Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: dwQH/E07xjNiOlpTMxEyq2M+dU/Lu55BtmJd+LCo3Bg=
Subject key identifier: 38:21:77:33:97:B0:A0:27:5B:67:18:8D:43:50:82:46:20:AA:7E:9C
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019E1C46D16CDF847BD5394868E8F7F8C076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1645
Signing time: Tue 12 May 2026 13:01:03 +0000
Manifest this update: Tue 12 May 2026 13:01:03 +0000
Manifest next update: Wed 13 May 2026 13:01:03 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: g8KbBy+FpQbL360FRW2Kqp95wqMknIHvFP+n5hKwUMs=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:d1:6c:df:84:7b:d5:39:48:68:e8:f7:f8:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: May 12 13:01:03 2026 GMT
Not After : May 13 13:01:03 2026 GMT
Subject: CN=3821773397b0a0275b67188d4350824620aa7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:57:61:38:30:67:7c:c8:b2:7f:38:df:2a:
87:74:2c:2d:fb:78:60:64:64:fc:27:17:8d:17:60:
c8:99:2f:f8:19:bf:ee:4a:3a:41:4f:80:99:c3:53:
4a:cd:69:28:6d:b0:a4:26:ec:ef:c7:d9:af:73:63:
02:74:0e:cd:db:3c:7b:f4:6d:39:41:06:d0:04:98:
9d:fa:91:21:a0:8b:16:c9:07:12:c7:86:d9:60:88:
78:24:87:8e:09:d5:e6:f0:25:74:1a:c9:37:d6:33:
89:37:8c:a0:d5:2c:e4:03:13:11:88:57:68:af:70:
a2:53:d7:2c:39:b8:e9:50:25:53:33:3c:e8:94:84:
9c:f0:59:8f:dc:82:fb:e8:a1:a4:ba:28:59:8f:32:
6d:de:00:db:1d:c6:e1:80:dc:4a:41:f1:76:48:a4:
04:80:57:27:d5:0e:b1:2d:fb:c0:cb:3a:91:4d:27:
d2:01:7b:8e:a8:fa:d8:e6:91:ed:bb:12:36:3d:17:
23:03:3f:be:1c:b1:4d:32:d1:0c:d6:bc:66:62:8b:
8e:ad:5b:79:5e:73:1a:38:9e:c0:18:02:aa:7a:4a:
f5:c9:62:d6:3f:b2:13:17:4f:1d:e7:94:6e:e6:bb:
30:94:2a:22:31:9a:6b:33:3f:dd:18:e9:00:65:46:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:21:77:33:97:B0:A0:27:5B:67:18:8D:43:50:82:46:20:AA:7E:9C
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:8f:cf:6f:97:e7:bf:09:a2:1a:23:67:4d:df:aa:e5:43:
15:26:44:35:7c:f2:7f:d4:48:70:98:2f:55:13:b1:b9:d9:b3:
89:d5:c6:98:f9:8b:0b:01:5b:9a:07:23:cd:05:d2:1e:d5:cf:
f9:00:be:9c:73:fd:de:a9:72:03:b7:a7:bf:46:02:a5:5b:f3:
57:d9:41:08:aa:3a:f7:25:87:bb:ba:bc:9b:bf:61:57:02:a5:
2d:9e:42:b3:ba:f0:ca:89:66:e3:83:c3:75:79:a1:ba:d4:64:
c4:e6:63:d5:8e:4d:28:e5:32:87:67:fd:5a:ae:12:f8:b8:ae:
10:1f:bf:63:9f:b1:a5:a9:60:3e:95:8a:90:e7:79:ef:38:3a:
b7:4f:31:47:23:a0:5d:28:09:b5:dc:40:12:63:7c:10:7f:45:
18:f8:77:99:d5:9d:03:7b:31:2a:a3:da:d8:63:97:10:f9:96:
25:84:4e:73:8f:40:d3:c7:76:36:fc:58:b5:be:bb:06:d8:88:
95:9d:ed:25:4e:e5:fa:38:fd:25:2d:33:dc:7d:f9:8c:be:ab:
90:e3:89:a1:36:ef:91:0a:37:35:51:2c:ea:f2:55:b4:0c:87:
ef:de:15:49:9d:35:05:48:7b:3a:ef:da:91:d8:f8:e0:07:20:
86:af:17:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRtFs34R71TlIaOj3+MB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjYwNTEyMTMwMTAzWhcNMjYwNTEzMTMwMTAzWjAzMTEwLwYDVQQD
EygzODIxNzczMzk3YjBhMDI3NWI2NzE4OGQ0MzUwODI0NjIwYWE3ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i9XYTgwZ3zIsn843yqHdCwt+3hg
ZGT8JxeNF2DImS/4Gb/uSjpBT4CZw1NKzWkobbCkJuzvx9mvc2MCdA7N2zx79G05
QQbQBJid+pEhoIsWyQcSx4bZYIh4JIeOCdXm8CV0Gsk31jOJN4yg1SzkAxMRiFdo
r3CiU9csObjpUCVTMzzolISc8FmP3IL76KGkuihZjzJt3gDbHcbhgNxKQfF2SKQE
gFcn1Q6xLfvAyzqRTSfSAXuOqPrY5pHtuxI2PRcjAz++HLFNMtEM1rxmYouOrVt5
XnMaOJ7AGAKqekr1yWLWP7ITF08d55Ru5rswlCoiMZprMz/dGOkAZUb7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDghdzOXsKAnW2cYjUNQgkYgqn6cMB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ2Pz2+X
578JohojZ03fquVDFSZENXzyf9RIcJgvVROxudmzidXGmPmLCwFbmgcjzQXSHtXP
+QC+nHP93qlyA7env0YCpVvzV9lBCKo69yWHu7q8m79hVwKlLZ5Cs7rwyolm44PD
dXmhutRkxOZj1Y5NKOUyh2f9Wq4S+LiuEB+/Y5+xpalgPpWKkOd57zg6t08xRyOg
XSgJtdxAEmN8EH9FGPh3mdWdA3sxKqPa2GOXEPmWJYROc49A08d2NvxYtb67BtiI
lZ3tJU7l+jj9JS0z3H35jL6rkOOJoTbvkQo3NVEs6vJVtAyH794VSZ01BUh7Ou/a
kdj44Acghq8Xqg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:30:30 2026 by rpki-client