Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: YTtbXOah31Bn4UNN2spguEiPeyHRnP2AwNnUr9CpS/Y=
Subject key identifier: EB:5D:58:81:EB:BB:87:02:43:7B:F1:46:D5:A3:1C:F8:5E:3C:18:E4
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 019D2704400917543995B1598BA2439231F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: 6ExnqUEMJyPAnV+CyiMThQXkHJUJSFr6JOwCvI9ShbI=)
2: gZRVVjbr0VF9kLZepM4sAakfV64.roa (hash: OS+DVlQyVLtcNxKCYd+cy14Vh3Z+rz6mTy8GBtTKd0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:40:09:17:54:39:95:b1:59:8b:a2:43:92:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=eb5d5881ebbb8702437bf146d5a31cf85e3c18e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:aa:c2:eb:b3:46:ed:9f:61:49:01:1e:3f:
46:2a:50:69:b5:88:dc:5b:09:91:44:09:b8:e8:75:
32:9b:a5:40:74:50:7a:75:f1:2f:cd:f8:49:cd:a0:
79:30:1c:d5:c1:71:13:c4:e4:e9:a6:59:a3:3a:55:
dc:82:34:34:8f:88:45:df:0a:cf:c9:07:78:f8:f7:
8a:4c:17:5e:c1:39:24:26:a7:98:e2:90:cb:4e:e1:
c1:8d:41:b9:50:6c:d0:14:09:89:25:e1:4a:f1:45:
4e:26:99:96:27:0f:c1:ff:14:6f:13:e5:14:87:07:
99:5c:75:ec:a9:ae:74:6d:29:0d:80:2a:90:e7:7a:
3e:ce:54:75:7c:45:6b:7a:93:c7:da:2a:01:0e:1c:
32:69:ec:5e:8d:2c:72:c7:f5:c1:19:6f:b9:59:34:
26:84:de:0d:cb:11:c4:b7:8c:8c:2c:c4:15:5a:38:
ac:94:14:44:da:de:ba:29:5c:30:1b:a3:f2:02:71:
d2:11:d3:0b:d5:52:31:3c:55:11:bd:30:3b:e1:84:
8c:c4:56:52:0b:8a:41:af:74:fa:89:91:f8:39:7b:
c9:7f:d1:90:16:9c:16:54:42:59:f3:4b:57:dc:77:
9c:68:df:2f:9c:c6:32:47:ff:4b:df:6d:47:21:4a:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:58:81:EB:BB:87:02:43:7B:F1:46:D5:A3:1C:F8:5E:3C:18:E4
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:5f:1e:cb:d6:32:8f:80:85:e2:df:e0:e0:77:da:c5:e5:
0c:4b:80:c5:f0:e2:62:cf:1a:46:c3:d6:20:48:a7:cd:1c:80:
8c:9a:e0:af:81:0d:e2:d7:d6:54:8f:4e:0e:3a:64:30:19:0b:
b9:45:8f:3b:a9:a9:2e:a5:09:c5:ff:06:87:d5:8c:92:02:8d:
71:8f:36:e9:59:f8:df:5d:42:18:72:da:b6:b7:0e:f6:b2:79:
25:c3:0f:89:f0:ca:07:07:2e:14:e6:0f:00:ec:84:a7:12:5b:
6a:59:07:b2:82:2e:24:34:8a:29:19:b2:44:47:04:cf:c4:89:
ee:27:6d:44:15:e8:a1:fb:bd:0b:31:8d:88:1c:92:6e:9f:b1:
d3:24:e3:26:4d:d1:0a:81:3b:fa:01:5c:0e:83:8b:c1:28:f8:
db:aa:32:1a:76:7b:ac:24:a3:2a:57:3b:74:20:ab:99:5c:a3:
21:14:5e:e2:b4:ac:3f:4c:8b:06:35:e7:ee:f1:81:63:5d:44:
0d:f6:e6:47:61:0e:21:1e:37:30:ac:aa:c9:00:93:65:73:48:
79:d3:89:19:c9:ba:65:24:1b:1b:f6:ee:86:08:15:a5:25:64:
6e:ae:f1:84:ae:fe:92:8b:cd:99:93:95:b2:20:1c:fc:85:f8:
b8:f6:8a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBEAJF1Q5lbFZi6JDkjH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjdjZDBlYzRjM2JjNTRjNTk0MzEzMDdlZWMzNmVmMDM4
Mjc3MzMwHhcNMjYwMzI1MjIwMTIzWhcNMjYwMzI2MjIwMTIzWjAzMTEwLwYDVQQD
EyhlYjVkNTg4MWViYmI4NzAyNDM3YmYxNDZkNWEzMWNmODVlM2MxOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwaqwuuzRu2fYUkBHj9GKlBptYjc
WwmRRAm46HUym6VAdFB6dfEvzfhJzaB5MBzVwXETxOTpplmjOlXcgjQ0j4hF3wrP
yQd4+PeKTBdewTkkJqeY4pDLTuHBjUG5UGzQFAmJJeFK8UVOJpmWJw/B/xRvE+UU
hweZXHXsqa50bSkNgCqQ53o+zlR1fEVrepPH2ioBDhwyaexejSxyx/XBGW+5WTQm
hN4NyxHEt4yMLMQVWjislBRE2t66KVwwG6PyAnHSEdML1VIxPFURvTA74YSMxFZS
C4pBr3T6iZH4OXvJf9GQFpwWVEJZ80tX3HecaN8vnMYyR/9L321HIUqV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtdWIHru4cCQ3vxRtWjHPhePBjkMB8GA1UdIwQY
MBaAFNH3zQ7Ew7xUxZQxMH7sNu8DgnczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgt
OWNiNWQ4OGZkZDM5LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgtOWNiNWQ4OGZkZDM5
LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKRfHsvW
Mo+AheLf4OB32sXlDEuAxfDiYs8aRsPWIEinzRyAjJrgr4EN4tfWVI9ODjpkMBkL
uUWPO6mpLqUJxf8Gh9WMkgKNcY826Vn4311CGHLatrcO9rJ5JcMPifDKBwcuFOYP
AOyEpxJbalkHsoIuJDSKKRmyREcEz8SJ7idtRBXoofu9CzGNiBySbp+x0yTjJk3R
CoE7+gFcDoOLwSj426oyGnZ7rCSjKlc7dCCrmVyjIRRe4rSsP0yLBjXn7vGBY11E
DfbmR2EOIR43MKyqyQCTZXNIedOJGcm6ZSQbG/buhggVpSVkbq7xhK7+kovNmZOV
siAc/IX4uPaKRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:58 2026 by rpki-client