Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: UdFTkdXH0E6j0SqgiUct+h5okBDtxaR4K/Qj/SRA2wU=
Subject key identifier: 4C:B5:8D:0B:D5:B5:BC:24:62:41:AD:10:E8:60:FC:B9:80:CE:9B:5C
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019D2704A8D92DF2C3674EBA3B59BB429E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 15C6
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: qHC3qSOMxwwuCEf/XphPJ7K8yi47eDGHbLfaIV4ie5s=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a8:d9:2d:f2:c3:67:4e:ba:3b:59:bb:42:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=4cb58d0bd5b5bc246241ad10e860fcb980ce9b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:6e:0b:7b:14:89:fb:c1:a5:ac:a9:8c:8b:
fb:61:32:05:a1:cf:0b:94:cc:b3:bb:7b:d4:a5:f2:
bf:e4:b0:13:de:d2:b1:42:8d:d4:ac:c7:6e:a9:95:
21:8c:ef:b1:d8:41:e6:05:71:a7:af:9c:a8:d6:d8:
50:80:f0:13:27:ad:6e:0e:2c:92:ab:66:a4:00:d5:
ee:af:ef:05:ea:f4:59:3c:03:c0:35:be:fd:12:35:
7e:50:ab:4b:2c:b3:3a:d9:0a:64:fb:5c:49:d6:0d:
9a:1c:05:48:90:c3:ae:e4:e5:92:57:01:07:26:27:
ed:d3:51:db:67:6b:13:19:23:b4:d1:c9:b4:2b:0a:
1c:24:8f:87:d2:d2:ca:5b:37:c4:b2:30:96:3d:46:
7b:e0:a5:ac:3e:42:69:4e:87:e5:ce:41:78:a1:49:
e3:3b:e5:9f:ba:95:41:b1:c2:07:ec:e0:f9:95:aa:
38:98:9d:60:52:e1:1c:34:a8:02:b5:2c:bf:43:e0:
f9:fb:17:a3:08:04:27:fe:54:88:32:39:47:f5:dc:
8a:c4:5b:d6:03:2c:27:e7:65:3a:2b:46:99:12:36:
0b:91:f1:e4:a0:7a:0b:de:df:b2:ea:17:fa:1e:c8:
c2:02:7c:2a:f9:c4:02:f5:a2:33:0b:b4:9d:0e:3d:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:8D:0B:D5:B5:BC:24:62:41:AD:10:E8:60:FC:B9:80:CE:9B:5C
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bb:ed:56:db:3b:a1:01:be:cd:51:15:2a:90:50:b0:75:92:
14:d8:c6:6a:b5:fb:86:09:f5:a2:7b:4a:f6:68:5b:f6:ad:63:
d7:66:1c:ac:b9:ef:6e:d5:71:9c:86:7b:31:aa:e8:82:a9:04:
9d:fe:3d:66:ab:10:82:1a:f3:81:84:69:bc:d7:a9:a4:d4:c7:
65:f6:f1:92:91:a8:6e:f5:ce:87:23:1e:a6:0e:2d:b9:19:db:
a5:de:a9:33:1d:44:b1:3b:8c:bc:28:cb:3b:35:30:08:bf:85:
53:96:50:24:91:7c:ab:c3:13:5d:41:a9:d4:76:18:4e:96:c9:
0e:7e:e8:df:89:16:d3:4f:2b:ab:12:be:ec:61:13:72:a7:5d:
ea:20:9f:a2:b0:b7:61:eb:cb:cf:1b:22:ee:46:7d:4b:2f:80:
40:ef:53:c1:28:e1:4c:eb:40:c4:a6:1d:af:31:5c:0a:7b:1f:
44:51:2b:a8:1b:79:c4:8e:cb:ac:4e:ab:95:be:5c:86:62:80:
f9:10:83:ad:40:4c:91:16:f9:3f:9a:a8:40:ec:f4:ca:3a:fc:
47:88:ef:f6:f9:4b:c0:52:f2:4d:3a:bc:eb:d9:3d:64:2b:4c:
a7:b2:fc:a8:96:ed:f2:2b:3d:6c:5c:24:01:f7:e0:c3:18:7a:
2c:1d:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:24 2026 by rpki-client