Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
File: DeH7BAgcX3CAdrXdUHceLMxlaUU.mft (raw, json)
Hash identifier: eddpIZNiDxI6z42xSFF0zT/NlMt2OSAWoUirEHkzOb4=
Subject key identifier: 7A:C1:A0:89:EC:79:F1:70:86:42:50:C6:4A:B9:D8:58:A5:8F:58:B7
Authority key identifier: 0D:E1:FB:04:08:1C:5F:70:80:76:B5:DD:50:77:1E:2C:CC:65:69:45
Certificate issuer: /CN=0de1fb04081c5f708076b5dd50771e2ccc656945
Certificate serial: 01A139A4C326B3A2C2D23F8EEB8D8D8EA391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
Manifest number: BA
Signing time: Wed 14 Oct 2026 09:01:01 +0000
Manifest this update: Wed 14 Oct 2026 09:01:01 +0000
Manifest next update: Thu 15 Oct 2026 09:01:01 +0000
Files and hashes: 1: DeH7BAgcX3CAdrXdUHceLMxlaUU.crl (hash: SmsRdgEb6UtZWoAbWkmcD+g4LROgGVeN9LIxxfRgYIg=)
2: wI7UndC2M3BWU4VVyxjKuzxjr9A.roa (hash: Q4rnFLlrV4+tUIOjVRqfsksI79QiqJSMhbsO2L2+zVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:c3:26:b3:a2:c2:d2:3f:8e:eb:8d:8d:8e:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de1fb04081c5f708076b5dd50771e2ccc656945
Validity
Not Before: Oct 14 09:01:01 2026 GMT
Not After : Oct 15 09:01:01 2026 GMT
Subject: CN=7ac1a089ec79f170864250c64ab9d858a58f58b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:36:db:ad:ca:46:75:de:4f:be:c5:d6:7c:
d6:c9:bc:23:4b:ce:4b:d0:a1:8b:a8:a4:5a:29:a8:
c1:bf:a2:a0:a1:03:35:58:79:a2:6b:1f:f4:5d:a9:
26:f1:5e:9e:45:6f:19:1c:a4:35:51:20:61:b9:c8:
2f:34:57:22:89:a1:d3:58:16:6b:31:62:35:5a:f9:
73:37:27:58:70:de:17:3b:c8:0d:b0:1d:ab:64:e7:
8e:d9:ee:21:95:0b:30:86:82:0d:ac:b7:9e:ba:c9:
fd:f4:59:d7:53:89:69:1a:9b:cd:d4:2b:17:7b:6f:
b8:39:f8:7d:dc:38:ea:f0:6c:ec:f3:27:af:51:43:
d7:53:68:77:34:7e:55:bb:30:06:d3:15:a3:33:b5:
9d:64:71:0b:8d:c1:0f:d2:e0:11:23:0a:26:4a:a3:
10:9b:e8:18:c6:ef:5c:7e:87:24:13:b9:c5:47:0a:
9b:d4:fd:27:65:cd:bd:6e:ed:ec:64:77:33:b8:a5:
28:4f:b0:e6:f7:12:db:fd:13:e4:56:bb:9c:83:cd:
aa:6f:85:3f:09:64:4c:57:1c:6b:9b:0b:b7:db:2e:
1b:f2:f6:5d:4c:0b:07:3f:ea:c2:0d:6c:6c:fb:67:
82:a8:95:ae:99:47:59:0a:2a:e2:38:49:e0:41:60:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C1:A0:89:EC:79:F1:70:86:42:50:C6:4A:B9:D8:58:A5:8F:58:B7
X509v3 Authority Key Identifier:
keyid:0D:E1:FB:04:08:1C:5F:70:80:76:B5:DD:50:77:1E:2C:CC:65:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0c:a7:7f:d4:f8:30:90:e4:16:b5:b7:2d:58:6c:46:6a:a6:
67:bd:65:3d:ce:37:96:5f:64:f1:fb:f1:a0:a5:b5:c3:a2:45:
d0:b0:61:28:99:cb:8f:20:4b:3c:29:44:9e:63:52:47:95:90:
a7:67:52:6f:29:2a:0a:db:8e:33:74:67:32:fd:97:40:58:58:
f9:97:8e:87:45:95:e9:6a:97:9d:64:b1:67:ac:5d:d2:7d:61:
5a:b9:1d:40:89:2f:f1:9d:ed:d7:1a:23:7d:68:fd:61:a5:50:
17:a5:5d:9d:71:fc:0d:57:99:d8:39:bc:4c:f6:93:4f:c2:1e:
dd:78:af:20:11:9c:76:ae:af:c9:69:37:a1:83:90:32:7f:1a:
fc:4f:25:9f:81:5b:5a:a7:d5:e6:9a:66:0b:94:c1:ef:d6:a7:
8d:1e:b6:85:97:f6:a9:f8:91:35:62:d5:b8:a2:a5:9f:13:da:
a9:98:1e:bf:c2:4c:d0:fe:7f:42:7e:e9:fb:bb:c6:7e:42:cb:
97:ab:46:4a:ee:d1:8e:b8:ed:0b:ae:c9:17:2e:b9:f5:f6:0a:
8a:64:67:9b:68:9e:77:a7:48:ce:90:16:ef:87:52:f9:17:5e:
63:54:1b:b3:76:9c:66:14:27:d0:75:04:8a:60:41:f3:24:24:
85:47:16:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5pMMms6LC0j+O642NjqORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTFmYjA0MDgxYzVmNzA4MDc2YjVkZDUwNzcxZTJjY2M2
NTY5NDUwHhcNMjYxMDE0MDkwMTAxWhcNMjYxMDE1MDkwMTAxWjAzMTEwLwYDVQQD
Eyg3YWMxYTA4OWVjNzlmMTcwODY0MjUwYzY0YWI5ZDg1OGE1OGY1OGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVE2263KRnXeT77F1nzWybwjS85L
0KGLqKRaKajBv6KgoQM1WHmiax/0Xakm8V6eRW8ZHKQ1USBhucgvNFciiaHTWBZr
MWI1WvlzNydYcN4XO8gNsB2rZOeO2e4hlQswhoINrLeeusn99FnXU4lpGpvN1CsX
e2+4Ofh93Djq8Gzs8yevUUPXU2h3NH5VuzAG0xWjM7WdZHELjcEP0uARIwomSqMQ
m+gYxu9cfockE7nFRwqb1P0nZc29bu3sZHczuKUoT7Dm9xLb/RPkVrucg82qb4U/
CWRMVxxrmwu32y4b8vZdTAsHP+rCDWxs+2eCqJWumUdZCiriOEngQWCq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrBoInsefFwhkJQxkq52Filj1i3MB8GA1UdIwQY
MBaAFA3h+wQIHF9wgHa13VB3HizMZWlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVIN0JBZ2NYM0NBZHJYZFVIY2VMTXhsYVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wY2M5MzctNjA1Yy00MjE1LTkzZTYt
ODhhZjMzY2Y1YWM5LzEvRGVIN0JBZ2NYM0NBZHJYZFVIY2VMTXhsYVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wY2M5MzctNjA1Yy00MjE1LTkzZTYtODhhZjMzY2Y1YWM5
LzEvRGVIN0JBZ2NYM0NBZHJYZFVIY2VMTXhsYVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAynf9T4
MJDkFrW3LVhsRmqmZ71lPc43ll9k8fvxoKW1w6JF0LBhKJnLjyBLPClEnmNSR5WQ
p2dSbykqCtuOM3RnMv2XQFhY+ZeOh0WV6WqXnWSxZ6xd0n1hWrkdQIkv8Z3t1xoj
fWj9YaVQF6VdnXH8DVeZ2Dm8TPaTT8Ie3XivIBGcdq6vyWk3oYOQMn8a/E8ln4Fb
WqfV5ppmC5TB79anjR62hZf2qfiRNWLVuKKlnxPaqZgev8JM0P5/Qn7p+7vGfkLL
l6tGSu7RjrjtC67JFy659fYKimRnm2ied6dIzpAW74dS+RdeY1Qbs3acZhQn0HUE
imBB8yQkhUcWBw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 19:16:58 2026 by rpki-client