Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: +pcuu40gZlPWvOjmDTSVYFTBkyZMLcpervbEpkcpQ74=
Subject key identifier: 29:C7:15:0F:2E:99:F7:A0:43:71:D3:2E:BF:5C:52:D0:26:76:A7:DD
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019E2F5FFEABC8DC855C114D7DE8EB12BCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 06:01:20 +0000
Manifest this update: Sat 16 May 2026 06:01:20 +0000
Manifest next update: Sun 17 May 2026 06:01:20 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: 5Gy0T396UNc4P3uc5lbmcpdJfgFTY/JJsEaJfoZ0UeE=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:fe:ab:c8:dc:85:5c:11:4d:7d:e8:eb:12:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: May 16 06:01:20 2026 GMT
Not After : May 17 06:01:20 2026 GMT
Subject: CN=29c7150f2e99f7a04371d32ebf5c52d02676a7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:6d:33:b1:fc:ee:3e:4a:f2:12:e2:fc:f7:
02:7d:4b:ca:7d:af:e3:11:14:28:eb:26:42:78:b6:
22:cd:c9:fb:43:69:5f:a6:19:48:90:d8:18:81:3d:
57:48:04:4f:46:d0:c0:ed:85:72:f5:d0:5a:bd:7f:
e3:82:6d:d8:10:b5:93:13:ae:89:d8:ce:fa:db:ba:
d9:81:e4:33:7d:8f:6f:ec:16:6f:d3:b3:53:75:52:
1d:64:4f:17:dd:b3:90:bd:a8:95:6e:14:b0:45:48:
b0:87:ab:de:ef:1d:b5:77:72:ee:9d:5d:29:31:92:
9b:73:2d:5e:f5:3f:de:db:2b:8b:b9:49:b4:de:31:
35:ed:b6:6b:81:3a:03:c9:35:63:4b:25:d1:56:d8:
1c:c6:f7:ed:ea:2c:c7:18:d0:d5:71:7e:8d:c6:65:
6a:e1:47:19:da:61:01:73:f6:fb:18:6e:7d:3f:6c:
30:09:48:cd:f4:d6:f4:8e:8e:1d:ad:bc:87:41:e1:
22:81:9c:38:09:02:52:3e:05:0f:47:2f:36:ab:6e:
13:f2:96:02:d5:5a:f2:62:1b:fe:26:89:a8:61:15:
7d:4d:a2:90:2a:55:a3:23:04:95:cf:82:68:57:a9:
c0:e3:d6:4f:ac:41:6e:11:9c:35:4b:8c:89:78:44:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:15:0F:2E:99:F7:A0:43:71:D3:2E:BF:5C:52:D0:26:76:A7:DD
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:5e:d0:63:6f:93:15:c3:f5:8f:0e:2b:42:11:f1:21:7b:
3e:e3:74:ee:80:78:91:20:09:1b:03:31:1f:c4:51:64:64:06:
54:ab:d1:d7:de:c3:28:6b:eb:32:05:8e:a5:7c:7f:bb:19:81:
c0:9f:44:3e:07:38:eb:d2:35:fe:7c:e6:a3:b5:1e:14:3c:17:
37:a8:36:c0:6e:e8:f4:86:2a:55:f6:a8:9e:d1:17:df:a1:a1:
c7:6f:0e:4d:8d:0e:f2:92:bc:a2:76:4b:db:54:b7:88:e7:46:
88:fb:b3:08:0f:5d:ef:76:b5:1e:7f:4f:51:22:88:cc:b8:2e:
46:05:32:df:0c:ce:c7:ac:79:d9:a1:b5:f7:c3:af:bf:ad:e4:
f4:8f:86:df:01:40:f3:ce:17:c0:2e:2b:7c:9b:b1:79:5f:d0:
44:17:7d:5c:1c:1e:90:35:16:7f:c0:ee:03:40:1e:fa:e5:64:
19:db:ef:5a:a7:2a:56:70:bd:08:df:9b:ae:3a:58:74:84:28:
a9:e1:7a:3b:77:9b:98:b1:f2:a6:9e:f2:c8:ed:8a:f3:3c:93:
91:12:93:68:16:ca:df:3a:1e:9c:44:fb:a6:32:a7:a7:f6:71:
76:68:0b:f9:ec:6f:9c:58:f8:3a:fd:10:e1:61:54:47:0e:39:
f3:43:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:02 2026 by rpki-client