Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: DT1sfv9jFqu+YcSEuNxUYbRBLKMKLPNwrmCDXmQUQKU=
Subject key identifier: B4:DA:2D:3E:8D:C6:DA:DE:AC:BB:36:27:1C:4C:80:8C:14:42:97:B0
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 01A0D9BB1D1487F309AAE869FAA90F931BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 111A
Signing time: Fri 25 Sep 2026 18:01:53 +0000
Manifest this update: Fri 25 Sep 2026 18:01:53 +0000
Manifest next update: Sat 26 Sep 2026 18:01:53 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: amcNMfN24fXXnC+X6nz7oJ2PVhu+leTe3/jVruUaQe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:1d:14:87:f3:09:aa:e8:69:fa:a9:0f:93:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Sep 25 18:01:53 2026 GMT
Not After : Sep 26 18:01:53 2026 GMT
Subject: CN=b4da2d3e8dc6dadeacbb36271c4c808c144297b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:a8:48:58:1b:98:95:75:07:82:b2:38:77:
9a:57:1d:f9:c4:b9:5d:ff:76:19:e5:a7:95:86:5d:
d5:94:06:d9:c3:ee:cb:7d:fb:dc:6f:80:20:56:35:
88:01:fa:22:06:37:d9:b5:e3:6c:7c:af:3b:96:8b:
09:7a:13:c0:e9:47:40:a6:62:bd:80:4a:f7:92:e7:
24:31:45:f0:91:29:03:0f:71:82:d0:4a:b3:f5:6a:
7d:95:17:94:9f:13:34:93:53:a6:89:2f:89:ec:3c:
f5:dc:44:38:7f:94:54:f9:cf:d8:b5:14:dd:23:3a:
c2:55:d1:91:88:d0:8b:01:9a:7d:b6:60:4c:05:99:
b8:05:70:d0:60:5d:ae:e7:d8:d4:d4:86:78:bd:14:
8b:4b:6f:6e:b7:7a:ba:d0:87:44:f8:f2:64:3f:c6:
bd:bd:a6:1a:b5:20:f0:0e:f4:0c:27:c1:11:b7:81:
a2:20:7a:6f:0d:91:a7:6e:91:29:b2:be:e6:18:d6:
20:ef:b5:5b:4a:f7:8b:48:cc:e1:37:b8:fa:b6:1b:
96:a9:34:fe:a9:ee:ac:ac:fd:b7:21:2d:6d:22:45:
39:a6:80:5a:b4:bb:b1:5b:c1:fb:29:ce:9d:6e:1a:
87:c6:e6:a2:af:31:46:5c:ea:14:67:f5:b2:d5:7a:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:2D:3E:8D:C6:DA:DE:AC:BB:36:27:1C:4C:80:8C:14:42:97:B0
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:e0:58:30:03:d9:9e:0f:ea:bc:45:ce:3d:8d:fe:46:ce:
be:8c:4b:61:61:a6:03:e0:01:2a:20:61:a2:7a:c4:0f:c5:0e:
f3:3c:e2:a1:30:c7:eb:61:ed:d6:c2:24:7e:03:94:e3:e9:fe:
97:76:4b:65:c5:c6:7a:bc:82:b3:01:43:43:fb:85:0c:48:57:
fa:d9:1f:68:26:f5:2d:07:5b:0b:11:22:50:33:cf:c2:fa:6f:
47:e8:e5:55:8c:b5:82:ed:6b:39:33:cf:9a:da:48:34:fe:14:
ad:6d:50:65:f6:66:d5:c2:e0:13:91:78:2b:a5:e8:a7:3e:7e:
38:3c:7f:fb:08:91:81:c7:1c:5b:6f:84:aa:d3:c7:ab:a8:ab:
98:27:39:b8:f4:82:8b:0f:cd:5c:6d:cd:ca:16:e7:73:9c:6f:
c4:52:50:20:75:32:69:7c:1d:5c:a0:eb:b1:36:b1:67:0a:36:
60:b0:ed:ea:87:5e:01:00:dc:b0:a3:05:9d:59:a2:fb:90:99:
c5:77:6d:50:c3:3d:b1:66:74:b9:92:42:97:23:4e:48:7c:58:
d6:f5:ef:15:02:8a:76:5f:be:a1:3c:49:b7:82:89:58:88:9d:
c8:99:4d:b8:b1:be:94:69:d4:3f:b6:4c:28:93:c0:76:c6:f3:
5b:40:4b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZux0Uh/MJquhp+qkPkxv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGI0YTdkMWU2YWJmZmJjZGE3OGJmYzMzMTI1MGRkMTZi
ZTNkZTAwHhcNMjYwOTI1MTgwMTUzWhcNMjYwOTI2MTgwMTUzWjAzMTEwLwYDVQQD
EyhiNGRhMmQzZThkYzZkYWRlYWNiYjM2MjcxYzRjODA4YzE0NDI5N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFaoSFgbmJV1B4KyOHeaVx35xLld
/3YZ5aeVhl3VlAbZw+7Lffvcb4AgVjWIAfoiBjfZteNsfK87losJehPA6UdApmK9
gEr3kuckMUXwkSkDD3GC0Eqz9Wp9lReUnxM0k1OmiS+J7Dz13EQ4f5RU+c/YtRTd
IzrCVdGRiNCLAZp9tmBMBZm4BXDQYF2u59jU1IZ4vRSLS29ut3q60IdE+PJkP8a9
vaYatSDwDvQMJ8ERt4GiIHpvDZGnbpEpsr7mGNYg77VbSveLSMzhN7j6thuWqTT+
qe6srP23IS1tIkU5poBatLuxW8H7Kc6dbhqHxuairzFGXOoUZ/Wy1Xo++QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTaLT6NxtrerLs2JxxMgIwUQpewMB8GA1UdIwQY
MBaAFNHbSn0ear/7zaeL/DMSUN0Wvj3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjIt
Y2M3OGFmNGU4MDE2LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjItY2M3OGFmNGU4MDE2
LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVrgWDAD
2Z4P6rxFzj2N/kbOvoxLYWGmA+ABKiBhonrED8UO8zzioTDH62Ht1sIkfgOU4+n+
l3ZLZcXGeryCswFDQ/uFDEhX+tkfaCb1LQdbCxEiUDPPwvpvR+jlVYy1gu1rOTPP
mtpINP4UrW1QZfZm1cLgE5F4K6Xopz5+ODx/+wiRgcccW2+EqtPHq6irmCc5uPSC
iw/NXG3Nyhbnc5xvxFJQIHUyaXwdXKDrsTaxZwo2YLDt6odeAQDcsKMFnVmi+5CZ
xXdtUMM9sWZ0uZJClyNOSHxY1vXvFQKKdl++oTxJt4KJWIidyJlNuLG+lGnUP7ZM
KJPAdsbzW0BLGg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:59:40 2026 by rpki-client