
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: +duVO2FYAPNtZq0zGqX18sUz4kPv9U4AtGAsGAmMcMQ=
Subject key identifier: 8C:45:F8:28:B4:9C:44:E8:14:B3:52:85:C2:20:2D:5C:61:48:E7:62
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019D284D36837BAB53698E46B718DE585AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0F24
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: WWK4EsXneE8qFQql/RLnDq/eRCchlqbRCzlTyOAQACQ=)
2: N-WMFc6DX37aaCb2Ht_ANOztnKQ.roa (hash: 9X1sqEiJTAyhIuXZcN2JWxXDBCpL7N9kje25ka+fIzA=)
3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:36:83:7b:ab:53:69:8e:46:b7:18:de:58:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=8c45f828b49c44e814b35285c2202d5c6148e762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:69:61:07:7d:10:b1:37:fb:f2:48:0e:c1:e5:
c4:a0:18:85:d7:24:12:0e:24:85:bb:24:9e:de:53:
2e:dd:d2:9b:5e:f5:a0:fd:9e:aa:b2:3a:a7:39:cd:
e1:b4:ca:ee:ba:34:32:ca:a4:8c:49:75:41:32:66:
3f:ad:80:a7:03:31:e0:99:ab:43:ed:bd:60:4e:2e:
ec:3b:fa:48:06:f4:66:c7:34:1d:96:57:51:56:76:
88:b8:8d:b5:b0:bb:48:82:f4:7a:96:d3:8a:32:4e:
a2:ad:72:d8:c6:4c:f9:54:d7:81:d9:44:9e:2c:32:
77:ee:bd:40:f3:f5:d5:39:df:9d:90:fa:bc:b2:ff:
4c:56:64:24:62:13:60:b6:09:da:c7:0e:24:53:b4:
26:18:86:1f:36:c6:72:4a:e0:aa:bf:d7:6c:e9:62:
e4:88:3c:10:12:e1:55:88:9f:c9:4b:5f:11:b0:f6:
d2:13:d9:d2:9a:eb:b3:aa:6d:35:c3:23:0a:34:75:
f6:93:59:88:79:39:19:5c:75:da:38:c5:79:be:5d:
b5:00:79:97:89:70:26:69:0e:c3:8f:87:c7:d1:f4:
61:80:32:de:04:69:a0:d4:c4:00:01:8e:58:e5:40:
ab:32:70:a1:95:be:c4:d7:92:69:22:36:6b:50:50:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:F8:28:B4:9C:44:E8:14:B3:52:85:C2:20:2D:5C:61:48:E7:62
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:da:14:36:24:7f:8f:af:2f:79:11:1b:0b:ea:3d:00:32:ef:
4f:1b:4b:0d:bd:e2:42:b0:b8:95:b3:de:be:e1:02:ff:59:2b:
34:f0:09:d1:a2:b9:b7:3c:33:10:28:e9:33:9b:38:89:6b:d2:
e3:bc:d4:07:2b:8c:41:7e:69:df:eb:b9:8b:82:dc:fb:73:8c:
c1:62:6c:f3:5c:fb:ff:7d:54:42:46:a1:52:c7:9b:be:53:18:
fb:c6:fe:69:4b:17:1f:f2:41:e2:00:85:c5:aa:2f:42:28:e4:
01:0e:af:0e:82:9d:6a:73:0b:30:9b:c9:43:c1:af:82:3c:0e:
4e:a8:43:83:43:b2:ea:38:19:61:a9:51:07:68:af:d5:3c:34:
99:88:1b:f3:98:56:26:17:28:e5:2f:cc:d2:99:2e:be:6a:9f:
f4:a3:42:96:19:c9:7b:cb:db:54:e3:f6:bd:de:e8:c0:3c:5a:
92:cf:e5:5f:78:4b:ba:eb:73:61:6a:56:e4:7d:f3:5f:d6:28:
ab:72:31:68:02:1d:99:50:fd:b7:a0:4a:f2:a4:b3:89:87:57:
f5:92:8e:b2:df:ad:16:4b:36:d0:01:f5:d4:de:d4:cc:9a:64:
9a:1a:36:eb:2f:4f:54:6d:d9:bb:48:31:c1:5c:66:ae:bf:c4:
a1:7b:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:42 2026 by rpki-client