Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: SDL51Y7YKNCy//Qn7RS/9HGMT2JLP8XZtuD7ayBhfAs=
Subject key identifier: B8:54:DC:EE:FD:A9:81:6A:07:FB:A7:EE:8F:D5:C8:E6:D6:07:6D:29
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01A0E5F58718638966CE5CC2EFE168AA5316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 17B9
Signing time: Mon 28 Sep 2026 03:01:08 +0000
Manifest this update: Mon 28 Sep 2026 03:01:08 +0000
Manifest next update: Tue 29 Sep 2026 03:01:08 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: P0nqKBiv/2XJswPC3TJ7FQ7LlihQRuZY5FPQdMOvgKI=)
2: nkTurxzRwWG3JBRFRuSg4cqlERA.roa (hash: IdP8M0+iJ8T5mkltOuC1Z8AWKXU9ULTOI59bHhqX46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:87:18:63:89:66:ce:5c:c2:ef:e1:68:aa:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Sep 28 03:01:08 2026 GMT
Not After : Sep 29 03:01:08 2026 GMT
Subject: CN=b854dceefda9816a07fba7ee8fd5c8e6d6076d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:dc:76:3f:4e:85:1b:f0:63:31:e6:a1:31:
5b:d5:a8:b6:59:2a:44:96:a6:3b:06:13:01:5c:43:
5d:f9:3d:33:d6:ea:ee:74:c6:f6:11:2a:29:d7:ea:
70:a5:78:e5:cc:2c:1c:1e:c3:2b:c2:c6:17:a5:4d:
3a:ad:5c:fc:36:81:69:cc:5c:46:42:ce:2f:ac:06:
37:7d:3d:b7:7b:a0:1e:e6:5a:5f:e8:db:49:f8:aa:
07:e9:81:f6:b0:47:a0:68:43:23:bb:f8:ea:5e:ff:
b4:8c:46:7d:e8:16:eb:23:2a:1d:0e:09:e5:cb:2f:
34:42:5b:d5:1a:2c:33:ea:81:ef:91:66:06:46:af:
6a:0d:d3:80:fd:cd:09:4c:2d:c6:3f:b8:5e:1a:e5:
97:eb:bb:34:a7:3f:54:5f:e3:cd:8b:49:26:10:e0:
38:0c:5c:cb:4f:a7:15:0b:e7:de:4d:43:85:94:3b:
40:a6:24:a5:36:80:9a:6a:bf:9f:c3:85:a1:1a:93:
5a:0e:92:98:ca:d4:0e:0d:04:ee:0f:0e:66:d7:1b:
b7:d6:6f:6a:39:f3:5c:80:52:bd:2e:d2:5c:13:2c:
29:89:0b:6f:43:cc:be:44:dd:1d:dc:4f:59:e5:f8:
38:07:b2:64:0d:77:0e:37:ff:f0:7d:e4:68:d1:8b:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:DC:EE:FD:A9:81:6A:07:FB:A7:EE:8F:D5:C8:E6:D6:07:6D:29
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2f:09:86:a0:fd:af:f2:09:56:0f:f2:87:a8:af:be:16:c9:
98:a0:75:af:f3:a9:69:fd:78:0d:cd:a0:f7:09:3f:b5:78:7e:
39:4a:c0:2f:33:4e:e9:f6:61:9d:51:bc:bf:93:32:95:cd:a8:
c6:4c:ce:44:c7:0f:19:36:5a:43:aa:08:4f:5b:85:ab:b3:d0:
21:ab:f5:3b:f8:24:39:7f:5e:c5:56:6a:51:10:fd:75:d7:ab:
fc:36:9c:90:d8:7a:2d:d6:22:fc:44:64:53:b4:f2:b7:60:50:
f5:58:25:a4:87:3e:df:57:4a:69:bf:86:bb:24:98:77:3a:64:
ef:47:18:a5:9b:ea:5d:5c:77:57:75:1c:e1:1b:d4:58:71:08:
d3:40:71:22:09:10:86:b3:5d:eb:3a:3b:6c:a1:9e:2c:3a:ce:
60:9e:4a:3b:cb:fe:ad:8b:9d:ac:96:52:ac:8c:c2:76:2a:c3:
06:f3:cc:87:77:dd:d1:6e:f5:67:87:5c:9b:c9:da:d1:2d:a1:
34:da:a7:41:f1:8a:bc:6d:50:a1:ca:87:b7:82:b8:e2:96:55:
47:b6:b8:bb:22:31:5f:29:cf:d9:36:41:46:d5:b7:c5:bc:6a:
7f:be:2a:fa:4d:62:53:74:ee:71:98:49:09:0d:e9:d8:ff:6e:
a2:33:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:44:42 2026 by rpki-client