Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: 6MTnbUklqBzqrayZWu6UPRpoapoGPirb15xzEdRLWhY=
Subject key identifier: 1E:2A:29:B4:37:44:02:CA:E1:46:90:2F:65:E5:FA:67:5C:FB:AD:66
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01A14E3E50B33817D23806BF752D0FA15E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 17EF
Signing time: Sun 18 Oct 2026 09:01:09 +0000
Manifest this update: Sun 18 Oct 2026 09:01:09 +0000
Manifest next update: Mon 19 Oct 2026 09:01:09 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: FfzSl/s9F25af+BAvGhZmShiKwS2FwOtPAYg2ECUsw8=)
2: nkTurxzRwWG3JBRFRuSg4cqlERA.roa (hash: IdP8M0+iJ8T5mkltOuC1Z8AWKXU9ULTOI59bHhqX46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:50:b3:38:17:d2:38:06:bf:75:2d:0f:a1:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Oct 18 09:01:09 2026 GMT
Not After : Oct 19 09:01:09 2026 GMT
Subject: CN=1e2a29b4374402cae146902f65e5fa675cfbad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:f7:cb:03:8f:cc:5b:ec:be:e1:e5:3a:2b:
29:a8:68:03:4b:5f:09:ac:ab:38:76:16:54:37:22:
b0:07:8c:d5:7d:33:4e:15:0e:26:82:9e:26:01:d5:
f8:b8:be:ab:df:5b:aa:c0:7e:ca:aa:ed:c3:53:0c:
3d:5b:7b:e9:84:83:3b:99:ab:54:1a:f4:d1:cb:6a:
36:88:55:1b:e3:3c:cd:2d:c6:2a:ae:82:13:cd:d2:
92:52:e0:1b:bf:09:38:ef:ed:10:13:38:f9:43:cd:
3b:36:41:cc:f4:89:6e:b4:1e:3d:8d:87:af:3a:48:
aa:0c:44:43:88:29:8c:65:66:8b:04:28:17:ed:d2:
a0:ba:29:d9:72:d3:2e:a1:9e:2e:97:19:22:f2:46:
75:4f:6d:70:9d:9f:06:4e:65:fe:53:58:b3:5e:e2:
4d:55:7d:e0:a7:95:49:9a:89:64:2e:a8:45:7a:4a:
99:0c:81:01:7b:3c:0d:3c:c0:95:f4:60:1b:76:c3:
46:a0:21:9a:96:b3:e9:c3:ba:45:4c:50:dc:d0:2d:
29:55:50:df:9a:88:4f:33:55:ab:93:80:c2:6a:3f:
7e:21:30:43:cf:0f:77:67:d4:6f:95:36:d7:f6:fc:
c1:94:87:4c:50:95:62:95:7a:83:5d:b5:e5:d2:4f:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:29:B4:37:44:02:CA:E1:46:90:2F:65:E5:FA:67:5C:FB:AD:66
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1a:57:90:bb:67:33:b1:91:36:a2:64:b3:90:38:10:91:b5:
27:15:fc:3a:90:54:cf:bd:4a:d4:d2:b6:0c:d9:7a:82:c0:ca:
d8:6d:93:be:f2:3f:1a:a1:89:af:db:34:af:42:03:97:de:8a:
8b:1f:c4:e6:3e:f6:10:2c:12:81:37:94:36:a2:84:be:32:60:
ca:e9:75:55:3d:ea:48:b6:66:f7:ac:0f:fb:36:d8:1c:d4:fe:
5b:f2:1a:ae:51:61:42:69:b7:0f:dc:53:d7:2c:92:b8:e3:47:
de:7d:cb:df:0b:68:45:0c:c6:c3:ff:40:f0:ed:61:9e:78:d6:
30:71:2e:61:a9:e9:0e:74:e8:3f:9b:a8:f4:e8:26:73:31:f3:
80:11:5e:7f:a8:1f:40:f1:f5:f8:ca:b6:24:1f:ac:35:73:97:
64:50:75:bb:87:bb:35:e8:f3:4d:25:44:c5:f3:40:cb:fd:0f:
65:2a:f5:e9:a9:0b:61:c3:c6:45:a7:20:2a:41:67:82:49:33:
f1:de:18:7d:bf:81:18:5d:2f:83:7b:e9:ad:c2:4a:1a:5e:67:
54:43:d2:76:10:c0:69:51:0a:a8:3f:87:30:e8:03:85:78:b3:
12:6a:dd:72:e5:d7:4a:00:6b:ba:8c:84:2d:1c:fe:b5:bd:2e:
31:65:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:33:52 2026 by rpki-client