Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: Tus4coCHGr3bidWkppCWf+Y9alvt5xOeu0jAlkkcJ68=
Subject key identifier: DE:AC:03:8F:AA:CF:C5:65:46:06:0C:34:72:45:99:7D:66:14:77:86
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 01A0D570211E6E8F2E0F65FE56746F70464D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0AD6
Signing time: Thu 24 Sep 2026 22:01:30 +0000
Manifest this update: Thu 24 Sep 2026 22:01:30 +0000
Manifest next update: Fri 25 Sep 2026 22:01:30 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 2CSHo6i+AzjsfIugZoFi5/wfsvwx1eFrDXkYmRu3wkQ=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:21:1e:6e:8f:2e:0f:65:fe:56:74:6f:70:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Sep 24 22:01:30 2026 GMT
Not After : Sep 25 22:01:30 2026 GMT
Subject: CN=deac038faacfc56546060c347245997d66147786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:09:c9:65:51:9d:0e:76:24:42:44:05:e8:
f0:82:c7:ea:ac:08:02:e9:61:2a:fd:5d:c8:eb:61:
b4:0c:0c:6e:17:94:88:fa:d3:11:1f:53:a9:95:01:
6f:22:9f:bf:2b:c6:f8:70:9b:4d:ea:bd:7d:e4:5b:
9a:50:ab:11:9d:09:b8:57:e3:75:73:bc:e9:ca:27:
52:11:44:f4:b9:f8:d1:37:04:95:3f:45:2d:a6:a5:
2f:c4:db:17:9c:5d:56:7c:a4:c2:91:06:62:e4:2e:
c1:a7:c2:a8:e1:01:4b:e3:54:f9:24:2c:bb:d3:5e:
a0:d4:fb:58:04:0b:8f:bd:c1:83:cc:57:a2:6f:96:
72:45:ad:49:0d:ab:58:06:e6:4f:64:27:2b:86:05:
0d:cf:e6:9f:ce:54:d4:23:e4:6c:80:eb:3f:2e:32:
08:2a:54:f7:4e:8e:16:fb:98:8a:95:47:8d:8e:2b:
99:64:e8:33:8b:c0:a1:e1:83:1f:59:64:f7:9a:f6:
11:04:ce:7c:c1:01:5e:9a:72:03:a4:a2:cd:4e:6c:
ff:d9:af:bc:b7:da:e4:d5:76:40:8b:7b:47:84:95:
35:ee:5b:33:ed:eb:e8:9f:63:1a:f5:ff:d9:d2:fa:
65:0e:cc:09:4e:2d:4b:fa:b1:c8:09:17:57:b0:22:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:03:8F:AA:CF:C5:65:46:06:0C:34:72:45:99:7D:66:14:77:86
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ee:3a:9f:d9:08:8f:15:98:51:f8:b5:7a:46:b3:f6:2f:83:
51:c3:09:6f:21:79:f0:30:40:c2:a0:c2:63:15:d2:1a:2c:0e:
e3:02:f3:85:e4:b2:03:b7:04:17:9e:a4:f0:94:a8:ca:0a:87:
36:d4:36:e6:09:d4:7a:27:ed:9e:b7:58:60:4c:23:ea:e1:34:
0d:ec:86:33:fa:cb:41:96:1f:dc:e4:a9:c2:55:14:3e:04:69:
cd:7f:86:d5:c8:a7:62:98:02:be:f4:91:e0:45:18:d9:a8:dc:
4d:37:a1:a3:92:9a:76:8d:2d:16:74:f9:59:d4:06:6d:12:87:
a0:41:eb:63:c9:f7:43:67:f3:77:8f:78:cc:b2:69:8a:2a:01:
ae:b1:04:5f:9b:e0:69:4a:6b:01:30:9b:4e:1a:de:44:41:42:
71:3c:2a:ea:08:c4:4f:44:ec:5c:54:10:dd:47:e5:79:72:3d:
a6:7d:48:d4:d5:6d:bb:e3:0e:25:7b:b8:26:93:6c:d0:b8:56:
f4:5e:13:62:93:56:fd:bc:dc:c3:50:69:0f:8e:fa:f5:8a:a3:
44:3a:17:dd:8c:95:52:c6:34:7d:51:53:d1:0f:52:50:85:7f:
a0:51:96:23:b0:f7:d6:7a:d4:ff:38:72:f4:9f:29:13:9b:7f:
bc:33:b9:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcCEebo8uD2X+VnRvcEZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjYwOTI0MjIwMTMwWhcNMjYwOTI1MjIwMTMwWjAzMTEwLwYDVQQD
EyhkZWFjMDM4ZmFhY2ZjNTY1NDYwNjBjMzQ3MjQ1OTk3ZDY2MTQ3Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQYJyWVRnQ52JEJEBejwgsfqrAgC
6WEq/V3I62G0DAxuF5SI+tMRH1OplQFvIp+/K8b4cJtN6r195FuaUKsRnQm4V+N1
c7zpyidSEUT0ufjRNwSVP0UtpqUvxNsXnF1WfKTCkQZi5C7Bp8Ko4QFL41T5JCy7
016g1PtYBAuPvcGDzFeib5ZyRa1JDatYBuZPZCcrhgUNz+afzlTUI+RsgOs/LjII
KlT3To4W+5iKlUeNjiuZZOgzi8Ch4YMfWWT3mvYRBM58wQFemnIDpKLNTmz/2a+8
t9rk1XZAi3tHhJU17lsz7evon2Ma9f/Z0vplDswJTi1L+rHICRdXsCLZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6sA4+qz8VlRgYMNHJFmX1mFHeGMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe46n9kI
jxWYUfi1ekaz9i+DUcMJbyF58DBAwqDCYxXSGiwO4wLzheSyA7cEF56k8JSoygqH
NtQ25gnUeiftnrdYYEwj6uE0DeyGM/rLQZYf3OSpwlUUPgRpzX+G1cinYpgCvvSR
4EUY2ajcTTeho5Kado0tFnT5WdQGbRKHoEHrY8n3Q2fzd494zLJpiioBrrEEX5vg
aUprATCbThreREFCcTwq6gjET0TsXFQQ3UfleXI9pn1I1NVtu+MOJXu4JpNs0LhW
9F4TYpNW/bzcw1BpD4769YqjRDoX3YyVUsY0fVFT0Q9SUIV/oFGWI7D31nrU/zhy
9J8pE5t/vDO5oQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:25 2026 by rpki-client