Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: 4xFHRwwDfJiZQfe5AYm/fosCQM8LBSBLATHpuPoacks=
Subject key identifier: AA:C8:1E:1C:D4:B8:0F:C5:9F:30:20:E1:A6:73:CE:B8:CD:68:7C:9F
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 01A0D4CB3F5B6AF85F1CC596BB1535799445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 0319
Signing time: Thu 24 Sep 2026 19:01:24 +0000
Manifest this update: Thu 24 Sep 2026 19:01:24 +0000
Manifest next update: Fri 25 Sep 2026 19:01:24 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: 9pBRf42Huq6C9gVKf+Nt0AvFnQ0IK6FietqDjNWCjbo=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
3: llmMHNqMSoDUXRxE5hAlr6D6GAE.roa (hash: R5kL9/aM+FrgRUOf+AsKqKfQFvEpHbyhgcOmGd1LC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:3f:5b:6a:f8:5f:1c:c5:96:bb:15:35:79:94:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Sep 24 19:01:24 2026 GMT
Not After : Sep 25 19:01:24 2026 GMT
Subject: CN=aac81e1cd4b80fc59f3020e1a673ceb8cd687c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:82:f0:49:c6:2b:80:d6:45:62:2b:8f:2b:
2f:90:4e:83:a0:f8:aa:7b:68:f7:76:3d:90:c4:ad:
c4:6c:77:aa:d8:eb:05:5d:a6:e5:6e:1c:12:88:9f:
e2:1a:d8:68:04:77:26:db:08:4a:30:7c:99:43:d6:
57:ce:de:69:cf:c8:dd:2d:ef:a3:46:d8:98:b9:90:
d5:bb:f5:f1:f4:46:80:61:a1:e9:7f:3e:b8:e1:e5:
13:e0:f6:26:4f:3e:35:42:77:23:05:83:eb:b9:a4:
6f:d9:aa:ba:a2:c7:92:c3:25:75:a2:47:f5:23:4e:
cc:3e:15:50:82:a6:83:23:7d:87:29:b5:88:89:29:
1e:fb:28:f0:3e:02:85:7c:88:4f:90:63:3f:41:81:
f4:d4:bf:2f:de:e4:7a:aa:d7:fc:c5:d1:11:bc:54:
cd:16:95:89:c2:56:f7:a4:8f:60:f3:26:dc:9c:7b:
7f:0f:ba:17:c1:1a:a9:04:db:c1:1a:c1:a4:81:8b:
99:1a:a8:44:87:87:6c:b3:3e:0b:60:b6:31:09:25:
0d:91:85:0e:ce:89:40:99:ca:81:27:e4:b3:89:7e:
3b:00:3f:29:71:8d:ac:55:14:51:3d:f7:76:89:8c:
37:88:8d:d9:af:c1:cf:5a:3b:de:d6:ca:98:3d:78:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C8:1E:1C:D4:B8:0F:C5:9F:30:20:E1:A6:73:CE:B8:CD:68:7C:9F
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:03:9f:5a:89:e0:b4:22:67:72:80:59:e8:d7:e0:10:4d:2c:
8b:7d:4b:a3:34:fc:7d:79:1c:4e:82:bf:ec:62:c4:98:26:4e:
69:3a:ff:76:91:40:36:ff:3a:9c:af:12:25:1e:4d:ed:11:02:
13:08:d2:90:f5:a1:48:5e:bc:4c:63:80:37:4b:36:92:95:8f:
47:c8:93:4e:8b:2c:45:4a:cc:1b:98:5e:88:87:4a:07:e9:a5:
03:c8:d9:fa:4a:67:16:0e:df:11:b3:aa:81:34:9e:b8:c6:4e:
57:84:3c:61:f1:97:f1:fc:ed:19:a4:41:be:7b:3d:9e:16:47:
14:80:54:c0:3b:bb:1a:62:21:85:9e:cf:c5:20:e6:1e:94:22:
a1:6d:72:39:39:19:32:05:05:ef:90:83:ce:d6:bd:50:1b:f7:
dd:27:34:18:46:c5:ce:df:89:3f:a7:ae:26:e2:e7:0d:ac:96:
06:61:06:f3:0c:ed:3c:60:e6:5f:0d:3b:c8:80:5a:fd:4c:fd:
97:97:14:88:cf:d2:30:a1:d4:7b:18:a9:e3:5d:73:0d:00:83:
32:de:99:d5:be:63:24:5f:99:9e:23:96:0c:25:77:35:38:19:
6c:31:c3:fb:82:76:8a:4c:e5:7b:9f:d4:f4:ee:32:29:a7:03:
90:66:0f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUyz9bavhfHMWWuxU1eZRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0
NTYzNjIwHhcNMjYwOTI0MTkwMTI0WhcNMjYwOTI1MTkwMTI0WjAzMTEwLwYDVQQD
EyhhYWM4MWUxY2Q0YjgwZmM1OWYzMDIwZTFhNjczY2ViOGNkNjg3YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIiC8EnGK4DWRWIrjysvkE6DoPiq
e2j3dj2QxK3EbHeq2OsFXablbhwSiJ/iGthoBHcm2whKMHyZQ9ZXzt5pz8jdLe+j
RtiYuZDVu/Xx9EaAYaHpfz644eUT4PYmTz41QncjBYPruaRv2aq6oseSwyV1okf1
I07MPhVQgqaDI32HKbWIiSke+yjwPgKFfIhPkGM/QYH01L8v3uR6qtf8xdERvFTN
FpWJwlb3pI9g8ybcnHt/D7oXwRqpBNvBGsGkgYuZGqhEh4dssz4LYLYxCSUNkYUO
zolAmcqBJ+SziX47AD8pcY2sVRRRPfd2iYw3iI3Zr8HPWjve1sqYPXgwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrIHhzUuA/FnzAg4aZzzrjNaHyfMB8GA1UdIwQY
MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt
MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5
LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwgOfWong
tCJncoBZ6NfgEE0si31LozT8fXkcToK/7GLEmCZOaTr/dpFANv86nK8SJR5N7REC
EwjSkPWhSF68TGOAN0s2kpWPR8iTTossRUrMG5heiIdKB+mlA8jZ+kpnFg7fEbOq
gTSeuMZOV4Q8YfGX8fztGaRBvns9nhZHFIBUwDu7GmIhhZ7PxSDmHpQioW1yOTkZ
MgUF75CDzta9UBv33Sc0GEbFzt+JP6euJuLnDayWBmEG8wztPGDmXw07yIBa/Uz9
l5cUiM/SMKHUexip411zDQCDMt6Z1b5jJF+ZniOWDCV3NTgZbDHD+4J2ikzle5/U
9O4yKacDkGYPuQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:48 2026 by rpki-client