Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: 75brh6QG4HEM+sBMDVoxEUCZ6UXVjeSQ3iZnUOVnGio=
Subject key identifier: E2:CA:F0:0E:A1:01:52:0B:35:4D:9E:F2:86:49:BD:BC:5E:A1:6F:F1
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 01A103C8D1432B50541B3DF4BFD379EE7AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 16FE
Signing time: Sat 03 Oct 2026 22:00:54 +0000
Manifest this update: Sat 03 Oct 2026 22:00:54 +0000
Manifest next update: Sun 04 Oct 2026 22:00:54 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: t0uBr1kRYLNF+jLdBsZ8J0H960K5Y0BCPlnVduApXqE=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c8:d1:43:2b:50:54:1b:3d:f4:bf:d3:79:ee:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Oct 3 22:00:54 2026 GMT
Not After : Oct 4 22:00:54 2026 GMT
Subject: CN=e2caf00ea101520b354d9ef28649bdbc5ea16ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:35:3e:f1:8f:80:f5:c4:cc:88:b8:9d:da:
ba:17:30:6f:6d:e2:44:f7:ca:09:49:f1:a4:6c:39:
e4:f3:46:04:cf:7e:45:e4:50:10:36:7e:46:c2:01:
5c:03:dc:3c:6e:00:6c:93:4f:5d:1c:38:e4:65:f8:
a4:ad:da:9e:78:d5:e5:75:09:95:d4:84:41:1f:66:
32:cb:57:a9:a0:b2:bb:9a:13:d9:6b:b3:64:12:a1:
cd:7c:7c:e7:e0:e1:41:10:e8:0f:12:72:cc:dc:19:
84:b7:3c:1b:ec:6a:0d:10:1c:83:fc:cd:d2:dc:8c:
90:5c:9f:93:b6:b5:e5:1e:f7:55:6d:0a:29:5b:20:
87:a2:3c:a0:4d:93:03:0c:44:d4:d7:46:d4:58:21:
9f:90:d8:0a:09:f3:12:7c:ac:08:ea:a5:a8:4e:40:
d0:a5:91:0b:e4:58:13:6d:72:74:e5:14:06:58:62:
84:23:f2:2d:43:ea:23:42:66:bb:69:b0:f2:d5:51:
0c:39:2e:05:56:a5:fb:5e:86:95:24:6b:91:4f:b3:
c4:9c:f1:23:7d:83:35:ff:30:d0:d6:38:5c:d8:be:
ca:93:23:a3:11:7a:38:53:99:9a:38:af:0a:fc:d7:
82:13:57:b7:53:7e:05:3e:7e:50:6d:47:49:55:d0:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:F0:0E:A1:01:52:0B:35:4D:9E:F2:86:49:BD:BC:5E:A1:6F:F1
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:51:c2:4d:22:70:7d:b7:c5:72:a7:ba:dc:84:56:f3:56:fc:
ed:bb:d3:1d:69:78:76:f5:70:f6:a6:75:13:05:a0:8f:6b:1e:
4c:85:59:bb:59:ce:95:24:ac:0d:23:86:bc:63:13:f7:91:12:
10:5b:c4:4c:33:dc:55:5f:6d:e9:c6:de:31:3c:77:5d:6e:01:
99:58:8d:7a:59:3e:60:d5:87:93:8a:40:c7:c8:ed:b4:cf:f6:
9e:92:db:ee:9b:18:9c:4e:69:bd:1d:a5:80:da:3e:ee:85:b2:
4c:ac:11:69:7c:44:95:84:d7:83:d4:c6:ea:2e:2d:3e:d3:e7:
83:fa:80:1a:3d:65:cd:21:68:b9:62:91:86:c7:3e:de:9f:e8:
46:8b:c1:b6:4d:f5:7a:c1:ad:05:1c:67:8c:2b:06:93:d5:f0:
12:1e:ac:27:f0:09:ec:f7:33:eb:41:f0:da:92:22:b6:21:89:
92:96:d9:71:9b:ca:16:18:9b:98:7a:87:3e:ce:5b:bb:81:3d:
d0:a2:a8:8c:95:c5:3d:d3:14:93:ff:93:ff:32:fa:b7:b1:83:
69:0f:be:c9:3e:a1:13:ec:3a:d7:3a:b2:3a:03:5a:38:34:24:
99:b7:c5:97:0d:a5:8e:92:40:00:86:04:87:2f:95:5c:6b:9e:
d0:b6:d4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDyNFDK1BUGz30v9N57nr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh
ZjE3ZDUwHhcNMjYxMDAzMjIwMDU0WhcNMjYxMDA0MjIwMDU0WjAzMTEwLwYDVQQD
EyhlMmNhZjAwZWExMDE1MjBiMzU0ZDllZjI4NjQ5YmRiYzVlYTE2ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaA1PvGPgPXEzIi4ndq6FzBvbeJE
98oJSfGkbDnk80YEz35F5FAQNn5GwgFcA9w8bgBsk09dHDjkZfikrdqeeNXldQmV
1IRBH2Yyy1epoLK7mhPZa7NkEqHNfHzn4OFBEOgPEnLM3BmEtzwb7GoNEByD/M3S
3IyQXJ+TtrXlHvdVbQopWyCHojygTZMDDETU10bUWCGfkNgKCfMSfKwI6qWoTkDQ
pZEL5FgTbXJ05RQGWGKEI/ItQ+ojQma7abDy1VEMOS4FVqX7XoaVJGuRT7PEnPEj
fYM1/zDQ1jhc2L7KkyOjEXo4U5maOK8K/NeCE1e3U34FPn5QbUdJVdDt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLK8A6hAVILNU2e8oZJvbxeoW/xMB8GA1UdIwQY
MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt
ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3
LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1HCTSJw
fbfFcqe63IRW81b87bvTHWl4dvVw9qZ1EwWgj2seTIVZu1nOlSSsDSOGvGMT95ES
EFvETDPcVV9t6cbeMTx3XW4BmViNelk+YNWHk4pAx8jttM/2npLb7psYnE5pvR2l
gNo+7oWyTKwRaXxElYTXg9TG6i4tPtPng/qAGj1lzSFouWKRhsc+3p/oRovBtk31
esGtBRxnjCsGk9XwEh6sJ/AJ7Pcz60Hw2pIitiGJkpbZcZvKFhibmHqHPs5bu4E9
0KKojJXFPdMUk/+T/zL6t7GDaQ++yT6hE+w61zqyOgNaODQkmbfFlw2ljpJAAIYE
hy+VXGue0LbU1w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:43:01 2026 by rpki-client