Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: +Nyr+ojEWB/Vnmq2janVLeh03Ln3OfcSxr0mljdXnZU=
Subject key identifier: 4A:F8:FA:A6:69:E7:15:C4:E5:E2:18:C3:68:E7:6D:98:A3:6E:65:41
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 01A0F6E944BABE9E0E7189A6C38EE17CBE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 185E
Signing time: Thu 01 Oct 2026 10:01:17 +0000
Manifest this update: Thu 01 Oct 2026 10:01:17 +0000
Manifest next update: Fri 02 Oct 2026 10:01:17 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: kbaPp8ykNI/E7ZPEN3oEll9NHAT5JLU0JCE9sINAdYQ=)
2: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (hash: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ=)
3: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (hash: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:44:ba:be:9e:0e:71:89:a6:c3:8e:e1:7c:be:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Oct 1 10:01:17 2026 GMT
Not After : Oct 2 10:01:17 2026 GMT
Subject: CN=4af8faa669e715c4e5e218c368e76d98a36e6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:56:96:73:c1:03:de:a5:d1:cf:00:93:a4:
d6:d9:09:f6:0c:53:b3:73:e8:da:27:4d:bb:cd:14:
f2:cf:3f:8c:64:10:f2:dc:af:07:b7:0d:c4:6d:92:
15:75:93:6d:1d:7a:2d:6b:4d:7e:90:bb:2a:f5:1f:
d8:37:ed:fb:04:a0:3d:a1:b0:fb:05:c9:76:f0:f6:
c9:05:b4:98:aa:38:47:49:ec:c3:36:84:b4:e5:1e:
65:d8:ba:f7:06:be:a4:50:f2:75:6f:48:fc:cd:b5:
ac:df:46:12:26:d1:20:45:44:86:0b:a8:47:41:dd:
6f:18:33:9a:f7:8e:32:be:68:03:9f:6a:12:6a:ee:
90:40:25:6b:4f:11:e6:0d:8e:d3:be:07:90:f7:8c:
42:cf:88:29:13:89:69:f2:d2:88:2c:8a:83:e0:22:
85:b0:88:9b:d6:0e:65:47:4a:90:5c:c5:c7:2f:5a:
0e:d6:92:dd:1d:f6:59:4a:a4:c5:f9:f1:f8:8c:f2:
9b:89:b8:04:63:f0:47:ed:1b:94:9e:f2:b1:8d:7b:
9a:f8:91:13:c5:87:f2:13:73:e0:c7:34:15:28:1c:
b3:dc:41:7d:73:c1:3e:02:10:6d:ab:91:b7:d6:69:
49:4a:2b:17:1c:55:38:4d:ed:44:b3:bd:5f:2d:53:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:FA:A6:69:E7:15:C4:E5:E2:18:C3:68:E7:6D:98:A3:6E:65:41
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9d:f4:7c:c3:c5:6b:d5:60:db:c2:54:60:8d:a0:f9:e9:d2:
98:4d:e7:1f:eb:27:37:93:d0:93:ec:ab:a9:9c:52:ff:fc:3b:
0a:e3:06:ee:d6:e9:5e:2b:9d:1c:55:ad:7d:36:7a:3c:ce:02:
68:36:93:df:75:51:01:27:23:ac:21:2f:b4:35:5f:a9:c1:3d:
5c:30:2e:05:15:a5:8c:f2:4b:49:d7:1a:81:09:5a:7f:08:ee:
e6:75:a9:75:f0:40:43:26:dd:0c:70:08:90:c8:97:50:4d:40:
ff:fe:ea:9c:10:8b:c9:82:a6:d7:56:7e:1a:bf:98:00:c8:42:
a5:7d:95:2c:4c:0b:91:37:70:4e:73:f2:d4:7a:8b:c5:d6:ed:
91:33:41:3b:69:a3:38:c1:7c:46:17:23:fc:e5:f3:a8:2e:74:
86:a3:16:d8:d9:69:68:06:cd:ce:8f:33:05:bc:a7:5e:2c:ba:
89:79:f8:7d:e2:b1:14:b5:a2:de:8a:bb:0a:5b:87:40:3b:39:
b9:d7:31:0b:02:d9:fe:85:b5:96:ca:24:3b:eb:7a:07:ed:44:
9b:cf:d5:13:8f:35:f4:a9:fc:46:ce:4d:90:a7:08:6e:ba:81:
c2:c4:a4:c9:3f:a9:84:9a:a5:f4:5b:68:79:8f:1a:50:26:b4:
95:d0:7d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26US6vp4OcYmmw47hfL5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjViZDIxYzY4MzIwN2RhMGMzOWZiMzc5ODUzNWFmNDll
MGJmZjUwHhcNMjYxMDAxMTAwMTE3WhcNMjYxMDAyMTAwMTE3WjAzMTEwLwYDVQQD
Eyg0YWY4ZmFhNjY5ZTcxNWM0ZTVlMjE4YzM2OGU3NmQ5OGEzNmU2NTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xxWlnPBA96l0c8Ak6TW2Qn2DFOz
c+jaJ027zRTyzz+MZBDy3K8Htw3EbZIVdZNtHXota01+kLsq9R/YN+37BKA9obD7
Bcl28PbJBbSYqjhHSezDNoS05R5l2Lr3Br6kUPJ1b0j8zbWs30YSJtEgRUSGC6hH
Qd1vGDOa944yvmgDn2oSau6QQCVrTxHmDY7TvgeQ94xCz4gpE4lp8tKILIqD4CKF
sIib1g5lR0qQXMXHL1oO1pLdHfZZSqTF+fH4jPKbibgEY/BH7RuUnvKxjXua+JET
xYfyE3PgxzQVKByz3EF9c8E+AhBtq5G31mlJSisXHFU4Te1Es71fLVO2PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr4+qZp5xXE5eIYw2jnbZijbmVBMB8GA1UdIwQY
MBaAFA9lvSHGgyB9oMOfs3mFNa9J4L/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgt
ZTIzZjEwZTRiOTFjLzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgtZTIzZjEwZTRiOTFj
LzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ30fMPF
a9Vg28JUYI2g+enSmE3nH+snN5PQk+yrqZxS//w7CuMG7tbpXiudHFWtfTZ6PM4C
aDaT33VRAScjrCEvtDVfqcE9XDAuBRWljPJLSdcagQlafwju5nWpdfBAQybdDHAI
kMiXUE1A//7qnBCLyYKm11Z+Gr+YAMhCpX2VLEwLkTdwTnPy1HqLxdbtkTNBO2mj
OMF8Rhcj/OXzqC50hqMW2NlpaAbNzo8zBbynXiy6iXn4feKxFLWi3oq7CluHQDs5
udcxCwLZ/oW1lsokO+t6B+1Em8/VE4819Kn8Rs5NkKcIbrqBwsSkyT+phJql9Fto
eY8aUCa0ldB9Wg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 19:46:53 2026 by rpki-client