Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: vpePoj0WD+goo4C3DrxCILqSHP3qMIW+MgZsoA/fN/U=
Subject key identifier: 28:56:F1:66:44:EA:72:26:D9:25:DF:80:15:7F:F1:5B:8E:14:A7:8E
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 01A10512C707720C328B2876FD80E140DC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 108E
Signing time: Sun 04 Oct 2026 04:01:19 +0000
Manifest this update: Sun 04 Oct 2026 04:01:19 +0000
Manifest next update: Mon 05 Oct 2026 04:01:19 +0000
Files and hashes: 1: AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa (hash: IbeU1AeOys6rseJf5ugRnLAWWP/7mZIxuUtqX7netkk=)
2: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: KegRN5o0Ni0lq4LuUNDNF2rdjTOvROX8cE/wrrmRqKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:c7:07:72:0c:32:8b:28:76:fd:80:e1:40:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Oct 4 04:01:19 2026 GMT
Not After : Oct 5 04:01:19 2026 GMT
Subject: CN=2856f16644ea7226d925df80157ff15b8e14a78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:27:4d:7a:bb:2c:a3:3b:65:eb:8a:24:3c:
07:29:91:65:61:c7:c2:8f:cb:a8:83:47:87:55:5e:
11:b9:17:2b:2a:fb:ee:36:1a:68:17:e5:92:db:b5:
4f:d0:29:bf:84:3e:14:86:c4:08:57:4f:bd:b1:9b:
74:37:44:5e:22:c3:10:50:78:99:5d:1f:e6:1d:02:
9f:3b:12:cb:e8:f0:f2:f0:8a:0f:a9:1f:5f:0e:da:
80:45:86:97:92:74:78:b8:b0:6f:f7:43:ab:34:fe:
e3:76:3e:b1:2e:19:a5:25:5d:ab:d9:e5:6e:8d:00:
8a:1a:46:da:16:b9:3b:aa:cc:03:dc:56:03:22:36:
dd:70:4f:fb:dc:87:03:1f:5b:32:f0:a3:fa:59:c5:
a6:7a:21:7f:5d:c9:b7:78:17:9e:09:b0:9a:41:ca:
a5:22:d7:87:28:fc:26:67:25:54:e5:d2:14:7c:31:
6f:20:b9:5f:cc:8c:61:b4:1e:b5:d6:f4:24:7a:1d:
e7:44:27:63:e3:87:c2:ad:2f:89:ff:93:37:7c:44:
7c:62:3c:a4:38:ed:31:d1:e2:e9:9c:90:74:70:2e:
5a:a4:40:d4:95:be:b4:5d:75:16:45:46:80:07:13:
ca:a0:ad:db:17:f9:3e:f3:f4:d2:be:01:a4:cb:cf:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:56:F1:66:44:EA:72:26:D9:25:DF:80:15:7F:F1:5B:8E:14:A7:8E
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:75:31:dd:f3:44:62:6a:13:a6:b5:17:82:2f:ca:54:5d:
2f:59:b2:68:0b:25:1d:37:85:58:12:01:da:04:ce:e9:cf:b2:
9c:64:da:75:f1:20:3a:cf:6d:be:48:81:d3:dc:f6:9b:c2:f2:
4e:0e:6d:f0:78:e2:3d:b2:c3:00:41:36:50:cf:10:e4:36:62:
07:6c:2b:18:5f:2f:12:d1:59:a3:26:21:39:58:86:3c:bd:4b:
2f:00:bc:62:7e:95:3d:e6:a7:99:6a:0b:78:29:6b:9e:99:fb:
7d:2d:17:b2:dd:c3:a0:91:0e:da:73:35:fc:8d:a3:04:98:0d:
5d:de:5e:40:5f:58:db:b0:a9:9d:65:eb:ec:f0:25:0c:0d:ad:
90:db:06:cb:23:64:f3:b3:96:2a:0d:f9:a6:0e:66:e3:9e:d1:
32:06:64:24:f1:6d:05:90:79:e3:64:23:98:06:61:bb:54:34:
54:6b:d5:46:6d:86:1b:d3:e5:20:d8:e5:d1:b8:49:70:59:7b:
2f:04:85:b3:75:e2:51:51:12:aa:5b:11:43:a7:8b:87:78:b7:
0d:35:81:f1:85:25:7c:63:64:94:8f:8b:f7:61:a7:12:9a:39:
11:3f:28:d8:60:ea:4c:34:01:c3:b4:aa:81:19:8e:3a:76:1d:
fc:c3:0e:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFEscHcgwyiyh2/YDhQNwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjNjMzE2NGQzZDhjMjY0NGNmMjliMzIzNjc2MWE1NzFl
ZTU4YmEwHhcNMjYxMDA0MDQwMTE5WhcNMjYxMDA1MDQwMTE5WjAzMTEwLwYDVQQD
EygyODU2ZjE2NjQ0ZWE3MjI2ZDkyNWRmODAxNTdmZjE1YjhlMTRhNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNgnTXq7LKM7ZeuKJDwHKZFlYcfC
j8uog0eHVV4RuRcrKvvuNhpoF+WS27VP0Cm/hD4UhsQIV0+9sZt0N0ReIsMQUHiZ
XR/mHQKfOxLL6PDy8IoPqR9fDtqARYaXknR4uLBv90OrNP7jdj6xLhmlJV2r2eVu
jQCKGkbaFrk7qswD3FYDIjbdcE/73IcDH1sy8KP6WcWmeiF/Xcm3eBeeCbCaQcql
IteHKPwmZyVU5dIUfDFvILlfzIxhtB611vQkeh3nRCdj44fCrS+J/5M3fER8Yjyk
OO0x0eLpnJB0cC5apEDUlb60XXUWRUaABxPKoK3bF/k+8/TSvgGky8/dewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChW8WZE6nIm2SXfgBV/8VuOFKeOMB8GA1UdIwQY
MBaAFA2zwxZNPYwmRM8psyNnYaVx7li6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWIt
M2Q0NjQzOWFhNDFjLzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWItM2Q0NjQzOWFhNDFj
LzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoI51Md3z
RGJqE6a1F4IvylRdL1myaAslHTeFWBIB2gTO6c+ynGTadfEgOs9tvkiB09z2m8Ly
Tg5t8HjiPbLDAEE2UM8Q5DZiB2wrGF8vEtFZoyYhOViGPL1LLwC8Yn6VPeanmWoL
eClrnpn7fS0Xst3DoJEO2nM1/I2jBJgNXd5eQF9Y27CpnWXr7PAlDA2tkNsGyyNk
87OWKg35pg5m457RMgZkJPFtBZB542QjmAZhu1Q0VGvVRm2GG9PlINjl0bhJcFl7
LwSFs3XiUVESqlsRQ6eLh3i3DTWB8YUlfGNklI+L92GnEpo5ET8o2GDqTDQBw7Sq
gRmOOnYd/MMO3g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:33:27 2026 by rpki-client