Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: IDfvlG7GWNleDuosuHai55YzLtl976yHBQQZssCwGbw=
Subject key identifier: B4:07:37:51:ED:90:38:1B:E5:E8:94:65:EE:BE:1B:51:DA:C2:96:30
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019D26CD52CA5D76EA63565CDCC8CABEB550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: Vl1lZRgr4zJepM7bGjIYOtV0OwZ2U4R6+uClfcTKNyI=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:52:ca:5d:76:ea:63:56:5c:dc:c8:ca:be:b5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=b4073751ed90381be5e89465eebe1b51dac29630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:33:43:5b:0c:61:e0:43:3e:a0:36:d4:a3:
9f:d6:95:11:2b:dc:05:c1:2c:0b:e7:30:dc:71:6b:
a3:80:3a:4b:24:af:6b:cb:67:1f:94:ae:ad:5d:18:
ea:8c:84:51:85:96:0b:08:ca:70:7c:ee:19:2c:fc:
f5:7f:92:3e:aa:f4:3f:8d:af:3c:98:81:b2:65:7c:
fb:4d:a2:5e:25:ff:f6:e8:b4:15:09:dc:73:d8:22:
c1:7a:0b:a1:96:04:0f:5c:f2:22:48:47:30:ca:a1:
e1:d2:9a:69:58:ba:a6:d3:3f:35:9a:cd:fa:7e:a2:
90:aa:5d:8d:3a:31:7f:34:af:50:38:d5:b6:1c:67:
21:28:9b:22:30:05:fc:4c:0f:d6:46:54:c1:2d:d7:
b1:25:8b:ca:c9:ee:9c:c8:f9:a7:c9:39:16:06:d6:
0c:c9:23:25:51:2f:8c:f1:6e:d3:a3:8b:c5:24:3d:
37:66:98:c5:e1:b8:df:0f:c2:30:6b:6b:26:1c:e3:
84:f6:dc:d3:fb:fd:bb:20:fa:9b:dd:26:59:93:f1:
dd:34:d5:4f:f5:1f:12:6f:b3:e1:90:96:28:76:e6:
e3:6b:00:33:15:12:ef:f4:e6:be:7c:60:e3:25:04:
38:0d:43:eb:6f:d6:08:35:db:ce:86:57:6c:33:a3:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:37:51:ED:90:38:1B:E5:E8:94:65:EE:BE:1B:51:DA:C2:96:30
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bf:45:ef:8f:fc:10:cf:3b:fe:32:a5:f3:18:41:dd:cd:00:
d1:25:ab:ef:b4:f7:ba:9f:71:14:04:77:d3:8e:2a:61:10:57:
31:85:31:88:d4:8b:7a:0b:01:43:4b:f7:ce:37:c2:8a:73:20:
43:a7:d2:4e:85:05:03:09:9e:a1:8e:8c:3b:58:f3:ea:fc:24:
f5:6d:f4:08:da:dc:8f:22:96:45:bb:f9:55:7e:04:83:97:1e:
cd:c1:7a:79:e8:6e:30:98:cc:ba:3e:26:8b:c8:84:7e:f5:a7:
1b:7f:6a:7a:3c:d6:a1:81:5c:0c:89:ca:22:cd:e6:19:1f:f8:
52:da:67:22:d9:96:62:3d:99:a0:cc:98:df:3d:56:8c:9a:a7:
25:1c:21:bd:99:74:9c:9b:e7:90:14:f9:38:37:c0:04:d4:76:
1e:f4:94:38:78:52:53:69:1a:17:d0:30:b7:3a:13:8c:0b:51:
96:07:9c:9b:ea:ff:d8:d6:22:6f:fb:a4:d3:be:45:0c:99:af:
ea:75:69:5d:e7:2a:8d:6a:5a:eb:95:b8:d8:53:2c:62:9f:37:
90:fe:19:42:b6:fc:42:90:60:08:92:d9:6e:7c:31:54:56:6c:
d2:22:31:af:21:d8:21:41:ea:0b:25:43:cc:ea:98:c2:9c:99:
c1:90:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:13 2026 by rpki-client