Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: HxK2f7RBG8vwKsIdjhRAw85df3G63nVNzU3dVxtG6Hs=
Subject key identifier: 60:2F:0D:97:2A:92:C6:26:D2:C1:CB:3A:AF:62:A4:12:E3:B0:25:AF
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 01A000CA896A77932C363ED571103300F73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:01:08 +0000
Manifest this update: Fri 14 Aug 2026 15:01:08 +0000
Manifest next update: Sat 15 Aug 2026 15:01:08 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: QGbJOH/Z/OXuSPNCacGrnG/NApMByC3uxLxYeulmhsI=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:89:6a:77:93:2c:36:3e:d5:71:10:33:00:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Aug 14 15:01:08 2026 GMT
Not After : Aug 15 15:01:08 2026 GMT
Subject: CN=602f0d972a92c626d2c1cb3aaf62a412e3b025af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:4b:bb:11:b9:8d:fb:f2:07:e7:fb:d7:e8:
48:a3:c9:b9:2e:34:a6:9c:65:1b:f4:1b:bf:e0:e6:
d1:59:81:85:e1:10:09:3a:49:3a:c3:96:f0:b0:16:
7a:18:4f:94:18:18:fa:70:83:30:e9:aa:50:36:d2:
c2:59:92:98:bf:4c:9a:5d:40:4e:6c:2a:71:06:a2:
f4:45:b5:35:df:77:67:c0:9c:ba:64:8a:c2:57:bb:
ba:ba:8b:b1:de:aa:84:0e:9c:2e:93:6b:7c:f2:cb:
db:d5:b2:d9:54:b5:12:ca:67:3b:a0:f3:4a:26:03:
48:e1:a2:e5:e5:80:b0:52:bb:01:81:ae:cc:40:03:
80:16:e7:12:7e:f3:f3:80:5f:53:1b:2b:49:9b:76:
fe:b8:dc:0f:78:8b:a1:cf:30:f0:cc:72:b8:dc:a4:
8a:36:eb:ed:58:40:1c:00:ad:39:00:1e:86:57:2e:
4c:34:09:8f:6a:74:2e:a1:be:df:fd:8c:ca:30:ec:
47:71:a1:e3:c6:91:d5:bc:f4:06:31:87:ed:1d:ad:
77:95:68:c6:a5:3a:ab:fd:93:60:d4:ab:bd:55:e1:
6d:53:1f:49:ea:52:16:6f:71:76:bf:db:15:36:83:
5d:8f:bb:b0:f7:36:ff:19:ad:89:a4:97:e4:04:58:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:0D:97:2A:92:C6:26:D2:C1:CB:3A:AF:62:A4:12:E3:B0:25:AF
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:90:09:38:c2:2b:6d:20:8f:95:7f:fa:05:6c:c1:ed:21:3b:
8f:27:ce:71:60:59:b0:56:74:a6:85:15:f1:87:7a:26:1b:b2:
aa:95:2a:13:72:d1:73:37:ef:a1:4f:e8:28:50:eb:e7:e5:b2:
5c:c0:cd:30:9a:1b:62:47:3f:93:9a:a3:de:6c:b5:54:ec:80:
a5:96:32:6d:0c:b4:ab:be:35:eb:f6:f1:98:04:cc:42:5c:73:
22:64:98:11:6a:73:d1:65:11:48:fe:a3:eb:90:c7:a6:7f:5f:
05:f6:94:b0:f6:44:33:c1:cb:b6:72:b6:07:fa:55:fd:4b:8a:
fc:a5:00:23:ac:87:09:7f:e4:d3:c7:2e:9b:b5:4c:dd:7b:ff:
71:ab:af:97:6a:67:1e:25:6b:07:df:a2:52:a8:fc:ae:87:cc:
a8:b6:65:c8:96:6e:1c:bc:fe:53:47:51:39:a9:9d:7e:a5:d2:
9b:d7:91:f2:a8:0a:68:44:00:31:80:cd:5c:41:0f:65:0e:dc:
a0:57:ca:5a:3c:3b:24:87:d4:81:9e:cb:a8:46:2e:01:93:9c:
0b:7a:db:99:cf:7f:23:1c:c6:ec:98:fb:bb:a9:67:19:ed:a7:
01:fc:ec:94:04:61:b6:ee:7e:12:38:7b:ee:e1:28:97:84:15:
cc:de:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:44 2026 by rpki-client