Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: +1eFGrCtaW/OoMx3+gVEw3l3x/C3ObW4pPZgDHnXTT0=
Subject key identifier: 67:C5:F5:EE:4D:BE:8E:D4:E1:C5:04:3D:DC:D2:2C:68:58:EC:EE:F9
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 01A0EC6601F51E93A1E090FC719BA6D49634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 09:01:43 +0000
Manifest this update: Tue 29 Sep 2026 09:01:43 +0000
Manifest next update: Wed 30 Sep 2026 09:01:43 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: armjwWwaXpVzkRGH9Sq8MhasdkN8BLlMwekPa+GEujk=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:01:f5:1e:93:a1:e0:90:fc:71:9b:a6:d4:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Sep 29 09:01:43 2026 GMT
Not After : Sep 30 09:01:43 2026 GMT
Subject: CN=67c5f5ee4dbe8ed4e1c5043ddcd22c6858eceef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:51:02:bd:49:7d:8f:7b:7b:de:e2:87:65:3d:
d9:b3:b5:6c:f3:19:6d:a4:a9:01:3c:4f:53:1b:59:
12:6f:78:5f:de:df:ca:94:dd:ac:1f:c1:d7:d5:b0:
17:2a:8d:15:02:14:73:b1:aa:b1:1c:ae:59:9f:a4:
f7:46:1a:88:24:4e:7c:a2:58:f6:ac:d9:78:34:f2:
0d:ff:2f:9e:a7:9f:ee:91:b1:60:39:7d:fe:a9:0f:
f3:38:5d:93:11:ad:cb:71:f8:9e:61:88:33:c4:bb:
79:7b:4a:84:ce:69:ee:f0:69:03:71:aa:f1:59:10:
64:ae:98:4d:32:e6:20:e2:64:bb:46:4e:43:b0:cc:
87:53:fc:d4:f7:82:49:fa:23:97:98:99:6f:de:f5:
90:7c:91:3e:62:a2:cd:30:26:e5:3f:bb:95:f4:d9:
6c:71:5c:37:4d:43:ab:0d:1b:fc:40:eb:7e:6f:9f:
74:c4:a3:26:6d:d2:3b:42:b1:64:85:5d:6c:70:af:
a0:e6:60:78:91:e6:60:0b:51:28:37:63:76:6a:35:
4b:b2:79:ad:de:f0:a2:72:f6:d4:a2:78:24:0d:b8:
2e:2a:aa:ba:5f:05:ec:9f:e0:e1:13:9c:0a:b1:58:
6b:0e:f8:a5:15:3d:19:bd:69:2f:8f:f2:b2:6d:c9:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:F5:EE:4D:BE:8E:D4:E1:C5:04:3D:DC:D2:2C:68:58:EC:EE:F9
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:e9:88:c8:fe:ea:a3:53:58:cc:bc:f3:38:05:d2:4b:69:
78:ba:68:26:78:4a:6a:0e:f5:b5:dc:35:79:6a:e9:94:53:c4:
e0:6e:bd:6b:04:3b:8a:a8:eb:2d:34:42:5e:34:2f:15:2c:5f:
d3:69:f2:b8:c0:dc:0a:1f:c2:71:7f:cb:d0:0c:23:08:e0:56:
b3:e2:e6:c1:1a:92:3a:37:b7:c1:a8:f1:51:45:fe:21:08:65:
14:23:f5:f2:43:34:db:14:29:8b:c0:00:1f:2e:1b:e9:fa:d0:
cf:87:cf:cb:b0:1b:de:62:2e:f6:97:1d:34:ca:99:6c:f6:64:
99:fe:81:61:f0:38:7f:b2:bc:75:87:e9:d8:8a:b9:27:3b:03:
08:a0:21:16:24:e3:77:c0:38:f1:cf:96:b1:86:53:47:d2:57:
69:a9:27:19:22:7f:f9:33:55:50:c0:c8:ef:ca:b6:4d:59:44:
42:73:ae:ac:39:b0:16:80:fd:ee:d7:95:fc:8b:25:c6:fa:7a:
83:25:2c:99:85:93:db:fc:52:d8:6e:07:c2:91:22:f7:4a:01:
4e:14:57:8f:06:0b:7c:d7:a5:1c:1e:87:60:1e:96:6b:d9:56:
a7:bc:90:b2:70:2e:f9:e0:59:31:6f:69:f9:ac:ce:96:d7:f9:
7c:3d:18:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsZgH1HpOh4JD8cZum1JY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3
MzIyMDkwHhcNMjYwOTI5MDkwMTQzWhcNMjYwOTMwMDkwMTQzWjAzMTEwLwYDVQQD
Eyg2N2M1ZjVlZTRkYmU4ZWQ0ZTFjNTA0M2RkY2QyMmM2ODU4ZWNlZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VECvUl9j3t73uKHZT3Zs7Vs8xlt
pKkBPE9TG1kSb3hf3t/KlN2sH8HX1bAXKo0VAhRzsaqxHK5Zn6T3RhqIJE58olj2
rNl4NPIN/y+ep5/ukbFgOX3+qQ/zOF2TEa3LcfieYYgzxLt5e0qEzmnu8GkDcarx
WRBkrphNMuYg4mS7Rk5DsMyHU/zU94JJ+iOXmJlv3vWQfJE+YqLNMCblP7uV9Nls
cVw3TUOrDRv8QOt+b590xKMmbdI7QrFkhV1scK+g5mB4keZgC1EoN2N2ajVLsnmt
3vCicvbUongkDbguKqq6XwXsn+DhE5wKsVhrDvilFT0ZvWkvj/KybclsCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfF9e5Nvo7U4cUEPdzSLGhY7O75MB8GA1UdIwQY
MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt
YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm
LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoXpiMj+
6qNTWMy88zgF0ktpeLpoJnhKag71tdw1eWrplFPE4G69awQ7iqjrLTRCXjQvFSxf
02nyuMDcCh/CcX/L0AwjCOBWs+LmwRqSOje3wajxUUX+IQhlFCP18kM02xQpi8AA
Hy4b6frQz4fPy7Ab3mIu9pcdNMqZbPZkmf6BYfA4f7K8dYfp2Iq5JzsDCKAhFiTj
d8A48c+WsYZTR9JXaaknGSJ/+TNVUMDI78q2TVlEQnOurDmwFoD97teV/Islxvp6
gyUsmYWT2/xS2G4HwpEi90oBThRXjwYLfNelHB6HYB6Wa9lWp7yQsnAu+eBZMW9p
+azOltf5fD0YLQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:32:26 2026 by rpki-client