Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: usBJxD7UC5fI8hVmEFuurPQsj/D7sQiECnIyA8NJWTc=
Subject key identifier: 69:FE:6D:6C:16:4F:16:74:E2:5F:82:56:EF:A6:E6:79:84:75:D8:94
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 01A13F706D2E8F158B2BFE4A7727B8781534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 12:01:34 +0000
Manifest this update: Thu 15 Oct 2026 12:01:34 +0000
Manifest next update: Fri 16 Oct 2026 12:01:34 +0000
Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: vuwCx0s+uv1ek/w/3f6yiUDOCKP/3y5ihWTL63mFgD4=)
2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:6d:2e:8f:15:8b:2b:fe:4a:77:27:b8:78:15:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Oct 15 12:01:34 2026 GMT
Not After : Oct 16 12:01:34 2026 GMT
Subject: CN=69fe6d6c164f1674e25f8256efa6e6798475d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:c8:55:43:d4:68:0a:12:22:de:63:cb:14:
0b:52:a8:d5:d9:a4:46:36:f8:be:6a:9b:9e:0c:24:
bc:ab:4e:19:85:f6:1c:e1:2a:9d:10:df:2b:9a:8e:
fe:9c:29:1a:64:93:d7:90:71:23:cf:0f:63:b3:13:
f8:0c:5a:87:b3:4d:fb:58:6b:b8:50:2b:c1:31:16:
89:d2:ed:52:49:83:68:95:83:55:d6:ec:75:0f:f1:
ab:9b:95:95:3e:91:26:fd:cd:3a:81:a9:22:21:4d:
79:15:9c:94:59:fb:8b:ab:96:7e:05:81:42:26:e7:
48:0d:c3:35:fa:43:b9:0c:4c:34:0c:3b:c3:10:b7:
d3:e2:45:00:84:be:8e:6f:19:f3:38:78:14:49:87:
41:4a:09:c9:7b:9a:c3:0d:d7:d4:5f:8f:03:b3:66:
ac:f5:da:83:96:fc:62:6d:53:c4:f0:ad:5e:c2:9e:
a7:1d:89:63:15:04:7c:eb:34:41:a7:10:e2:b0:88:
e2:4a:7b:f8:de:54:a4:20:0c:10:1b:15:82:9d:a7:
93:d6:72:ed:b8:a1:dc:ea:b0:f3:64:76:53:88:0a:
65:14:ad:fb:91:db:74:ac:33:d4:7f:55:f7:33:8f:
49:51:be:8b:4c:65:61:8e:d5:83:c8:10:80:b2:13:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:6D:6C:16:4F:16:74:E2:5F:82:56:EF:A6:E6:79:84:75:D8:94
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:ae:21:13:f2:ac:8a:e0:ad:34:87:32:c1:dc:e9:69:17:
62:27:93:1e:08:f6:92:7b:31:91:03:ab:1a:58:2e:c1:2e:ea:
97:93:a5:8f:84:59:bf:ee:86:aa:c0:53:ed:cb:7e:8a:40:d2:
b6:af:87:fd:c5:74:ba:46:89:6c:77:a4:39:14:d8:a5:6c:3c:
4d:fd:a5:e0:66:3b:77:e3:17:4c:cd:6f:af:e8:8c:9d:81:fe:
a2:0c:37:2b:57:20:89:90:a6:1d:0c:23:80:b4:3a:6b:61:3e:
0e:fa:a1:73:b0:cc:df:7c:8f:90:b8:2a:8d:76:9a:75:5d:cf:
f0:32:de:03:e1:f8:06:2b:31:20:25:a6:8b:e3:90:24:24:6f:
8e:1d:fb:6e:30:65:5f:06:4c:25:72:7a:0f:70:ce:c5:e1:f2:
f9:26:86:ef:fc:ef:07:93:d1:1c:90:79:0c:73:d0:b0:26:8e:
15:f3:1b:ee:05:84:f0:f9:77:ca:4f:1a:be:74:e3:73:58:7f:
ae:1d:10:10:a3:13:8d:85:37:fc:39:45:a8:eb:aa:0f:d3:c0:
40:a8:07:b4:33:22:b8:73:8e:96:82:a0:21:df:1e:04:ad:84:
ff:cf:4c:da:d3:1e:94:2f:7b:5e:8f:9c:a1:c2:99:96:6a:a6:
ee:dd:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:18 2026 by rpki-client