Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: fr/Z83UKidQ2etSag+Ou3YzaMrNWWX8O3VTmBAnx6vM=
Subject key identifier: 03:C9:B6:0F:06:C2:D6:DC:D4:4C:5D:92:A2:10:A8:32:1C:22:BD:F9
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 01A11ED21D91EDFD80FC6240DA0AA8D3518A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 04:00:48 +0000
Manifest this update: Fri 09 Oct 2026 04:00:48 +0000
Manifest next update: Sat 10 Oct 2026 04:00:48 +0000
Files and hashes: 1: 4e7ahtukuDD9v0DBSPR_moHY4zI.roa (hash: c9S2a0s4aMrl9rYn1z2bRbzkVr+5WcdFQcYn2M/ymYE=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: h62RrDUCKuw3M19ZSUi1P4ZJjgdgcWgy9GMf2bcjSQY=)
3: ryJYRRktlXHgBSVR5cvg8fyHDeM.roa (hash: WOEZWIHK7L7jVpd5u3Y2JfH4hWkoWnXMkfyztKy8m4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d2:1d:91:ed:fd:80:fc:62:40:da:0a:a8:d3:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Oct 9 04:00:48 2026 GMT
Not After : Oct 10 04:00:48 2026 GMT
Subject: CN=03c9b60f06c2d6dcd44c5d92a210a8321c22bdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:01:00:46:38:24:c3:a5:9a:86:a8:7d:6a:
ca:aa:31:f2:d8:e1:6b:64:7a:71:40:b4:eb:73:b7:
44:64:b9:d8:7f:34:4f:08:45:a6:93:a6:bd:e3:56:
58:83:15:0b:d0:ba:55:07:02:c9:28:3a:6d:93:dd:
df:e2:16:e4:bf:97:71:f0:e9:66:78:c0:87:98:5e:
6e:4d:a5:69:a6:82:58:10:e5:ba:ab:84:0b:c2:b0:
7b:11:4b:24:c9:0e:ec:d1:cd:d9:1c:2b:18:f5:02:
1d:bb:8c:46:75:60:96:24:cb:b4:23:4d:86:28:c3:
e2:ac:3c:06:9e:b2:4d:6a:20:17:96:7d:b0:6f:8e:
48:dd:d5:b4:c0:22:6c:db:a2:7a:78:b7:4c:5c:38:
7d:42:1c:fc:8e:3a:43:55:89:8f:f8:90:4e:1d:c0:
5d:b2:8b:89:8c:ae:33:15:f1:d7:84:b1:a3:e4:e1:
79:29:91:18:b5:35:09:85:71:f9:ae:30:cd:f7:29:
f5:3e:4f:6a:83:97:31:25:57:07:a0:38:f2:34:e0:
e2:c1:98:7b:49:50:11:71:07:2a:b1:ee:83:38:11:
8f:e5:7d:7f:fc:4f:ac:34:75:c9:04:5b:f5:10:a5:
e4:09:15:98:2b:aa:42:47:4f:39:a6:ea:e3:64:39:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C9:B6:0F:06:C2:D6:DC:D4:4C:5D:92:A2:10:A8:32:1C:22:BD:F9
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ef:40:50:88:ef:05:1a:c1:e5:33:1a:31:83:8c:01:e9:f6:
ab:8b:76:db:37:19:26:be:73:3f:54:18:1d:6c:61:cc:35:92:
85:06:57:1d:18:af:4a:dc:4b:4f:80:7d:db:dd:e1:8b:eb:fd:
5e:9a:42:38:7d:18:81:f4:23:0f:01:11:a0:68:f7:62:0d:f8:
7e:6d:ce:43:b6:24:59:75:3e:ef:32:02:b2:17:75:2c:fc:a8:
b6:2d:a3:f3:1b:ec:54:5d:b2:b6:ff:50:3a:ab:5e:5c:59:df:
3e:a6:9c:1e:7c:86:11:eb:cf:27:7f:f3:17:24:23:8b:c9:31:
55:a4:c9:47:99:e2:ec:40:60:0f:56:22:0f:57:2b:0c:f9:c6:
21:63:8a:88:79:9a:21:33:9e:a1:7b:e4:71:b0:a1:08:26:1c:
b0:ec:9b:c6:42:b2:be:56:da:5e:65:9e:e3:d9:ac:8a:57:1c:
f4:fa:a6:cd:71:79:4b:f9:20:e5:f5:77:84:c7:b9:c6:da:3d:
4c:c7:92:1f:dd:27:8b:85:8c:c8:87:4d:2b:fd:12:b2:9d:ab:
cc:37:2f:87:e8:5e:b4:0f:9c:42:a8:d1:51:93:7f:ad:34:57:
14:af:bc:35:7c:51:16:03:b6:31:97:33:7b:bd:d7:3d:2d:69:
59:d6:53:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEe0h2R7f2A/GJA2gqo01GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZGRhMmM2MDc0YzU2MjQxZjVjN2UwNjBjYWNjYjY1N2Y2
NGU5MWMwHhcNMjYxMDA5MDQwMDQ4WhcNMjYxMDEwMDQwMDQ4WjAzMTEwLwYDVQQD
EygwM2M5YjYwZjA2YzJkNmRjZDQ0YzVkOTJhMjEwYTgzMjFjMjJiZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst0BAEY4JMOlmoaofWrKqjHy2OFr
ZHpxQLTrc7dEZLnYfzRPCEWmk6a941ZYgxUL0LpVBwLJKDptk93f4hbkv5dx8Olm
eMCHmF5uTaVppoJYEOW6q4QLwrB7EUskyQ7s0c3ZHCsY9QIdu4xGdWCWJMu0I02G
KMPirDwGnrJNaiAXln2wb45I3dW0wCJs26J6eLdMXDh9Qhz8jjpDVYmP+JBOHcBd
souJjK4zFfHXhLGj5OF5KZEYtTUJhXH5rjDN9yn1Pk9qg5cxJVcHoDjyNODiwZh7
SVARcQcqse6DOBGP5X1//E+sNHXJBFv1EKXkCRWYK6pCR085purjZDkRXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPJtg8Gwtbc1ExdkqIQqDIcIr35MB8GA1UdIwQY
MBaAFA7dosYHTFYkH1x+Bgysy2V/ZOkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUt
NjcxMTU4YTYzYzIzLzEvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUtNjcxMTU4YTYzYzIz
LzEvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO9AUIjv
BRrB5TMaMYOMAen2q4t22zcZJr5zP1QYHWxhzDWShQZXHRivStxLT4B9293hi+v9
XppCOH0YgfQjDwERoGj3Yg34fm3OQ7YkWXU+7zICshd1LPyoti2j8xvsVF2ytv9Q
OqteXFnfPqacHnyGEevPJ3/zFyQji8kxVaTJR5ni7EBgD1YiD1crDPnGIWOKiHma
ITOeoXvkcbChCCYcsOybxkKyvlbaXmWe49msilcc9PqmzXF5S/kg5fV3hMe5xto9
TMeSH90ni4WMyIdNK/0Ssp2rzDcvh+hetA+cQqjRUZN/rTRXFK+8NXxRFgO2MZcz
e73XPS1pWdZTJw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 12:00:23 2026 by rpki-client