Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: e9yUMRk9Das05Tj0ctlOKHVyDqdsmTkzVfRaGUwED5w=
Subject key identifier: DC:E8:95:18:EE:B9:16:44:F4:76:7A:B2:F2:48:D5:44:25:AA:04:70
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019F94DC6A6ADE376B7F6EE010D992E62D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1708
Signing time: Fri 24 Jul 2026 16:01:40 +0000
Manifest this update: Fri 24 Jul 2026 16:01:40 +0000
Manifest next update: Sat 25 Jul 2026 16:01:40 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: PDvn3H26pU8YJYakuX9jvSJcslCXcSxCS7S2UG5QS5o=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:6a:6a:de:37:6b:7f:6e:e0:10:d9:92:e6:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jul 24 16:01:40 2026 GMT
Not After : Jul 25 16:01:40 2026 GMT
Subject: CN=dce89518eeb91644f4767ab2f248d54425aa0470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:d0:93:a4:d8:8e:18:ac:d0:3a:74:9f:f6:
db:5a:bb:eb:fa:3f:5b:10:16:9a:8d:78:56:9f:08:
4c:d0:3f:2c:37:af:0f:71:2c:1e:e5:6e:b7:68:ad:
16:68:6c:a0:df:47:6e:02:f6:a9:02:8f:e1:04:07:
83:21:9f:01:cb:0f:97:98:cb:37:af:e1:59:77:7f:
98:be:00:85:a7:85:e5:57:51:e7:05:aa:11:7d:3f:
aa:95:b4:1d:37:0e:53:61:f5:fe:14:8f:6e:42:45:
5d:19:9b:fa:5a:69:73:3a:0c:de:74:67:9c:82:14:
da:7e:c1:87:1a:01:65:4e:96:f6:d8:4e:ad:77:55:
77:e4:97:0e:a7:5a:15:c7:01:b6:db:5a:79:b4:7d:
5c:51:b8:5a:bf:af:6c:cf:82:69:c7:ea:da:41:93:
53:e2:24:a5:b6:ff:cd:55:3e:8e:29:cc:98:23:a3:
03:ea:13:4b:0d:40:50:72:f8:a9:28:63:5a:cc:49:
3f:e7:ed:c4:b5:39:d8:49:7d:42:f7:17:8b:f0:92:
cb:f5:32:60:fc:75:cb:68:4f:9b:0b:8a:bd:b8:6e:
e5:49:ae:80:d2:13:42:58:bd:99:39:1f:75:62:e4:
0d:08:b2:6e:53:d0:5e:fb:fb:ae:88:46:32:4d:74:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:95:18:EE:B9:16:44:F4:76:7A:B2:F2:48:D5:44:25:AA:04:70
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:41:93:2d:6f:f8:da:be:fe:9e:4e:46:fd:b1:5a:7f:d4:
b7:d7:8f:c0:85:4c:dd:27:3a:ae:b1:e4:16:49:ab:d6:25:9d:
ca:b2:b0:c0:03:08:6c:81:55:ba:d3:3a:38:c0:1a:18:06:28:
97:7e:7e:fa:bd:9d:67:8b:38:d7:b4:b1:f1:96:2c:34:04:f5:
ca:3a:01:71:9c:6f:1c:67:2f:1d:ed:25:99:40:74:31:9e:80:
6e:e1:8e:6a:5c:10:99:ec:71:9f:98:e6:b7:5c:22:40:5b:82:
d0:2e:e2:69:7c:31:5a:57:16:f6:bf:04:18:1f:25:eb:02:41:
72:04:9d:14:17:a8:5c:0d:6b:1d:71:b6:de:00:31:78:e2:66:
f7:fd:59:0b:c6:5f:cc:af:43:b6:9f:22:54:c3:69:05:d7:6b:
e1:6f:00:bc:5b:e6:18:98:06:83:f6:02:13:dd:60:ae:81:61:
4f:e2:3f:f7:ff:89:a8:c6:43:ac:3c:65:af:df:d3:28:90:72:
50:10:89:e4:36:aa:fe:35:e6:2d:09:31:d2:fd:82:0b:a2:cf:
dd:b8:13:9c:e8:a9:8f:a8:39:79:9d:ee:cc:47:de:6b:e1:b3:
11:6d:3b:2f:4e:7d:e4:b8:48:af:56:ed:40:15:50:44:14:80:
bf:dd:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:03 2026 by rpki-client