Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: ltzwW1gSbREM+JqhmzSceee+PjKxstdLljTfzoDBgfs=
Subject key identifier: 25:0D:18:E7:55:4A:43:56:11:C8:4A:41:4F:5A:E6:66:E2:27:C7:5F
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 01A0D9BB8382AF9EE3E47DB646C52ADC2694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 18:02:19 +0000
Manifest this update: Fri 25 Sep 2026 18:02:19 +0000
Manifest next update: Sat 26 Sep 2026 18:02:19 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: X1YoJ4+bkF7KLZRYyc8sh8186wmta8nQhwudU32CkVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:83:82:af:9e:e3:e4:7d:b6:46:c5:2a:dc:26:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Sep 25 18:02:19 2026 GMT
Not After : Sep 26 18:02:19 2026 GMT
Subject: CN=250d18e7554a435611c84a414f5ae666e227c75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:11:5e:fa:50:54:31:98:9d:2d:0e:9f:f0:
f3:ec:65:26:9b:08:2b:18:49:a8:56:02:2f:dd:f3:
d1:e7:f9:1f:bd:bf:36:99:f8:6f:b9:85:85:9f:38:
41:8c:3a:20:aa:e3:15:27:75:a3:51:4b:1b:47:60:
7f:e1:29:23:bd:6d:fc:0c:c0:af:bc:da:a0:3f:6b:
c0:6c:0d:f8:b4:a7:57:82:78:4b:07:58:95:c4:d7:
99:ef:62:ac:8e:cd:be:17:f7:23:13:00:ed:98:1e:
ad:ac:eb:f9:0c:f4:6b:0b:eb:81:f8:1c:a4:0e:1d:
37:10:61:27:2e:88:f7:95:81:57:2d:c0:5b:86:1d:
68:00:b9:32:ab:20:cc:67:2b:60:ee:ed:ec:26:e1:
1d:dd:ff:93:14:3b:1c:ce:5c:23:6e:c9:39:1f:a8:
95:8a:43:ef:0f:ba:cc:32:bc:35:a8:05:c3:09:10:
60:88:eb:ed:18:af:11:64:ad:2d:ab:b1:b0:cd:ab:
9a:fd:f1:b8:73:c9:64:31:b0:0d:64:81:25:0f:2e:
bb:b8:18:9d:fe:51:c6:bd:8f:f7:59:d5:d0:a5:62:
02:17:d6:e1:d4:5a:cf:c4:e5:61:9c:23:4b:bf:fd:
0f:2e:ee:1a:f6:05:7f:08:47:fb:07:14:d3:75:6c:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:18:E7:55:4A:43:56:11:C8:4A:41:4F:5A:E6:66:E2:27:C7:5F
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:00:2c:84:27:29:bc:88:64:88:4d:c0:82:76:ad:61:a3:ea:
c5:d0:16:d5:27:0d:bb:84:66:ed:20:ba:e3:0b:06:28:b4:75:
4b:41:22:65:cb:2a:cb:37:c7:ae:e1:d0:4b:ee:53:2d:32:03:
74:28:31:20:84:82:61:6f:24:ae:e2:0c:bd:51:8b:c3:42:2b:
79:22:a5:ce:71:94:fd:00:75:65:5b:c3:b2:49:51:52:f2:db:
de:94:c9:6f:7d:a4:71:42:3e:31:1e:9a:40:cf:11:d5:53:ba:
ff:27:15:dc:8a:ec:cf:e3:62:b6:ac:3b:23:e0:76:f9:3f:00:
b5:2c:8a:45:fd:4a:e0:f9:d1:a7:a1:4e:95:3a:2e:c3:9c:37:
72:33:7f:bc:1e:2e:8a:ea:78:ff:da:ac:42:34:14:37:a5:4e:
fb:47:04:78:29:3e:b2:65:b3:00:8b:9e:a2:15:fc:37:0d:52:
2d:cc:ed:a8:bf:c0:5a:7e:17:65:de:30:f8:1c:5d:3c:e6:39:
ee:88:fa:88:93:aa:c2:14:f1:94:f5:9a:ea:91:e2:7d:da:25:
92:cb:eb:12:39:06:f2:0b:9a:68:92:81:a9:4e:b6:e5:f8:53:
73:bb:3f:ef:0f:6f:d9:ff:90:14:5b:39:b6:4c:ea:ab:4d:79:
91:60:96:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu4OCr57j5H22RsUq3CaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjYzNTk5NDljZWNmMjQxOGM1YTJkYjIxYWNhYjg1ZGQ5
MTkzZDgwHhcNMjYwOTI1MTgwMjE5WhcNMjYwOTI2MTgwMjE5WjAzMTEwLwYDVQQD
EygyNTBkMThlNzU1NGE0MzU2MTFjODRhNDE0ZjVhZTY2NmUyMjdjNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb8RXvpQVDGYnS0On/Dz7GUmmwgr
GEmoVgIv3fPR5/kfvb82mfhvuYWFnzhBjDogquMVJ3WjUUsbR2B/4SkjvW38DMCv
vNqgP2vAbA34tKdXgnhLB1iVxNeZ72Ksjs2+F/cjEwDtmB6trOv5DPRrC+uB+Byk
Dh03EGEnLoj3lYFXLcBbhh1oALkyqyDMZytg7u3sJuEd3f+TFDsczlwjbsk5H6iV
ikPvD7rMMrw1qAXDCRBgiOvtGK8RZK0tq7Gwzaua/fG4c8lkMbANZIElDy67uBid
/lHGvY/3WdXQpWICF9bh1FrPxOVhnCNLv/0PLu4a9gV/CEf7BxTTdWwnZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUNGOdVSkNWEchKQU9a5mbiJ8dfMB8GA1UdIwQY
MBaAFHYmNZlJzs8kGMWi2yGsq4XdkZPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMt
YzgwNDA4M2U3ZDQ5LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMtYzgwNDA4M2U3ZDQ5
LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQAshCcp
vIhkiE3AgnatYaPqxdAW1ScNu4Rm7SC64wsGKLR1S0EiZcsqyzfHruHQS+5TLTID
dCgxIISCYW8kruIMvVGLw0IreSKlznGU/QB1ZVvDsklRUvLb3pTJb32kcUI+MR6a
QM8R1VO6/ycV3Irsz+Nitqw7I+B2+T8AtSyKRf1K4PnRp6FOlTouw5w3cjN/vB4u
iup4/9qsQjQUN6VO+0cEeCk+smWzAIueohX8Nw1SLcztqL/AWn4XZd4w+BxdPOY5
7oj6iJOqwhTxlPWa6pHifdolksvrEjkG8guaaJKBqU625fhTc7s/7w9v2f+QFFs5
tkzqq015kWCWXw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:04 2026 by rpki-client