Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: K4su2vxtnHWxv2nsZ7716X1OVcfF7TUwLENZ6LvwqS4=
Subject key identifier: A2:31:2C:AE:C1:12:40:87:D3:07:36:67:98:2A:6C:11:18:9A:10:8C
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 01A0016EE4BE56C11C2967F7E87E41D833E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:00:39 +0000
Manifest this update: Fri 14 Aug 2026 18:00:39 +0000
Manifest next update: Sat 15 Aug 2026 18:00:39 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: M7z08r8QYnia77v4Z7LgOwRvrnlcp4UaOzX9y/t+BWI=)
2: Qd0QU2IncFPsjVCskf3um5QV14Y.roa (hash: tYPrbjqZzNEuofSUn5IUkl+i1pTB4fAA+xmGJsosBpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:e4:be:56:c1:1c:29:67:f7:e8:7e:41:d8:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Aug 14 18:00:39 2026 GMT
Not After : Aug 15 18:00:39 2026 GMT
Subject: CN=a2312caec1124087d3073667982a6c11189a108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:1e:cb:47:5a:ab:62:67:61:0b:09:fc:fe:
4d:3d:a9:20:05:4a:dd:1c:42:8c:9a:d3:e9:f7:86:
4c:75:c0:14:00:e4:e0:35:b3:3b:6a:09:99:99:a3:
27:7d:e3:46:78:38:39:ce:47:17:39:c9:50:ec:70:
94:f5:5c:fa:01:b2:48:14:1c:8d:72:aa:45:e8:fa:
c7:26:f7:71:cc:1d:d7:cf:8d:43:5e:d9:62:f4:01:
6a:03:b1:25:4d:74:ae:94:3d:a0:c6:ed:cc:39:3f:
ce:ca:f8:3c:1c:dd:55:14:c9:fc:4b:20:7c:3c:89:
ca:01:b1:50:22:9e:de:f6:82:a4:ef:39:16:0b:9a:
24:af:32:3f:a7:5e:98:a8:59:7e:a2:28:96:f3:14:
ab:99:8b:41:77:cc:dc:9a:3d:55:ca:02:d8:6a:8a:
ab:57:f3:4e:23:ad:c9:7a:bc:c7:bd:3c:e7:ed:7a:
af:86:78:06:17:df:ff:72:f4:1f:24:b1:df:a9:93:
2e:a6:7a:8d:55:40:e1:d1:2b:52:56:89:c5:45:e4:
71:41:96:04:cb:fe:37:d6:1c:0b:f3:52:44:62:d7:
05:1f:ba:e9:2a:8e:27:d5:89:64:9d:77:cb:66:49:
41:9a:e5:3e:3b:28:66:1d:4a:e9:cf:82:82:87:fe:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:2C:AE:C1:12:40:87:D3:07:36:67:98:2A:6C:11:18:9A:10:8C
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:63:79:a9:77:b0:13:c7:db:9f:fe:30:82:0b:10:f6:19:e2:
7b:23:d1:6c:7f:70:2d:35:7a:30:37:5d:ab:de:cb:1f:d6:df:
69:b5:d1:81:41:0a:d8:23:3d:e4:4b:cd:2f:a2:03:04:37:b5:
3b:0a:75:ad:99:aa:7a:ad:7c:42:56:af:9e:f3:11:66:5d:37:
72:82:4b:58:b4:07:ea:52:c8:c2:2b:fe:e7:f6:42:f3:c8:6f:
cb:b4:2b:1d:19:96:ea:fa:a4:7d:86:32:6e:0f:a6:bb:24:78:
73:e4:29:05:c9:7b:ef:34:dd:83:0e:e6:52:8f:ae:e4:9e:9a:
8b:e7:b4:91:9e:28:b8:45:1e:4a:4d:77:fe:0e:32:e1:77:d6:
2e:f0:3c:1a:68:13:50:9e:25:fa:2b:11:12:1a:7a:92:79:c5:
68:4b:7e:8e:85:51:31:44:4b:34:b3:e0:32:96:98:c0:4d:94:
13:78:47:77:d7:d1:07:97:6a:cc:1f:60:a2:af:dd:4b:1c:c0:
8b:29:76:6a:1f:6f:7c:ff:24:46:8b:35:80:a0:b7:e4:fd:b4:
19:f4:4c:2d:53:a1:15:42:3c:6b:f6:bc:ea:27:9d:06:ea:26:
ec:35:83:70:32:ac:93:5c:3a:9d:32:2f:f1:c8:54:df:87:eb:
ab:70:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:38 2026 by rpki-client