Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: ePbpjPWjWnMYanSkf/qJr1D4famjkHEiwPhl2aSJYuc=
Subject key identifier: 10:B4:FF:F9:AA:53:1A:75:04:91:D9:EE:CF:8A:62:8E:3E:5A:03:FB
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01A155F838195C703C6488E229E4BFAF70C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 17F3
Signing time: Mon 19 Oct 2026 21:01:33 +0000
Manifest this update: Mon 19 Oct 2026 21:01:33 +0000
Manifest next update: Tue 20 Oct 2026 21:01:33 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: nS4tyI858Ta/melQim6hAgIw0R7fgfjElStB4fS7Ze8=)
2: nkTurxzRwWG3JBRFRuSg4cqlERA.roa (hash: IdP8M0+iJ8T5mkltOuC1Z8AWKXU9ULTOI59bHhqX46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f8:38:19:5c:70:3c:64:88:e2:29:e4:bf:af:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Oct 19 21:01:33 2026 GMT
Not After : Oct 20 21:01:33 2026 GMT
Subject: CN=10b4fff9aa531a750491d9eecf8a628e3e5a03fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:80:5e:40:56:f6:eb:79:95:fd:7b:98:57:
ab:83:79:02:08:74:e2:6a:89:2c:26:98:89:11:5c:
ce:11:df:67:53:6e:73:e4:89:d6:52:7d:ec:ae:47:
5f:e3:cb:02:6e:44:ce:c6:fa:3b:53:03:54:24:ca:
38:46:ee:32:a0:d9:61:16:ed:f4:30:c8:a4:07:21:
d6:46:31:07:f8:87:b5:53:86:ed:c5:84:cd:41:db:
14:59:20:23:a3:bc:db:6e:0d:62:6c:b4:74:87:63:
48:7a:1e:72:82:c1:8a:a9:21:81:38:b0:5a:3b:98:
cc:c5:0a:07:a0:1c:dd:8a:b7:e5:08:e4:c8:d1:2b:
5a:79:f9:6b:5f:6f:11:4d:d8:1c:c0:b3:73:ad:44:
f6:08:15:22:a7:9a:2a:f1:05:fc:e8:aa:77:cc:03:
7c:d5:3d:96:8d:10:e1:fa:48:54:17:f0:cc:28:46:
80:20:7a:02:f5:f6:1c:02:c5:01:a9:0d:3c:85:d8:
fe:61:89:e0:c5:05:5e:f0:ab:45:d1:04:e4:46:a1:
9c:10:85:d6:d8:c2:fa:c9:c4:f4:31:b2:6d:1b:e6:
ed:22:ab:b9:90:57:c3:27:8b:bf:e8:17:bd:df:2f:
55:3a:43:f2:f4:65:6d:fc:96:96:4a:5c:f1:9f:33:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B4:FF:F9:AA:53:1A:75:04:91:D9:EE:CF:8A:62:8E:3E:5A:03:FB
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:43:04:4e:6d:aa:e6:34:76:c8:1e:d5:81:2f:6d:de:b4:
75:e0:eb:cd:29:c9:db:1a:eb:5b:8b:4f:14:70:0f:8c:81:6f:
31:8e:08:0f:73:14:ad:1e:a5:4e:74:9a:dd:d2:b8:2c:ed:98:
05:64:03:dc:ab:8f:f2:e9:cf:7b:56:dd:ca:a3:d5:e6:05:cf:
b4:5e:c0:47:fa:17:16:29:75:ca:fc:42:0c:ae:10:19:d2:78:
37:e0:56:6a:78:72:a1:0a:51:f5:39:45:d6:d6:11:cc:d4:a8:
42:00:d6:69:1e:39:4f:84:f7:bc:8e:71:eb:e4:03:9c:f2:bd:
50:f3:5e:f2:83:1e:7c:91:49:96:d8:10:db:d2:ec:f9:f3:42:
07:f5:9e:30:2d:95:3c:1c:c0:ce:10:13:e3:d8:e9:fb:5f:61:
47:05:84:33:f7:63:17:31:ae:71:b2:39:1b:7e:ab:ea:8c:f2:
e0:67:0b:be:3d:2e:23:a0:e5:7f:fc:c8:6c:11:d6:d7:47:fc:
7d:94:ca:38:63:41:74:9c:55:25:b7:a9:b1:ac:3a:a0:06:3b:
88:79:78:26:e7:31:3c:cf:02:7a:e8:88:11:c7:78:c0:66:66:
df:c7:3e:e0:a9:83:25:73:05:8d:6d:12:6b:60:e9:ee:c4:92:
bc:5c:7f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFV+DgZXHA8ZIjiKeS/r3DAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjYxMDE5MjEwMTMzWhcNMjYxMDIwMjEwMTMzWjAzMTEwLwYDVQQD
EygxMGI0ZmZmOWFhNTMxYTc1MDQ5MWQ5ZWVjZjhhNjI4ZTNlNWEwM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2AXkBW9ut5lf17mFerg3kCCHTi
aoksJpiJEVzOEd9nU25z5InWUn3srkdf48sCbkTOxvo7UwNUJMo4Ru4yoNlhFu30
MMikByHWRjEH+Ie1U4btxYTNQdsUWSAjo7zbbg1ibLR0h2NIeh5ygsGKqSGBOLBa
O5jMxQoHoBzdirflCOTI0StaeflrX28RTdgcwLNzrUT2CBUip5oq8QX86Kp3zAN8
1T2WjRDh+khUF/DMKEaAIHoC9fYcAsUBqQ08hdj+YYngxQVe8KtF0QTkRqGcEIXW
2ML6ycT0MbJtG+btIqu5kFfDJ4u/6Be93y9VOkPy9GVt/JaWSlzxnzNjCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC0//mqUxp1BJHZ7s+KYo4+WgP7MB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUpDBE5t
quY0dsge1YEvbd60deDrzSnJ2xrrW4tPFHAPjIFvMY4ID3MUrR6lTnSa3dK4LO2Y
BWQD3KuP8unPe1bdyqPV5gXPtF7AR/oXFil1yvxCDK4QGdJ4N+BWanhyoQpR9TlF
1tYRzNSoQgDWaR45T4T3vI5x6+QDnPK9UPNe8oMefJFJltgQ29Ls+fNCB/WeMC2V
PBzAzhAT49jp+19hRwWEM/djFzGucbI5G36r6ozy4GcLvj0uI6Dlf/zIbBHW10f8
fZTKOGNBdJxVJbepsaw6oAY7iHl4JucxPM8CeuiIEcd4wGZm38c+4KmDJXMFjW0S
a2Dp7sSSvFx/WA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:17:06 2026 by rpki-client