Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: J46S8w9zpPatQmkoyzoBBUZLhJ0JbnE9r0/WMw+dyt4=
Subject key identifier: A8:AD:2D:DF:45:17:0B:E7:48:C5:36:44:C1:34:87:95:16:3F:F5:0C
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019D37BFFE8CBF0DE86CE54455FCE5ADF263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0F2C
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: YyVHIs8DzWjSN8IkOXcN5lJB4q53DT4a8nXAaF0nXOY=)
2: N-WMFc6DX37aaCb2Ht_ANOztnKQ.roa (hash: 9X1sqEiJTAyhIuXZcN2JWxXDBCpL7N9kje25ka+fIzA=)
3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fe:8c:bf:0d:e8:6c:e5:44:55:fc:e5:ad:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=a8ad2ddf45170be748c53644c1348795163ff50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:de:5d:00:50:72:1a:f8:6d:09:3e:07:8d:
fc:dd:c9:6c:3a:60:b0:e8:69:fb:13:e4:d2:b6:32:
30:8a:5a:be:4c:94:28:a7:1b:99:a9:f3:b2:40:52:
79:bc:aa:e4:04:0f:ab:4e:62:a2:90:58:ca:11:72:
6c:ca:8e:ed:48:ee:f8:ad:9a:1d:80:2f:29:9b:c0:
b4:83:3a:8d:9c:da:12:6b:fe:83:db:dc:5d:e5:bd:
91:c5:1c:6c:77:5e:f6:54:bf:fa:0d:73:d1:b3:1d:
6a:49:45:26:ee:bc:de:37:5c:66:cc:1a:99:15:8a:
7d:e9:8c:5a:dc:0c:93:ec:18:33:13:03:27:9f:31:
69:ee:89:19:40:a3:8c:a1:01:58:79:8c:73:2b:48:
28:db:2f:f1:bb:f9:8b:aa:3d:80:fe:89:ce:ab:4a:
5c:58:ce:cf:72:1c:10:93:5d:32:44:27:57:8a:de:
2c:44:d3:45:9b:5d:39:0c:40:9e:22:db:75:e0:8f:
1a:a7:8e:de:a3:f6:85:bb:06:a5:b4:14:68:b1:6c:
ac:1c:74:1f:d6:22:1c:75:89:04:3b:f5:e0:1a:4c:
b1:b0:f9:ec:47:40:89:b2:57:4c:69:59:1a:db:99:
3c:da:2a:08:84:6c:6b:83:b5:f8:a1:d5:f7:53:49:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AD:2D:DF:45:17:0B:E7:48:C5:36:44:C1:34:87:95:16:3F:F5:0C
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:4c:a0:2c:e9:80:14:79:2d:08:9e:c5:ea:e5:8f:e5:c0:
cf:8f:54:65:16:d0:8b:3f:ce:f0:f8:0f:26:7b:69:04:7c:52:
b1:6e:e3:10:6b:e8:78:44:ff:00:a6:f9:dc:ae:fc:b9:d4:51:
2d:de:26:8e:76:1d:51:bc:95:fb:c0:31:7f:d3:c8:5a:ce:18:
c7:83:9c:e5:4e:c8:6b:98:fe:4b:a9:49:56:67:c1:51:f1:74:
e1:7a:aa:72:8a:cd:b6:3f:37:23:c0:b7:1d:51:98:c9:c9:17:
ad:d1:c7:a3:f1:39:bc:bb:92:67:fb:74:e8:66:69:5f:e1:5c:
c9:53:19:c7:db:6c:3f:cc:58:78:e0:a6:c3:43:b7:22:6b:9a:
4a:6c:1c:44:81:af:e4:6c:de:ba:12:91:20:97:35:74:c4:d4:
5b:7c:a9:26:c6:0f:d5:ff:47:4c:1d:17:93:79:de:0d:6b:97:
ca:f6:a9:53:7a:d2:05:0c:df:c6:cb:30:f8:4b:f9:97:0e:5e:
41:47:e6:36:bf:b9:c0:47:98:23:2c:97:67:9f:41:65:0d:8e:
68:78:ad:12:50:ce:f8:9e:de:b2:df:f0:bc:1c:7b:a5:23:45:
85:9b:7e:28:e1:7c:c9:be:4f:3e:ee:35:c3:85:41:a8:4d:a9:
ea:28:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client