Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: WoWEf+ejDb00lGzaJ3CVrsloUy5ST0ni3AGMGCXVzhk=
Subject key identifier: A4:67:C5:24:80:00:AE:F4:1F:55:C7:7F:A1:1E:29:69:8A:29:45:AB
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 01A1DE3945AD57044A609248C500D4BE34D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 08:00:57 +0000
Manifest this update: Sun 15 Nov 2026 08:00:57 +0000
Manifest next update: Mon 16 Nov 2026 08:00:57 +0000
Files and hashes: 1: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: /hRTrfzvYu3tUD1eiGEQvH6Zs5WtzFuvRtr5m6lbArQ=)
2: _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (hash: UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:45:ad:57:04:4a:60:92:48:c5:00:d4:be:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Nov 15 08:00:57 2026 GMT
Not After : Nov 16 08:00:57 2026 GMT
Subject: CN=a467c5248000aef41f55c77fa11e29698a2945ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:9e:4a:7d:b2:16:2d:e3:e8:eb:4c:5e:a6:
5a:7f:38:01:26:cf:4c:6b:66:bc:bd:84:c3:52:fd:
60:1d:5b:ae:a2:2b:d7:1a:eb:2c:f4:a3:57:68:6d:
af:ca:90:ab:90:a5:50:86:fd:f4:b9:12:29:2d:d4:
3a:09:07:f8:40:ca:80:f4:5e:17:bf:b7:06:2e:fd:
e2:83:f2:b2:78:6f:2f:41:e6:c9:66:a9:bd:34:14:
ff:d2:d9:a4:1a:30:e6:77:97:c3:bd:bb:66:af:73:
76:91:62:e1:c9:d9:3d:7b:8b:7e:41:3b:51:51:f1:
cf:56:e9:20:4d:6e:cf:14:84:3d:9f:ce:95:8b:c4:
e5:d5:de:65:cd:61:31:0f:85:87:77:4b:e8:90:02:
f2:d2:5d:4a:40:a2:03:b9:12:59:a1:5b:21:bd:12:
fb:f1:0c:5a:38:45:fb:28:e1:23:47:b7:3a:c9:b4:
a9:88:1e:ac:16:3d:21:2a:64:6d:30:73:7e:b4:6a:
4c:ef:ac:3b:fa:58:d4:32:dd:65:d4:09:02:0d:9f:
11:30:c9:23:55:f9:66:28:3d:a7:fa:51:2a:77:a8:
65:f5:c1:e7:16:64:25:5c:a4:42:fe:1a:ff:a3:71:
8b:98:c3:62:64:72:5a:1d:af:ee:19:01:02:91:d3:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:C5:24:80:00:AE:F4:1F:55:C7:7F:A1:1E:29:69:8A:29:45:AB
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:42:5c:1d:fa:97:f1:ca:2c:b0:c0:d2:82:3e:87:cc:34:74:
3a:73:29:ac:3b:ed:0e:c1:d6:6e:17:f4:5a:49:4b:47:6e:ba:
a0:bb:38:1e:2f:aa:7c:2d:f2:90:5b:bc:7c:1d:8b:e7:b0:f4:
1a:92:37:cb:16:d7:c4:1a:0e:d2:60:ad:5f:c5:d1:c5:1e:83:
23:4c:02:48:9b:fa:5f:45:d4:70:7e:9b:b7:6d:26:ce:2f:2a:
42:dc:62:06:7c:e0:4a:58:75:e3:b8:d0:52:a0:e3:9c:18:48:
47:c0:36:ab:2a:eb:57:d8:15:0b:b1:c9:8d:bd:eb:28:8f:07:
2e:e4:2f:6c:83:8c:9c:4b:8f:50:0c:26:b5:ad:17:dc:2d:dc:
90:56:98:6d:82:99:26:79:19:a8:90:bb:42:21:92:ce:2c:76:
19:26:53:c5:7f:28:7a:47:44:69:31:ae:26:a9:cb:fa:29:49:
9b:9a:5d:4b:d0:04:4d:01:3b:02:05:94:93:0f:a9:a5:2c:78:
71:85:33:d0:88:3d:9c:c2:2a:2c:ad:da:ce:e4:17:c0:70:88:
f2:25:22:a1:45:a3:40:4a:2a:fa:e0:89:db:46:eb:0d:2d:f2:
a0:2d:e2:11:c9:2c:f0:c2:73:41:fc:08:7c:12:e2:f9:21:37:
f1:40:56:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOUWtVwRKYJJIxQDUvjTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjYxMTE1MDgwMDU3WhcNMjYxMTE2MDgwMDU3WjAzMTEwLwYDVQQD
EyhhNDY3YzUyNDgwMDBhZWY0MWY1NWM3N2ZhMTFlMjk2OThhMjk0NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc+eSn2yFi3j6OtMXqZafzgBJs9M
a2a8vYTDUv1gHVuuoivXGuss9KNXaG2vypCrkKVQhv30uRIpLdQ6CQf4QMqA9F4X
v7cGLv3ig/KyeG8vQebJZqm9NBT/0tmkGjDmd5fDvbtmr3N2kWLhydk9e4t+QTtR
UfHPVukgTW7PFIQ9n86Vi8Tl1d5lzWExD4WHd0vokALy0l1KQKIDuRJZoVshvRL7
8QxaOEX7KOEjR7c6ybSpiB6sFj0hKmRtMHN+tGpM76w7+ljUMt1l1AkCDZ8RMMkj
VflmKD2n+lEqd6hl9cHnFmQlXKRC/hr/o3GLmMNiZHJaHa/uGQECkdMA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRnxSSAAK70H1XHf6EeKWmKKUWrMB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkJcHfqX
8cossMDSgj6HzDR0OnMprDvtDsHWbhf0WklLR266oLs4Hi+qfC3ykFu8fB2L57D0
GpI3yxbXxBoO0mCtX8XRxR6DI0wCSJv6X0XUcH6bt20mzi8qQtxiBnzgSlh147jQ
UqDjnBhIR8A2qyrrV9gVC7HJjb3rKI8HLuQvbIOMnEuPUAwmta0X3C3ckFaYbYKZ
JnkZqJC7QiGSzix2GSZTxX8oekdEaTGuJqnL+ilJm5pdS9AETQE7AgWUkw+ppSx4
cYUz0Ig9nMIqLK3azuQXwHCI8iUioUWjQEoq+uCJ20brDS3yoC3iEcks8MJzQfwI
fBLi+SE38UBWIw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:23:20 2026 by rpki-client