Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: KC4RBo2vuUiHBvKkajYu7apAdK+woJdh73kE1zg95P0=
Subject key identifier: 90:8F:1C:4B:09:1D:F9:7A:25:05:87:72:62:25:B5:17:56:B8:A8:D0
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019D3865AA2FBAAB0954E5ACF36F8CEC2C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 15CF
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: XpeRpjvsL9ZYRJook9esKCqsKeOSaXCr758hPczhkWM=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:aa:2f:ba:ab:09:54:e5:ac:f3:6f:8c:ec:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=908f1c4b091df97a250587726225b51756b8a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:ea:ef:07:cf:91:f5:12:2b:11:2f:cf:27:
f2:82:67:6b:1c:7c:58:75:68:d4:31:ed:89:a5:13:
00:af:06:a8:fd:47:50:85:cd:db:88:3d:ee:4c:e1:
0e:4c:96:fd:2d:fe:70:29:e6:d5:ca:57:d3:66:33:
fe:bc:85:98:d8:ac:7d:23:fe:3c:68:58:29:d1:92:
fb:70:4f:eb:17:d1:d6:39:af:52:90:0b:d8:e0:29:
eb:da:4b:c9:ac:8e:bc:ff:ea:7d:1d:93:ef:30:0c:
49:57:ec:7e:cb:26:55:7c:3e:94:9d:5b:c3:14:71:
a2:3f:6c:ad:89:57:7a:29:51:5d:cb:00:64:f9:21:
56:0e:25:fe:2b:1c:4e:2f:e8:0d:fa:40:b9:02:a4:
c2:18:bd:69:ed:7b:30:95:1d:53:3c:47:fc:a1:11:
f8:68:54:24:12:99:a5:a3:12:db:42:24:a2:a4:d8:
1d:2b:a2:4b:0f:d8:b3:69:2b:fb:77:d7:84:25:86:
36:cf:eb:b5:8c:15:ba:97:5d:87:41:4a:bc:e9:b0:
00:1d:b7:ab:5e:46:e5:34:1e:05:29:2d:34:e8:33:
5a:ac:2f:cb:76:4c:63:f0:05:13:08:29:a0:a2:e9:
9d:a2:53:4a:c2:30:37:8e:e3:c1:0d:d2:2a:5c:50:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:1C:4B:09:1D:F9:7A:25:05:87:72:62:25:B5:17:56:B8:A8:D0
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:4e:e2:b6:e1:6e:0e:ba:05:82:6e:c5:a7:6c:cb:92:49:b6:
15:55:31:10:54:a6:dd:e7:7f:58:f4:1f:48:3c:31:26:a6:53:
fd:14:10:ab:6c:03:31:65:c0:74:8b:c2:c0:24:10:ad:11:ee:
f2:ca:71:c4:56:86:21:99:2a:bb:02:90:41:c0:49:e6:5f:f4:
c5:7e:e1:de:2d:1d:20:3e:2e:15:af:5e:d4:61:dc:1c:1c:69:
fa:37:7e:52:3c:9d:77:e1:99:c8:48:7e:37:7c:c6:46:96:05:
28:b9:90:a3:07:42:9d:c9:9c:6f:16:95:ed:3a:c0:84:da:73:
33:03:f1:42:3f:55:a4:e8:ad:65:d2:46:b8:37:f6:d5:80:cf:
ce:50:1a:81:8a:83:c3:1f:c7:27:7a:de:01:09:3f:e9:ef:2c:
0d:e5:8c:40:a0:d2:83:b5:35:0d:75:9d:34:cf:c4:4e:1a:2f:
ab:1f:30:53:d4:df:c8:69:cf:e4:9c:17:69:73:9c:ee:41:8d:
2a:26:2c:ff:ad:09:ca:24:19:ba:46:b5:8a:df:92:3c:6a:bf:
bb:03:71:ef:bc:ac:31:8d:59:6b:ba:9c:b6:20:9c:65:90:9b:
f7:b4:17:36:2d:0c:cf:de:d0:a7:f6:0f:14:9e:02:b6:91:11:
8d:3d:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:16 2026 by rpki-client