Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: Cp7ppoU8O+11Shsr/+ekqVqHW1lOEBsUhrEodIiSUnw=
Subject key identifier: 6C:71:24:32:B3:0C:90:73:C6:87:E9:33:CB:AE:B0:70:07:8C:C1:2C
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 01A0D9BA6BFD565F03B3EE9434D1F6BB94D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 18:01:08 +0000
Manifest this update: Fri 25 Sep 2026 18:01:08 +0000
Manifest next update: Sat 26 Sep 2026 18:01:08 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: 0cq/MzuApFoaGSbkVYUxMmmmRetbsW19n6/JAPFkOYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:6b:fd:56:5f:03:b3:ee:94:34:d1:f6:bb:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Sep 25 18:01:08 2026 GMT
Not After : Sep 26 18:01:08 2026 GMT
Subject: CN=6c712432b30c9073c687e933cbaeb070078cc12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:f3:69:63:fb:47:6b:e5:97:8f:9f:e2:66:
4d:b8:83:83:52:43:42:0f:41:35:64:d3:5d:36:56:
1c:05:2f:59:e4:c6:55:60:1b:1d:d7:98:af:3b:1a:
b3:bd:79:42:a1:e5:5e:6d:91:09:ba:5d:d7:9f:92:
91:8d:2d:44:e1:45:75:fa:f5:37:5f:93:ec:3d:d3:
be:88:45:0a:11:2a:45:97:eb:e8:f3:40:42:8e:41:
89:1b:ad:38:1b:cb:04:90:15:fe:b8:7b:c1:d3:8e:
c6:8d:fe:1e:f9:20:94:5e:ac:e9:c6:48:46:3e:57:
44:6c:fd:a1:96:2b:81:3f:75:ab:18:4e:50:17:f7:
78:50:a7:0b:67:d0:2d:6d:37:08:d2:4e:6a:71:f3:
85:20:dc:80:87:50:24:a5:60:dd:77:68:35:fd:1a:
33:77:03:37:cb:54:51:b6:60:88:b6:04:57:20:29:
e2:82:3e:12:40:02:00:ed:2c:52:fc:1a:10:09:47:
1a:d2:fc:3f:cb:7d:3f:d0:35:b7:59:37:9a:23:66:
35:8d:63:8e:06:3f:bb:6c:6a:c0:8b:3e:a8:ee:b8:
89:3a:f1:47:60:3c:4a:40:d8:2f:e7:38:fb:f4:89:
76:ef:fa:af:87:5e:7e:4c:1f:39:bb:19:00:f2:11:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:24:32:B3:0C:90:73:C6:87:E9:33:CB:AE:B0:70:07:8C:C1:2C
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:12:b9:82:1a:65:4e:bd:3c:10:28:7e:04:18:24:c6:04:
85:5c:af:66:ff:45:9b:48:b7:df:82:be:af:da:8e:73:d4:8c:
f6:dc:f6:ba:c7:d2:e0:d4:05:1b:76:b2:f0:3b:6e:97:f5:9c:
17:bb:2f:77:e3:a7:33:e1:49:9f:b1:15:25:9b:64:5b:d5:a9:
0d:17:c5:b6:bf:89:d4:59:cd:a3:ec:a6:ef:35:76:98:7e:f6:
94:05:a6:5b:ed:81:f3:61:9c:f2:ac:75:60:f2:26:d9:58:50:
0b:d5:75:09:84:fd:34:f3:c5:75:e2:b8:8c:eb:b9:87:c4:ca:
6d:fe:4c:94:f5:98:fc:66:c6:77:7c:a2:bf:0e:a4:01:cb:b7:
98:97:cc:10:c4:93:ab:cd:dd:0a:77:cf:a6:f0:56:7c:c0:a7:
b7:89:54:6b:ee:82:f6:2e:62:da:a8:1f:0f:2f:6d:34:94:f8:
bc:e8:2f:de:71:d6:7a:bf:65:fd:81:0f:0e:0f:24:21:6a:94:
2c:30:0b:9c:45:df:ab:3b:d7:ec:39:56:29:d0:84:13:9b:a2:
d0:71:0e:a0:55:5f:89:46:5f:bf:42:ae:69:0b:fe:a7:d5:ea:
57:cd:34:76:e2:5b:d8:7a:c5:cd:d6:8c:22:51:19:97:52:b5:
03:6a:6e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZumv9Vl8Ds+6UNNH2u5TTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1
OWQ1ZTUwHhcNMjYwOTI1MTgwMTA4WhcNMjYwOTI2MTgwMTA4WjAzMTEwLwYDVQQD
Eyg2YzcxMjQzMmIzMGM5MDczYzY4N2U5MzNjYmFlYjA3MDA3OGNjMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5vzaWP7R2vll4+f4mZNuIODUkNC
D0E1ZNNdNlYcBS9Z5MZVYBsd15ivOxqzvXlCoeVebZEJul3Xn5KRjS1E4UV1+vU3
X5PsPdO+iEUKESpFl+vo80BCjkGJG604G8sEkBX+uHvB047Gjf4e+SCUXqzpxkhG
PldEbP2hliuBP3WrGE5QF/d4UKcLZ9AtbTcI0k5qcfOFINyAh1AkpWDdd2g1/Roz
dwM3y1RRtmCItgRXICnigj4SQAIA7SxS/BoQCUca0vw/y30/0DW3WTeaI2Y1jWOO
Bj+7bGrAiz6o7riJOvFHYDxKQNgv5zj79Il27/qvh15+TB85uxkA8hG33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxxJDKzDJBzxofpM8uusHAHjMEsMB8GA1UdIwQY
MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt
N2ZiMDU5MjBlMjI4LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4
LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVMSuYIa
ZU69PBAofgQYJMYEhVyvZv9Fm0i334K+r9qOc9SM9tz2usfS4NQFG3ay8Dtul/Wc
F7svd+OnM+FJn7EVJZtkW9WpDRfFtr+J1FnNo+ym7zV2mH72lAWmW+2B82Gc8qx1
YPIm2VhQC9V1CYT9NPPFdeK4jOu5h8TKbf5MlPWY/GbGd3yivw6kAcu3mJfMEMST
q83dCnfPpvBWfMCnt4lUa+6C9i5i2qgfDy9tNJT4vOgv3nHWer9l/YEPDg8kIWqU
LDALnEXfqzvX7DlWKdCEE5ui0HEOoFVfiUZfv0KuaQv+p9XqV800duJb2HrFzdaM
IlEZl1K1A2pu9w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:40 2026 by rpki-client