Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: /dxEShbtgchEO3Za4j032nDo7shv+6/78a9MEddaf0I=
Subject key identifier: A0:AE:39:34:CB:70:AD:66:A8:69:F1:32:84:72:20:E1:D4:17:A7:70
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019E2F96D92151BD196E0ED9D77BAD25E7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 164F
Signing time: Sat 16 May 2026 07:01:15 +0000
Manifest this update: Sat 16 May 2026 07:01:15 +0000
Manifest next update: Sun 17 May 2026 07:01:15 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: mA2S8zDQEN56K1UznEltd/4xKaM9bRgDn7frbBAXUUQ=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:d9:21:51:bd:19:6e:0e:d9:d7:7b:ad:25:e7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: May 16 07:01:15 2026 GMT
Not After : May 17 07:01:15 2026 GMT
Subject: CN=a0ae3934cb70ad66a869f132847220e1d417a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:55:95:61:2b:7a:d0:c4:6d:b3:21:7e:ec:
84:67:db:f1:f0:4f:6b:1e:08:d1:8a:57:f8:64:5f:
c7:8d:c8:d9:f7:7c:58:21:89:40:20:94:87:c4:96:
29:be:4e:88:72:7b:06:51:47:aa:2b:dd:fc:d1:8c:
df:16:d9:c7:14:ef:f3:1b:09:22:93:a8:bf:5f:22:
10:6a:04:e0:eb:06:dd:25:c1:6c:dc:58:1f:85:03:
a1:6f:90:03:48:17:e2:05:4f:aa:1b:83:e2:e9:2d:
84:42:82:80:ae:98:bb:02:ad:8a:74:ba:f5:6e:24:
1a:44:c9:b9:45:48:1b:bd:6c:2b:bf:c3:82:41:65:
89:f3:b6:8f:ce:7a:61:99:80:ec:7d:e7:24:bd:61:
04:6d:37:aa:51:f9:92:8a:6e:a4:19:eb:bc:a7:08:
bd:9e:b7:3e:0a:aa:78:3a:8f:6b:21:8e:63:55:98:
2e:22:f6:27:c3:4f:c1:16:f2:9e:3a:83:d6:23:c7:
f0:7a:8f:69:7e:96:3a:e4:51:43:d6:fa:94:0f:c2:
53:87:7f:a3:dc:c4:58:32:07:2c:30:25:e1:7f:44:
b2:44:6b:ff:72:da:7a:c0:b5:3e:b9:f3:ee:72:2a:
09:54:80:f2:74:bf:48:5e:89:e9:bc:bd:d8:de:14:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:39:34:CB:70:AD:66:A8:69:F1:32:84:72:20:E1:D4:17:A7:70
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a2:73:b2:78:21:19:e7:53:56:a7:8e:e5:f2:f7:bb:8d:f0:
de:8b:dd:af:15:07:01:f4:06:04:e0:2c:cd:12:c9:ae:73:6a:
64:ad:42:3b:27:85:0a:08:2c:bd:66:3e:58:d1:68:44:90:17:
2c:89:2b:01:52:58:73:50:00:b4:2a:61:45:b7:dd:25:f8:29:
96:b9:b3:84:1d:27:1e:2d:29:91:d5:98:7d:b5:11:92:7e:1f:
b3:cf:06:b4:13:96:a1:c0:28:3c:c6:89:26:6b:e1:3f:9c:b1:
52:4c:b7:25:0e:74:e4:76:b5:27:84:fd:00:68:25:9e:d0:38:
6c:0a:f4:10:1c:b0:c1:a5:2d:c1:0d:0a:b3:fc:b3:ba:17:2d:
d3:89:ee:5b:66:52:d4:07:97:75:f4:fc:03:7b:a7:a8:5c:6c:
86:b8:40:9d:67:e1:49:6e:4b:cb:1f:77:4c:3b:44:b9:d9:55:
ed:ed:69:97:81:cb:27:2f:25:ec:c3:42:2e:c0:e7:bf:3d:d8:
98:60:fa:5e:aa:f7:cf:6d:70:0e:50:f1:8a:5d:4e:0c:f2:89:
ef:63:f8:33:45:a3:ad:4b:de:e2:a7:86:5a:c0:a4:f1:b4:3f:
8c:d5:fd:23:9d:89:c3:23:dd:ec:e6:69:14:fd:a8:73:5f:db:
ea:1a:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:46 2026 by rpki-client