Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: 4wYgSjpgTqQuEaqTCG/vxUwMBlzBcIVN38+7JB1cqM4=
Subject key identifier: 8B:E1:18:8D:CC:CF:98:17:03:6D:4C:95:4D:77:6A:7E:82:36:6F:F0
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019E1D9005705FA93E4E3D5ABB118C0846D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0FA3
Signing time: Tue 12 May 2026 19:00:38 +0000
Manifest this update: Tue 12 May 2026 19:00:38 +0000
Manifest next update: Wed 13 May 2026 19:00:38 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: qgCsxsceXmZ9SurcSthpZgqFxhIMA/xvvg9+g7YKYyY=)
2: N-WMFc6DX37aaCb2Ht_ANOztnKQ.roa (hash: 9X1sqEiJTAyhIuXZcN2JWxXDBCpL7N9kje25ka+fIzA=)
3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:05:70:5f:a9:3e:4e:3d:5a:bb:11:8c:08:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: May 12 19:00:38 2026 GMT
Not After : May 13 19:00:38 2026 GMT
Subject: CN=8be1188dcccf9817036d4c954d776a7e82366ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:ec:9f:ae:99:4b:09:5b:3f:34:f0:a1:b9:
7d:b3:fe:93:55:b6:c0:64:81:e3:73:33:6e:6e:6e:
bf:e0:df:04:63:70:04:03:90:20:8e:c1:03:5d:f9:
85:07:24:5c:48:6a:c2:8b:8b:ec:2d:ca:78:3d:c3:
56:ca:33:03:b5:15:29:7e:89:09:36:7d:4d:bd:33:
63:88:00:3e:83:ef:d3:25:25:aa:f0:62:28:94:45:
fd:d0:0c:1d:63:69:55:e5:9d:20:c2:cd:52:cf:67:
71:db:58:3f:b0:23:56:f4:6e:24:40:79:04:02:53:
c4:72:7c:7c:6e:8f:99:99:df:e4:e4:a9:9a:e9:49:
1a:58:d1:0b:13:1e:de:8e:ab:e4:ad:98:7c:cf:df:
84:81:f3:57:d4:c6:ba:44:02:96:71:08:2b:43:73:
6b:5e:8d:db:f4:d5:6b:a7:4e:f1:17:f7:fc:87:be:
f9:1f:a0:58:4c:a8:90:af:ae:db:98:c8:e5:10:81:
a8:4f:69:18:18:e6:f4:09:d1:94:0d:f0:85:39:15:
ed:75:c1:59:c9:e6:30:0d:95:23:9f:ef:7a:01:56:
7a:09:5f:ca:dc:a7:4b:b1:d2:b6:3a:3a:11:f3:e2:
a2:b3:1e:15:dc:71:e2:ae:d6:e6:76:6b:f7:9f:4e:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E1:18:8D:CC:CF:98:17:03:6D:4C:95:4D:77:6A:7E:82:36:6F:F0
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:81:2b:00:c0:55:89:58:fe:8d:b3:99:9e:db:a6:9d:71:f6:
cc:ae:e0:3c:d1:d7:e5:30:d6:07:f8:62:e2:24:bc:7e:2f:04:
93:f9:d0:90:54:14:46:92:8f:06:77:cf:97:0e:42:16:7a:93:
fe:da:34:b4:cf:c8:8c:91:84:6e:02:5e:c5:c6:93:f1:f5:6b:
f8:20:c5:29:d0:1b:27:07:77:69:1b:50:14:27:8c:a7:06:14:
46:d7:e0:17:92:38:59:64:4f:8a:44:f8:8c:16:7c:a6:46:58:
c5:22:26:f4:1f:38:53:fa:fe:b3:c0:3a:ea:d1:ad:58:23:47:
c3:17:38:a4:69:2d:6b:4e:71:42:fc:aa:9e:5d:7a:b6:1f:c1:
e6:43:cb:5e:ef:ad:fe:48:9c:42:38:7a:32:61:b5:e5:af:0b:
fd:5e:5c:4d:58:5d:6c:73:7e:a8:3e:1d:3a:02:9b:37:36:0f:
8e:92:10:d8:d8:23:c2:1a:95:db:dd:0c:60:dd:f2:88:43:df:
3d:a8:e2:d4:a8:7e:bf:f5:8f:8c:67:3e:10:e7:70:71:00:7b:
e7:bf:c2:53:c2:67:68:38:bf:88:0c:40:bc:67:94:06:58:6d:
a5:89:d2:cc:ea:2f:03:80:a0:90:c9:80:19:76:80:58:3e:25:
41:85:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:18 2026 by rpki-client