Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: JyQ9Xf4I0DXUvD4sOD6wdrhdOym0JvQtPfuosCozBUY=
Subject key identifier: 15:C0:A8:62:93:6D:B0:BA:F5:42:F0:14:00:A8:85:52:CF:BE:DD:C6
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 01A0CA46DA0AB83C6197B243566AFE1AE8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 18:00:35 +0000
Manifest this update: Tue 22 Sep 2026 18:00:35 +0000
Manifest next update: Wed 23 Sep 2026 18:00:35 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: 9HmeBHJ3hiYRwNWJSehCtXMrbfGtYAM2zKJTdp9RmOU=)
2: Qd0QU2IncFPsjVCskf3um5QV14Y.roa (hash: tYPrbjqZzNEuofSUn5IUkl+i1pTB4fAA+xmGJsosBpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:da:0a:b8:3c:61:97:b2:43:56:6a:fe:1a:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Sep 22 18:00:35 2026 GMT
Not After : Sep 23 18:00:35 2026 GMT
Subject: CN=15c0a862936db0baf542f01400a88552cfbeddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:bd:ce:f6:c8:e3:fb:8b:a4:e5:3c:82:e0:
e0:3c:5f:80:c2:d5:57:56:69:d7:1e:0c:10:27:b2:
6f:89:ac:37:01:a8:59:97:b5:6b:e4:f3:3c:c3:88:
cf:4d:7c:80:e1:40:44:4a:6b:8a:1f:7b:09:96:8d:
c1:46:90:e6:3c:83:79:c4:30:cd:38:54:ee:d9:12:
3d:fb:96:20:9e:86:8e:ea:e9:0a:a8:20:eb:62:41:
c9:5f:90:5c:7f:54:5c:db:10:14:6b:27:df:94:c5:
9e:3c:ef:5d:3f:a5:ef:ed:7c:82:07:f0:02:ea:47:
0a:1c:b0:74:94:3d:67:db:cd:36:87:a0:c0:9b:58:
bc:df:15:de:16:0d:cb:c6:b5:b3:46:35:c6:e1:cf:
bc:c6:19:34:df:dd:67:9d:32:da:3a:72:75:1d:4b:
88:c8:11:27:c2:30:e0:1d:fb:97:55:f2:15:ad:e0:
4a:c0:63:7d:19:ec:19:99:be:12:47:eb:fd:84:cc:
25:c8:9d:c7:11:63:81:c2:24:53:3b:d1:3a:90:53:
69:ba:e9:42:cf:c6:55:2f:47:b8:c7:68:82:8a:89:
47:80:86:c2:66:01:15:15:1a:60:89:6f:5c:ca:89:
aa:1d:00:57:e5:b9:e4:be:ab:0d:14:e7:fb:56:13:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:A8:62:93:6D:B0:BA:F5:42:F0:14:00:A8:85:52:CF:BE:DD:C6
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:83:7e:c8:86:49:9c:b0:ba:46:71:06:d9:b1:fb:17:c9:
c5:e0:8d:95:6d:33:9e:01:0b:34:a7:12:60:10:47:dd:0e:bf:
be:d8:6f:bc:72:f2:e7:ef:96:0e:7a:d8:6e:d1:03:cd:1b:7d:
00:bf:3e:96:77:5c:fa:91:c3:e4:ef:18:22:37:3e:17:8f:e7:
41:f4:a8:ee:ce:8a:5e:87:12:ff:fc:b2:57:4b:63:06:26:7f:
29:43:32:77:fa:4d:d2:25:a9:09:a8:48:80:7d:91:2e:89:48:
19:35:49:56:7b:e6:a0:27:6a:76:9e:60:6e:c0:9c:25:6e:d6:
22:f2:79:de:45:4e:ea:79:c8:62:12:56:98:80:2c:1c:2d:cf:
5d:68:16:5a:95:38:d2:3c:fa:53:22:49:1a:09:d0:64:b1:df:
c7:40:f3:cc:e6:bc:2e:e4:36:d8:70:b9:09:74:43:b2:66:17:
24:f9:46:39:53:1a:55:82:28:2c:db:12:a9:fe:68:b5:49:0e:
98:80:8d:bd:75:7e:4b:56:6d:83:d5:c7:28:d7:83:f3:72:2f:
76:6c:2f:60:26:fb:20:48:c7:30:57:d3:32:a3:17:5e:94:ae:
d4:2b:6a:22:1d:a4:cd:c9:fa:8e:22:f0:f9:4a:21:d8:3e:de:
98:3d:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:16 2026 by rpki-client