Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: GY3dtG6G4HVjWIeFZcFgU++vMd+Kr4Plo12uNbckZWs=
Subject key identifier: 5F:32:01:49:66:82:3D:1D:57:BD:55:00:41:5D:32:E4:5D:46:99:16
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 019E1E3530237440231DE50ED5AB4F1DA612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 22:01:02 +0000
Manifest this update: Tue 12 May 2026 22:01:02 +0000
Manifest next update: Wed 13 May 2026 22:01:02 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: 923w4PqFmm4WxXxnATNx7pQyMaJPZNJsHETgR6aUHHY=)
2: gZRVVjbr0VF9kLZepM4sAakfV64.roa (hash: OS+DVlQyVLtcNxKCYd+cy14Vh3Z+rz6mTy8GBtTKd0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:30:23:74:40:23:1d:e5:0e:d5:ab:4f:1d:a6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: May 12 22:01:02 2026 GMT
Not After : May 13 22:01:02 2026 GMT
Subject: CN=5f32014966823d1d57bd5500415d32e45d469916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:32:7b:ec:f1:4a:08:c1:0d:30:a5:0a:1c:
2e:ab:e0:72:75:a9:08:b9:1a:11:68:7e:8a:89:36:
67:de:d3:82:20:16:3f:c2:aa:a6:d6:ef:2a:4a:15:
01:fc:29:2c:e6:95:c0:22:8d:67:80:3b:63:34:d9:
db:9f:66:a7:13:9e:85:72:21:bd:2b:51:93:83:fd:
c7:6d:69:f7:79:d3:02:63:5d:5d:05:e1:bd:76:4a:
90:b9:36:8c:e5:ea:13:0c:70:cd:4f:28:23:00:0f:
6f:20:0d:d7:98:99:33:1a:d0:72:be:ae:c9:6c:55:
e2:0e:3d:73:c9:0b:e8:36:a3:26:50:3b:09:01:d6:
ac:78:d8:2b:4f:e8:13:c2:d7:dc:b8:3a:d2:a4:27:
78:27:d1:76:65:b3:38:7a:fc:8d:c4:6e:f9:21:1f:
f7:19:c6:9a:76:17:0f:70:43:a2:13:5e:59:b9:d5:
3d:ca:df:55:ee:db:92:57:fe:a5:64:11:0c:25:34:
f9:df:35:12:5a:89:12:66:f7:3b:c4:ae:9e:62:89:
f5:ae:a9:fb:b2:6d:88:99:4a:0e:53:f9:1a:0d:ce:
a4:aa:5c:ec:c8:21:50:c4:38:90:66:4a:fb:f5:5c:
4f:fc:2f:18:31:5b:d1:08:04:a3:47:95:df:bd:c4:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:01:49:66:82:3D:1D:57:BD:55:00:41:5D:32:E4:5D:46:99:16
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4a:40:5c:71:c3:f5:25:36:7b:a9:01:d1:d7:24:c6:d9:a3:
c6:ae:4e:ac:cb:69:46:19:a0:fd:7e:aa:7c:24:7f:35:91:d2:
04:17:20:87:bc:01:6d:18:c5:9f:fa:a1:46:b1:3f:b1:ab:5f:
6c:c7:89:ae:c6:8b:66:3b:48:67:e4:3c:68:d9:44:2a:a4:b1:
63:92:72:e5:e1:7e:b1:17:b5:60:29:d0:65:0d:05:b3:86:51:
8f:62:cc:d0:e9:25:f8:6d:d9:06:d1:80:cd:3e:0a:be:3a:00:
79:b5:ea:eb:23:b4:ca:e7:12:41:78:ba:84:ee:15:f2:d5:0f:
fa:ae:c7:bb:8a:db:33:07:d6:7a:06:40:39:32:76:22:0c:2b:
0e:fc:0b:b8:68:52:4b:6c:bc:6a:f0:f8:a0:40:4d:7a:fb:27:
2b:8c:05:2f:60:d2:5f:6a:30:81:cf:76:f3:d6:44:07:fe:06:
80:99:69:c6:a6:5b:f5:ab:a3:fe:a6:85:a7:c3:86:e0:eb:dd:
7e:c3:33:30:e3:bd:80:4d:8a:f7:4e:fe:b4:81:1f:b2:46:6c:
cf:85:e5:92:d1:eb:95:19:9b:b8:6e:18:16:ad:8f:43:8b:e1:
c1:90:79:e2:73:1a:31:2b:91:9d:b1:b6:31:65:4e:0b:27:f3:
ab:b4:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:06 2026 by rpki-client