Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: e5y5/6LN22v6OMSSnrYcQ8OyERTzdkq3auWBm+xi9K8=
Subject key identifier: 6A:47:B7:4F:18:3F:EB:DA:D4:93:B9:1F:7D:86:D0:22:8D:52:CB:03
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01A0D5A69B75317E6D8D1AF18D99A1CB1A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 0921
Signing time: Thu 24 Sep 2026 23:01:00 +0000
Manifest this update: Thu 24 Sep 2026 23:01:00 +0000
Manifest next update: Fri 25 Sep 2026 23:01:00 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: 7Vil/L3QZFBBewBfIS21QQxT1W8kg22bKqHG8laSAVU=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:9b:75:31:7e:6d:8d:1a:f1:8d:99:a1:cb:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Sep 24 23:01:00 2026 GMT
Not After : Sep 25 23:01:00 2026 GMT
Subject: CN=6a47b74f183febdad493b91f7d86d0228d52cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:5b:1a:4f:18:e4:1f:b6:1e:8c:74:f4:90:
5d:b5:cc:cc:5c:2f:5c:e6:93:6c:7e:44:c5:32:c0:
f7:8e:ef:d2:50:0e:40:d3:62:5d:00:91:a3:c6:1f:
c7:8b:9d:a7:ad:07:63:d4:38:bf:c5:ea:48:5e:14:
3f:7e:bc:86:9c:3c:5d:cc:f4:a2:ea:43:6b:94:82:
c3:b3:1d:41:7c:85:00:7c:1d:2d:0f:d0:e0:6f:03:
75:bb:9e:72:05:e0:16:33:61:93:0b:67:a7:c3:c0:
a4:06:64:f6:03:86:10:84:ff:73:a8:ca:b1:1c:74:
d4:f0:8f:3a:58:d8:f5:28:55:b6:4b:0e:12:31:ec:
a7:92:39:af:4f:94:bc:67:43:cf:10:a9:31:19:b1:
a5:77:38:db:c6:d6:8e:8b:87:e7:ff:4b:a0:8b:6f:
e6:b2:02:9c:81:42:56:c5:e0:f4:3f:08:7a:fe:c4:
b4:b0:9a:e5:17:7e:1e:88:fe:86:2c:c5:0f:80:a6:
df:b2:78:92:80:b5:d8:fc:fe:5c:f5:f1:2c:02:f1:
44:f4:6e:7c:0e:5e:58:e4:6d:82:f3:83:f7:f8:77:
4f:78:31:6d:26:cb:a8:d1:dc:54:3f:6c:cc:88:ba:
ab:5c:fa:96:78:59:d1:e8:9e:c1:fb:03:38:b6:a4:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:47:B7:4F:18:3F:EB:DA:D4:93:B9:1F:7D:86:D0:22:8D:52:CB:03
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:75:cc:74:40:85:56:02:1c:22:eb:42:1d:7e:52:f0:34:76:
da:7f:2a:24:d4:07:d3:61:a4:61:aa:89:db:c5:cd:db:3f:7f:
6e:9b:a6:27:eb:0c:66:5c:43:c2:9f:e6:2a:8a:65:e9:0e:ed:
f1:b2:70:d2:e2:38:7f:a0:e3:1e:c8:19:a4:3e:26:67:f3:84:
82:d1:d2:cc:dd:44:5f:6d:db:52:01:44:88:c9:bf:03:32:32:
4e:13:81:5f:de:c9:96:aa:d0:7b:6e:91:61:df:94:1c:6e:d4:
47:1a:4c:7b:52:4f:42:79:68:98:14:6e:09:d9:89:77:e4:dd:
fe:d3:2d:ca:83:72:38:4f:16:1e:ed:29:17:ee:4a:52:ae:bf:
f5:a9:f7:ed:c3:72:f0:05:18:f3:5d:e2:2b:63:a6:da:a7:1e:
cd:24:a3:82:12:16:05:4f:f8:e0:c3:12:18:14:a1:83:18:01:
6c:11:23:4f:ba:83:1f:46:b8:fb:0c:b9:0a:e5:87:79:44:42:
54:0a:64:ac:5f:e6:2a:27:9d:60:95:66:0d:5d:b5:75:f0:c8:
76:ad:a7:14:cc:16:83:73:bc:92:e9:74:38:34:81:bf:cd:a1:
b7:df:0a:4a:30:50:2e:86:aa:45:d1:1e:1c:04:c4:ae:af:25:
45:67:50:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVppt1MX5tjRrxjZmhyxqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWZiYWFhYzY1NDFhYjMxODUyOWViMDI1NjEzYzY1MjBl
NDc2NDYwHhcNMjYwOTI0MjMwMTAwWhcNMjYwOTI1MjMwMTAwWjAzMTEwLwYDVQQD
Eyg2YTQ3Yjc0ZjE4M2ZlYmRhZDQ5M2I5MWY3ZDg2ZDAyMjhkNTJjYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/JbGk8Y5B+2Hox09JBdtczMXC9c
5pNsfkTFMsD3ju/SUA5A02JdAJGjxh/Hi52nrQdj1Di/xepIXhQ/fryGnDxdzPSi
6kNrlILDsx1BfIUAfB0tD9DgbwN1u55yBeAWM2GTC2enw8CkBmT2A4YQhP9zqMqx
HHTU8I86WNj1KFW2Sw4SMeynkjmvT5S8Z0PPEKkxGbGldzjbxtaOi4fn/0ugi2/m
sgKcgUJWxeD0Pwh6/sS0sJrlF34eiP6GLMUPgKbfsniSgLXY/P5c9fEsAvFE9G58
Dl5Y5G2C84P3+HdPeDFtJsuo0dxUP2zMiLqrXPqWeFnR6J7B+wM4tqS0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpHt08YP+va1JO5H32G0CKNUssDMB8GA1UdIwQY
MBaAFHefuqrGVBqzGFKesCVhPGUg5HZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjkt
MjAwMjQ5MThlZTY2LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjktMjAwMjQ5MThlZTY2
LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXXMdECF
VgIcIutCHX5S8DR22n8qJNQH02GkYaqJ28XN2z9/bpumJ+sMZlxDwp/mKopl6Q7t
8bJw0uI4f6DjHsgZpD4mZ/OEgtHSzN1EX23bUgFEiMm/AzIyThOBX97JlqrQe26R
Yd+UHG7URxpMe1JPQnlomBRuCdmJd+Td/tMtyoNyOE8WHu0pF+5KUq6/9an37cNy
8AUY813iK2Om2qcezSSjghIWBU/44MMSGBShgxgBbBEjT7qDH0a4+wy5CuWHeURC
VApkrF/mKiedYJVmDV21dfDIdq2nFMwWg3O8kul0ODSBv82ht98KSjBQLoaqRdEe
HATErq8lRWdQcA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:15 2026 by rpki-client