:ed:bb:67:84:e2:ef:4f:
a2:ea:e3:70:af:12:6d:22:79:32:4e:ce:c7:ca:3d:
37:0f:dc:47:ed:6e:71:5a:ef:85:8c:bb:c3:b3:f3:
9a:f6:21:1b:99:02:4a:15:7e:dc:dc:76:78:72:98:
d2:8e:bc:b0:f0:f1:f2:49:30:76:3a:a9:c7:58:ee:
39:c5:8b:38:d7:9e:88:fd:62:f0:0b:88:8e:8f:3f:
d4:2e:f0:82:43:39:26:e5:5f:9b:c9:ab:9f:ae:df:
19:af:8b:c4:70:71:13:d3:c3:8d:35:ea:c6:28:c6:
39:6b:8e:f2:1f:b2:7d:bc:fb:a3:64:93:25:9b:ae:
b6:3a:04:9d:95:2a:67:e7:a7:a3:55:28:18:c2:e3:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:B7:57:FF:65:5F:31:BD:F6:EF:AA:CC:59:7A:79:D2:E2:F4:EC
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:09:fc:c2:ef:3c:ab:b2:c0:59:ea:c3:06:56:5b:63:7e:
f2:34:92:f3:e4:fd:5f:f5:2b:6f:75:89:bd:80:94:e2:12:5c:
8c:12:78:64:b2:b9:e3:e6:93:be:c8:6f:b8:41:12:7c:f5:4a:
19:40:a0:f9:5e:c1:04:9c:81:c4:e0:7b:4c:94:50:c9:ed:19:
41:43:38:b1:94:e1:2b:c7:39:53:44:10:da:3f:50:92:f9:4e:
06:c9:e8:2a:0b:16:6d:b6:6c:50:d2:e6:2a:30:78:78:af:4d:
9b:28:44:34:b8:6f:b2:3f:42:90:15:c1:d0:7e:8e:5f:22:8f:
b6:f0:ce:9a:8b:97:36:94:87:01:cc:11:cd:f6:82:70:1a:e5:
9e:eb:b0:c4:3d:fc:b5:68:38:13:e2:e5:02:6b:21:e9:e9:ba:
d7:d7:8e:b7:bb:45:5c:fe:74:f4:f6:12:50:d7:8c:0a:cb:1f:
c7:3f:23:16:16:df:9c:ef:30:ad:8d:d7:13:35:68:91:8b:d5:
1d:5b:4f:64:fb:76:85:91:cd:29:27:74:98:9e:f7:5c:8d:c9:
a0:b1:d2:a0:1a:33:42:fd:ee:ec:9d:cc:b4:07:4b:5f:50:7a:
f1:42:e0:57:29:83:66:23:d6:3e:bd:a5:2b:4f:67:55:d7:c3:
ed:66:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:46 2026 by rpki-client