Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: qthzx5CxFcHi1ycoYF00o850SDNcZtpDpUI6VCxalG8=
Subject key identifier: 1C:D0:9C:5A:4F:6B:E8:96:18:2B:89:B4:E6:14:F7:DB:49:07:1A:B5
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 01A13222AC4C95A3C65E80443B8010048FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 06A7
Signing time: Mon 12 Oct 2026 22:01:35 +0000
Manifest this update: Mon 12 Oct 2026 22:01:35 +0000
Manifest next update: Tue 13 Oct 2026 22:01:35 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: +xi8LPRiwIFZCZkx5TrzTkYElQTH2ohBnxDKec1Xu8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:ac:4c:95:a3:c6:5e:80:44:3b:80:10:04:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Oct 12 22:01:35 2026 GMT
Not After : Oct 13 22:01:35 2026 GMT
Subject: CN=1cd09c5a4f6be896182b89b4e614f7db49071ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:e2:49:8f:4a:a8:17:98:60:ef:a6:7e:80:
1a:73:ad:ef:2f:bf:98:f0:8c:3e:38:1f:5b:93:ad:
92:08:bc:64:63:d2:93:b1:b8:1a:d4:ac:ab:d2:6f:
37:66:08:ea:6c:99:d5:4f:a0:b5:e9:14:75:22:f1:
14:5e:56:ee:5c:e2:17:4f:6c:43:a6:05:7e:bb:d4:
96:4c:c8:17:47:fc:d1:50:d6:49:b0:49:59:be:36:
0e:a7:f5:24:3b:9e:46:28:9d:47:41:99:99:88:b3:
3c:63:93:3b:fb:0d:41:2b:18:f5:8e:21:3c:1e:0b:
6a:06:69:81:4b:26:37:88:37:a8:77:75:75:be:1d:
b3:2d:0e:e9:0a:0d:92:6a:fc:ef:5e:dd:cb:73:db:
ea:33:cd:61:98:35:a5:ad:6b:04:04:fc:1b:e7:2e:
f4:ce:d8:5c:e0:55:ab:0c:44:7a:d3:a7:ad:99:61:
d5:72:9e:71:7d:b0:19:ae:39:51:48:bc:66:c9:28:
c2:65:14:0e:be:7e:0e:7d:f7:02:08:a7:c6:23:b9:
8b:ea:4f:b8:69:85:66:a3:88:88:d1:d9:dd:b9:a3:
3b:25:ec:78:0d:27:37:c6:9a:ac:37:1c:b7:77:e4:
60:6b:d3:72:d5:a9:06:25:e3:f8:c3:e4:0c:88:71:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:9C:5A:4F:6B:E8:96:18:2B:89:B4:E6:14:F7:DB:49:07:1A:B5
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:36:b8:05:0c:56:ce:40:8b:59:f9:59:b5:77:1b:65:ae:
8f:f7:df:3f:f9:85:95:a9:fe:b5:e5:76:26:29:27:0b:a6:59:
a2:53:38:d6:f5:ab:8a:b3:73:65:99:23:46:c5:15:12:03:93:
c9:91:21:bc:17:33:a4:38:3b:08:c0:9a:4a:c4:ba:70:ba:49:
4d:a2:ef:d3:6a:96:1d:8b:3b:28:7e:ff:65:c7:cd:09:b9:b4:
fb:4e:86:00:f5:36:3d:b9:c4:7b:1e:0f:03:80:5d:49:28:05:
81:2e:9d:14:d1:6a:bb:a4:63:4c:4a:40:1e:3b:8f:a2:35:79:
49:31:64:fa:3f:f7:95:d6:0d:d6:7b:bd:ec:30:9a:a5:7c:7e:
85:73:a1:e1:62:9c:c6:b5:d8:c5:75:48:13:2c:19:cf:1d:4b:
5f:0b:99:b8:6d:92:9c:d1:7a:ae:56:4d:f3:5e:89:11:f8:5b:
2a:7f:19:d3:6b:ec:64:55:1d:a0:ba:f0:40:01:dc:a5:7f:51:
68:7f:79:33:b0:95:55:55:c8:25:22:ed:9f:27:85:27:e1:b5:
e1:d5:0e:d0:ca:75:85:7f:f6:5b:22:ee:ab:cc:e4:86:02:d1:
0d:1b:58:99:9c:4e:00:fb:b5:07:ba:dd:c3:cc:cd:6d:6a:64:
e0:db:dc:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyIqxMlaPGXoBEO4AQBI+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh
NzBkOWEwHhcNMjYxMDEyMjIwMTM1WhcNMjYxMDEzMjIwMTM1WjAzMTEwLwYDVQQD
EygxY2QwOWM1YTRmNmJlODk2MTgyYjg5YjRlNjE0ZjdkYjQ5MDcxYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uPiSY9KqBeYYO+mfoAac63vL7+Y
8Iw+OB9bk62SCLxkY9KTsbga1Kyr0m83ZgjqbJnVT6C16RR1IvEUXlbuXOIXT2xD
pgV+u9SWTMgXR/zRUNZJsElZvjYOp/UkO55GKJ1HQZmZiLM8Y5M7+w1BKxj1jiE8
HgtqBmmBSyY3iDeod3V1vh2zLQ7pCg2SavzvXt3Lc9vqM81hmDWlrWsEBPwb5y70
zthc4FWrDER606etmWHVcp5xfbAZrjlRSLxmySjCZRQOvn4OffcCCKfGI7mL6k+4
aYVmo4iI0dnduaM7Jex4DSc3xpqsNxy3d+Rga9Ny1akGJeP4w+QMiHFBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzQnFpPa+iWGCuJtOYU99tJBxq1MB8GA1UdIwQY
MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt
MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3
LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPo2uAUM
Vs5Ai1n5WbV3G2Wuj/ffP/mFlan+teV2JiknC6ZZolM41vWrirNzZZkjRsUVEgOT
yZEhvBczpDg7CMCaSsS6cLpJTaLv02qWHYs7KH7/ZcfNCbm0+06GAPU2PbnEex4P
A4BdSSgFgS6dFNFqu6RjTEpAHjuPojV5STFk+j/3ldYN1nu97DCapXx+hXOh4WKc
xrXYxXVIEywZzx1LXwuZuG2SnNF6rlZN816JEfhbKn8Z02vsZFUdoLrwQAHcpX9R
aH95M7CVVVXIJSLtnyeFJ+G14dUO0Mp1hX/2WyLuq8zkhgLRDRtYmZxOAPu1B7rd
w8zNbWpk4Nvc+A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:16:18 2026 by rpki-client