Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: kK6A+tWluG4uxkPPT/6ej960AefulCceA3KPBMLJHDA=
Subject key identifier: 75:C6:7E:6C:C8:00:E8:E6:7A:A5:94:BE:86:9C:26:DB:73:24:98:B7
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 019D389C1E6C3DE7DD94765C9636FDE6DCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 12CA
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: nY9VGsUsce+1DNmYAbBydd/HWT2esgJraj9xIM8G5xk=)
2: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (hash: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1e:6c:3d:e7:dd:94:76:5c:96:36:fd:e6:dc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=75c67e6cc800e8e67aa594be869c26db732498b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:3a:c2:b8:da:d7:46:9f:26:df:51:c4:67:
84:73:85:a0:8a:79:a6:8a:98:2c:07:b3:53:13:b4:
b6:3b:81:d0:d9:f5:28:b2:d7:09:a7:d6:8d:28:75:
1a:c3:36:34:6e:e4:b8:a0:c9:75:f9:cb:38:38:aa:
92:ee:94:fd:b0:73:29:8c:10:35:c9:b2:36:ed:2e:
e9:2b:5f:a2:99:42:f3:dd:a2:81:35:55:79:34:d6:
b6:b3:17:97:a0:ba:11:e3:f1:65:34:0a:2f:13:4c:
1a:ca:77:c5:92:ac:71:36:b4:59:40:9b:c3:f9:6d:
e8:ae:4e:08:1a:1f:91:0b:c9:57:84:12:87:64:33:
8b:02:a0:f3:4e:29:b1:8d:12:92:2d:f5:fd:92:cf:
a2:65:9c:3f:8c:31:bc:2a:4a:ee:21:8f:98:b5:d1:
9c:49:1c:50:50:d3:b7:ea:d1:a3:3c:d8:98:f3:d0:
6f:5a:71:a6:e6:ed:4f:99:32:a1:16:ce:81:5c:94:
db:1a:9f:46:03:da:c3:02:5a:ce:a1:c5:7d:69:c0:
82:bf:9f:a4:f5:67:bd:b6:be:0f:33:39:33:30:f6:
7d:05:26:27:59:21:ac:26:5d:c4:d9:c1:62:ae:c5:
9f:f1:9d:dd:4f:bb:1e:68:04:61:5e:73:a7:ff:e6:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:7E:6C:C8:00:E8:E6:7A:A5:94:BE:86:9C:26:DB:73:24:98:B7
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:06:7e:e6:94:a3:a9:8c:d0:eb:e0:d6:da:be:d8:1b:d5:
57:b8:bb:b7:3e:a4:ea:69:91:e3:bb:ee:cc:41:9d:ea:8c:50:
f8:18:2f:2a:7a:49:d2:be:18:c4:b8:67:d4:c9:7b:7b:99:ad:
b0:db:91:40:7e:ee:e3:02:b6:ee:b0:22:0f:4f:ec:5c:50:62:
e9:b9:ad:8c:f5:0e:52:39:d1:f2:e5:3c:c8:eb:cc:2b:9b:c0:
e9:d6:a7:3a:52:89:22:94:33:56:12:4e:a3:ff:a1:89:7b:d6:
7b:96:42:f4:0d:54:e8:7f:82:15:06:bc:9b:d5:14:21:bc:a6:
f4:31:e4:b0:09:c2:2a:8f:1e:34:83:1a:21:f3:35:c2:e5:07:
58:b6:a0:c8:7b:05:da:b3:36:21:11:7a:3d:32:a0:1f:7a:e7:
30:ac:dd:79:fb:64:a2:56:68:80:8c:32:46:2a:95:e3:69:4c:
1c:ba:c7:5d:ad:a2:a5:16:91:20:89:f4:39:ae:34:d8:a3:9d:
89:fe:85:94:14:e9:1a:76:0e:9a:d9:2f:4c:03:f4:4b:72:9d:
a4:e1:e4:ad:15:2f:f5:39:38:27:c3:f3:7a:56:27:b6:08:83:
62:c0:85:da:0a:b9:b1:6d:3a:c9:10:a8:aa:d9:48:0d:e0:de:
74:dc:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:34 2026 by rpki-client