Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
File: DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft (raw, json)
Hash identifier: 6G1KhCUkPcTngvUm5m6LnsSWr6grDaazXbUg1SuKtcY=
Subject key identifier: C7:BE:6B:26:59:12:55:04:AE:76:4E:75:D9:35:2F:09:32:52:02:B9
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Certificate issuer: /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial: 01A1DE398C58509069057E3E03E228AE9A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
Manifest number: 021B
Signing time: Sun 15 Nov 2026 08:01:15 +0000
Manifest this update: Sun 15 Nov 2026 08:01:15 +0000
Manifest next update: Mon 16 Nov 2026 08:01:15 +0000
Files and hashes: 1: DfvjL4j67bdK_Y9b5FgFPIone28.roa (hash: DN0b0r0SCmON5lI1iJgQyiyDVOyUq2JE0Aw4+3S588A=)
2: DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl (hash: pJCOY3a8taSIfu2DsTUO3AE7TJusE//NtCic8DKOFEk=)
3: KSUNvWYBdy4YdVAnXzSA_dxlq3c.roa (hash: r+AYd5x4wloqbdcvcL3nVXv/9WOqz9qSDvAaU5o0QB0=)
4: xCTkLKibXwn7kJuskGFKNRORLDI.roa (hash: HzbQo8dOuYm/UXqOkIfkXlPnBODZYHsqopp3VQ9t2D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:8c:58:50:90:69:05:7e:3e:03:e2:28:ae:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
Validity
Not Before: Nov 15 08:01:15 2026 GMT
Not After : Nov 16 08:01:15 2026 GMT
Subject: CN=c7be6b2659125504ae764e75d9352f09325202b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:76:98:6d:18:ce:99:26:12:19:ac:74:ad:
ad:98:1a:53:e4:1c:37:33:6c:7e:98:7d:8b:8c:cd:
03:59:46:10:ed:7b:90:19:e6:ad:04:a1:86:ce:42:
a2:f7:31:75:ae:62:b2:ed:f5:81:1c:63:f8:f1:45:
cd:3b:de:f8:58:b3:b4:97:ed:7d:12:30:a5:7a:bd:
e2:f0:af:10:5f:e9:da:3a:b2:c4:bf:9e:30:bd:f8:
7d:21:3b:7e:dc:54:9b:4b:48:04:18:55:d0:6a:27:
70:51:0e:13:a2:8c:d7:41:92:17:27:c9:40:4d:3c:
df:01:a2:aa:de:c4:ae:8a:a6:91:30:05:b5:63:80:
b2:c8:74:01:c6:59:d1:69:80:42:32:52:12:4b:e1:
89:14:29:f7:f7:43:4d:85:10:b7:2a:f4:43:99:38:
91:0b:1b:e1:43:fc:23:ab:c1:44:64:d4:9a:ce:ed:
2d:72:c0:f6:91:07:ff:22:a5:dc:ef:70:4a:42:a7:
4c:70:9d:4c:8d:1d:1c:41:15:d2:64:b7:f7:f6:3b:
24:5f:8f:5c:e7:3b:62:a4:66:15:06:5a:81:df:51:
49:24:f0:66:9f:d9:89:70:ec:64:0c:5c:96:c3:aa:
e3:82:31:f7:76:2a:ca:77:42:f3:63:52:6a:46:88:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:6B:26:59:12:55:04:AE:76:4E:75:D9:35:2F:09:32:52:02:B9
X509v3 Authority Key Identifier:
keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:bf:e9:38:67:2e:96:c7:9d:f0:05:f0:60:ba:f0:f0:ab:
ec:05:2b:a6:86:a6:44:bc:81:be:da:e8:00:d0:ce:64:6a:e9:
1c:a6:7f:f8:26:1c:fb:ba:ab:2f:56:b8:88:a4:2f:5d:6d:12:
00:6f:ac:68:4b:d3:ac:d2:09:7f:e0:d2:00:40:b9:06:99:16:
40:aa:f6:93:d1:fa:0b:56:17:55:06:95:45:37:c9:4d:04:9a:
88:77:65:88:ac:8b:10:42:3c:57:b9:72:df:d3:30:88:da:a3:
e9:c7:cd:e0:ac:90:59:1b:c3:e4:03:27:a1:e1:0e:8d:fd:a7:
2c:c4:9d:ea:8b:48:b2:c8:47:97:ed:ca:f8:30:1b:57:de:f2:
d3:d4:ce:5f:e8:1f:0c:dc:d0:e1:08:8a:39:0b:d7:27:95:5d:
2c:6d:2c:df:cc:38:c0:31:7e:81:b4:84:16:44:3c:e3:b9:b5:
ac:e2:e2:eb:c8:2b:00:34:67:11:24:3c:4a:e3:78:e8:64:35:
14:5b:ca:68:4d:e6:d8:e6:df:a6:ee:d4:ca:6a:a1:ad:ff:9e:
0c:5b:3b:5c:bb:b3:2d:c2:6f:e3:49:ad:a2:46:fd:2d:c9:69:
2a:b3:f8:b6:3b:6b:45:5f:45:d3:81:8c:72:ec:81:b7:c2:43:
cb:4a:dc:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOYxYUJBpBX4+A+Iorpo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTU5MjYyMWQxODMwOTMxMmMwMTRjMTEyMmQ5NGE0MjEx
ZmE4MmIwHhcNMjYxMTE1MDgwMTE1WhcNMjYxMTE2MDgwMTE1WjAzMTEwLwYDVQQD
EyhjN2JlNmIyNjU5MTI1NTA0YWU3NjRlNzVkOTM1MmYwOTMyNTIwMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEV2mG0YzpkmEhmsdK2tmBpT5Bw3
M2x+mH2LjM0DWUYQ7XuQGeatBKGGzkKi9zF1rmKy7fWBHGP48UXNO974WLO0l+19
EjCler3i8K8QX+naOrLEv54wvfh9ITt+3FSbS0gEGFXQaidwUQ4ToozXQZIXJ8lA
TTzfAaKq3sSuiqaRMAW1Y4CyyHQBxlnRaYBCMlISS+GJFCn390NNhRC3KvRDmTiR
CxvhQ/wjq8FEZNSazu0tcsD2kQf/IqXc73BKQqdMcJ1MjR0cQRXSZLf39jskX49c
5ztipGYVBlqB31FJJPBmn9mJcOxkDFyWw6rjgjH3dirKd0LzY1JqRoi/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe+ayZZElUErnZOddk1LwkyUgK5MB8GA1UdIwQY
MBaAFA7lkmIdGDCTEsAUwRItlKQhH6grMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mOTQyYTEtYzAwNC00NDg0LWJjMWQt
NmI4NTgyMDliNWVlLzEvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mOTQyYTEtYzAwNC00NDg0LWJjMWQtNmI4NTgyMDliNWVl
LzEvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvy/6Thn
LpbHnfAF8GC68PCr7AUrpoamRLyBvtroANDOZGrpHKZ/+CYc+7qrL1a4iKQvXW0S
AG+saEvTrNIJf+DSAEC5BpkWQKr2k9H6C1YXVQaVRTfJTQSaiHdliKyLEEI8V7ly
39MwiNqj6cfN4KyQWRvD5AMnoeEOjf2nLMSd6otIsshHl+3K+DAbV97y09TOX+gf
DNzQ4QiKOQvXJ5VdLG0s38w4wDF+gbSEFkQ847m1rOLi68grADRnESQ8SuN46GQ1
FFvKaE3m2Obfpu7Uymqhrf+eDFs7XLuzLcJv40mtokb9LclpKrP4tjtrRV9F04GM
cuyBt8JDy0rc/g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:55:40 2026 by rpki-client