Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: Sv27LlCXzaiAQkhUjAHvmWgzN8N1NgJpHhH0qIrEuhA=
Subject key identifier: 4B:80:EA:00:1D:25:31:E4:E5:03:40:13:97:59:95:E8:3D:DE:04:CE
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 01A0DA95F0045644EA4F1FE7344E2B08AAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0C60
Signing time: Fri 25 Sep 2026 22:00:54 +0000
Manifest this update: Fri 25 Sep 2026 22:00:54 +0000
Manifest next update: Sat 26 Sep 2026 22:00:54 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: I3L0HBEEhZXNR0hU4Rr0jsVbZw2aePeWSJ0bXN6rMI8=)
3: Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa (hash: 841fgQfyyxsP5yvIt805yflD9ODKBpncCMo1CIp2tRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:95:f0:04:56:44:ea:4f:1f:e7:34:4e:2b:08:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Sep 25 22:00:54 2026 GMT
Not After : Sep 26 22:00:54 2026 GMT
Subject: CN=4b80ea001d2531e4e5034013975995e83dde04ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:b8:4d:23:ca:18:a3:79:c3:2f:dd:25:7d:
50:24:a9:1a:bc:e6:5f:91:6b:4f:4e:4e:a0:c0:f2:
b3:28:77:09:ee:c8:59:7c:37:32:8a:f2:51:66:39:
76:b6:ed:d5:2d:08:a9:9a:6c:cd:29:5c:9a:a1:7d:
e8:72:ca:4e:7f:60:cc:48:bd:ba:7c:30:bf:62:58:
8b:41:c7:f0:03:1e:51:81:4b:61:2d:0d:0e:1b:78:
85:9c:9c:62:9d:65:06:1e:b1:1a:a2:c8:f8:f4:dc:
e2:c7:14:60:d4:d4:fe:f0:81:f7:8c:32:d8:76:d0:
2d:f8:01:1e:82:87:f0:ca:66:40:68:e6:e6:61:19:
8b:d3:1f:07:6c:47:75:27:84:94:1d:eb:a7:63:05:
0f:92:5d:d6:85:3d:ad:21:f3:f8:49:1c:bf:77:d7:
95:05:53:75:52:a0:99:41:18:dc:37:c3:ec:72:4a:
9c:4d:9c:a2:80:d5:9f:e6:86:78:2e:0d:12:99:1e:
a1:59:df:f5:70:ba:79:72:dc:86:f8:3c:50:89:dd:
77:7c:cb:97:12:5b:c1:bf:c2:61:7e:46:44:cf:1a:
26:79:f6:0f:00:45:04:0f:0d:69:65:83:2a:7d:87:
be:8f:9d:a4:a0:53:e8:9a:d3:bf:30:17:fc:8b:48:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:EA:00:1D:25:31:E4:E5:03:40:13:97:59:95:E8:3D:DE:04:CE
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:c6:b2:f0:f5:e7:1f:69:47:b0:d5:4a:b6:15:c0:4d:dd:
54:ed:9d:f4:2e:86:41:93:74:27:31:1d:db:3c:cf:f4:3b:fb:
9b:db:cd:88:78:71:cb:31:6c:f6:85:74:f9:8c:d1:f5:9d:69:
fb:6d:6a:fe:51:8f:58:60:cf:d9:ba:e4:52:ae:d2:71:f3:34:
75:dc:30:58:ee:e4:40:1f:ba:d4:dd:1a:5b:e3:bb:a2:ce:e1:
f2:6a:d1:b6:c5:72:32:39:0c:4c:2b:46:1d:14:58:7e:8c:a5:
bc:cc:0d:89:f8:7e:a5:df:c3:b4:0b:6f:63:7b:0e:14:e1:b9:
4a:6e:9f:d3:08:6e:75:1e:69:dc:fe:13:6d:34:e9:18:5c:57:
68:3c:41:00:34:42:df:49:3d:e2:2d:a8:67:a5:a0:e3:17:9c:
42:11:57:9c:0c:a0:c3:ca:34:1f:49:fc:77:33:3e:c4:27:49:
c4:d7:e6:ca:40:1b:ab:0a:13:06:64:14:26:5c:ad:32:b7:0f:
61:ad:1d:be:83:34:d6:a9:6a:5e:d1:c6:7c:c2:56:cb:0f:ea:
04:ec:6c:a2:ed:52:54:f4:1d:01:78:8c:13:18:fa:e3:b8:0c:
84:af:12:90:e1:80:76:5b:8c:1c:e5:a3:17:9b:ae:f1:2b:b6:
e1:d4:1f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalfAEVkTqTx/nNE4rCKq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODc0YTVmNTI3MzRlMjYwZTdiZmE0ZDQ1MTE0YWRkOTI3
N2UzNTMwHhcNMjYwOTI1MjIwMDU0WhcNMjYwOTI2MjIwMDU0WjAzMTEwLwYDVQQD
Eyg0YjgwZWEwMDFkMjUzMWU0ZTUwMzQwMTM5NzU5OTVlODNkZGUwNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO+4TSPKGKN5wy/dJX1QJKkavOZf
kWtPTk6gwPKzKHcJ7shZfDcyivJRZjl2tu3VLQipmmzNKVyaoX3ocspOf2DMSL26
fDC/YliLQcfwAx5RgUthLQ0OG3iFnJxinWUGHrEaosj49NzixxRg1NT+8IH3jDLY
dtAt+AEegofwymZAaObmYRmL0x8HbEd1J4SUHeunYwUPkl3WhT2tIfP4SRy/d9eV
BVN1UqCZQRjcN8PsckqcTZyigNWf5oZ4Lg0SmR6hWd/1cLp5ctyG+DxQid13fMuX
ElvBv8JhfkZEzxomefYPAEUEDw1pZYMqfYe+j52koFPomtO/MBf8i0iCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuA6gAdJTHk5QNAE5dZleg93gTOMB8GA1UdIwQY
MBaAFAyHSl9Sc04mDnv6TUURSt2Sd+NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEt
YTBlMzdmMjVhNTE1LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEtYTBlMzdmMjVhNTE1
LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPirGsvD1
5x9pR7DVSrYVwE3dVO2d9C6GQZN0JzEd2zzP9Dv7m9vNiHhxyzFs9oV0+YzR9Z1p
+21q/lGPWGDP2brkUq7ScfM0ddwwWO7kQB+61N0aW+O7os7h8mrRtsVyMjkMTCtG
HRRYfoylvMwNifh+pd/DtAtvY3sOFOG5Sm6f0whudR5p3P4TbTTpGFxXaDxBADRC
30k94i2oZ6Wg4xecQhFXnAygw8o0H0n8dzM+xCdJxNfmykAbqwoTBmQUJlytMrcP
Ya0dvoM01qlqXtHGfMJWyw/qBOxsou1SVPQdAXiMExj647gMhK8SkOGAdluMHOWj
F5uu8Su24dQfBA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:31:21 2026 by rpki-client