Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: EtikhLyU64tPFeNclPgqOv3HPKtVQvUO+lgw3QUE0xY=
Subject key identifier: AB:F3:50:B7:42:C4:B8:77:94:2D:A7:34:F1:83:05:F2:EA:74:F8:CF
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 01A0EC2E9E18160CEA0708E5B68944BB5377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0A64
Signing time: Tue 29 Sep 2026 08:01:13 +0000
Manifest this update: Tue 29 Sep 2026 08:01:13 +0000
Manifest next update: Wed 30 Sep 2026 08:01:13 +0000
Files and hashes: 1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=)
2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: nBLChnaxX6pDevcYPPHS+IBNXCtwFGLZL5NacqV4DTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:9e:18:16:0c:ea:07:08:e5:b6:89:44:bb:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Sep 29 08:01:13 2026 GMT
Not After : Sep 30 08:01:13 2026 GMT
Subject: CN=abf350b742c4b877942da734f18305f2ea74f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:ae:30:51:24:dc:54:95:e9:2a:17:63:2a:
df:b1:b5:06:5f:94:7b:c0:0f:b7:9e:3a:b4:05:a3:
eb:7d:6b:8f:70:84:f8:55:80:84:9b:ca:f1:a9:33:
a6:0c:12:ff:15:9d:5a:b7:9a:67:80:f5:52:e4:e6:
83:a1:90:1b:1e:b7:3c:8b:4b:ac:80:65:2d:f7:dc:
4b:2f:8a:d6:a3:d9:2a:52:48:1b:cd:de:57:62:a9:
13:03:e6:bc:3e:c0:f3:81:40:e8:f9:9b:97:a1:04:
45:3d:7a:2d:d4:90:41:51:65:3c:80:d0:94:a6:b5:
c8:fc:13:b6:91:a5:09:81:08:a6:5c:41:1e:4a:f1:
38:19:1d:13:c3:d7:1a:1f:68:44:c3:65:01:3d:ff:
53:93:d1:75:03:ed:de:83:8d:5e:23:1a:ed:6e:88:
39:df:4b:a6:cb:6b:06:ee:1e:da:32:a9:43:bf:c2:
e9:12:d1:63:13:02:6e:03:2e:7e:ed:34:70:5b:b4:
72:46:25:ed:10:d7:66:4e:d6:57:cb:71:3d:0d:7b:
c0:a4:97:e9:d4:74:8c:6f:b5:46:dc:31:40:ab:3b:
95:8f:4c:8d:4e:19:93:2b:d1:9a:99:a0:d7:91:f4:
72:f7:28:84:01:17:48:83:ce:e3:dc:8c:f6:2d:24:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F3:50:B7:42:C4:B8:77:94:2D:A7:34:F1:83:05:F2:EA:74:F8:CF
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:3e:2f:a0:86:73:4e:49:ca:55:d9:fb:0f:ac:4e:97:08:
cc:c8:71:f8:2a:e0:a4:ee:d2:06:36:1e:b3:08:07:84:0d:7d:
20:04:aa:43:13:e6:fa:cb:09:ed:2e:88:f1:20:08:a1:b1:89:
b1:3e:e5:03:b6:39:26:4f:14:0f:ba:9c:14:23:ca:e3:1d:55:
59:fc:50:df:bb:3d:bf:fe:f2:0d:d0:11:97:fb:63:5d:6a:44:
63:e6:db:7f:e6:95:3e:b1:09:e9:2f:98:57:be:d7:47:54:51:
de:46:5b:90:b3:13:cb:03:6d:17:dc:f6:d3:ed:31:9e:3b:0c:
a4:92:dc:c1:d8:2f:41:69:24:e4:1c:43:b2:7b:58:5a:24:dc:
65:92:5a:67:30:f9:56:c9:38:94:e9:67:7e:2a:93:c9:bd:37:
f0:88:1f:17:fd:ad:71:ab:4e:37:87:bc:3d:9e:4e:14:13:57:
2d:bd:2f:43:6f:6c:2c:26:3e:64:70:0f:34:71:49:a3:6e:9d:
a6:ba:fe:47:18:39:1f:31:41:53:33:49:c9:0f:64:3c:77:84:
0e:f8:8c:13:63:e7:17:7d:d2:40:58:2a:89:0d:c5:73:45:35:
7a:21:76:34:1b:7d:49:32:6e:9c:8d:ae:8c:75:cb:e0:41:53:
e7:81:8a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLp4YFgzqBwjltolEu1N3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2
OWZlYjcwHhcNMjYwOTI5MDgwMTEzWhcNMjYwOTMwMDgwMTEzWjAzMTEwLwYDVQQD
EyhhYmYzNTBiNzQyYzRiODc3OTQyZGE3MzRmMTgzMDVmMmVhNzRmOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6uMFEk3FSV6SoXYyrfsbUGX5R7
wA+3njq0BaPrfWuPcIT4VYCEm8rxqTOmDBL/FZ1at5pngPVS5OaDoZAbHrc8i0us
gGUt99xLL4rWo9kqUkgbzd5XYqkTA+a8PsDzgUDo+ZuXoQRFPXot1JBBUWU8gNCU
prXI/BO2kaUJgQimXEEeSvE4GR0Tw9caH2hEw2UBPf9Tk9F1A+3eg41eIxrtbog5
30umy2sG7h7aMqlDv8LpEtFjEwJuAy5+7TRwW7RyRiXtENdmTtZXy3E9DXvApJfp
1HSMb7VG3DFAqzuVj0yNThmTK9GamaDXkfRy9yiEARdIg87j3Iz2LST5KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvzULdCxLh3lC2nNPGDBfLqdPjPMB8GA1UdIwQY
MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt
YzFlYjAxMTBiZDNhLzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh
LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1s+L6CG
c05JylXZ+w+sTpcIzMhx+CrgpO7SBjYeswgHhA19IASqQxPm+ssJ7S6I8SAIobGJ
sT7lA7Y5Jk8UD7qcFCPK4x1VWfxQ37s9v/7yDdARl/tjXWpEY+bbf+aVPrEJ6S+Y
V77XR1RR3kZbkLMTywNtF9z20+0xnjsMpJLcwdgvQWkk5BxDsntYWiTcZZJaZzD5
Vsk4lOlnfiqTyb038IgfF/2tcatON4e8PZ5OFBNXLb0vQ29sLCY+ZHAPNHFJo26d
prr+Rxg5HzFBUzNJyQ9kPHeEDviME2PnF33SQFgqiQ3Fc0U1eiF2NBt9STJunI2u
jHXL4EFT54GKtg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 10:50:50 2026 by rpki-client