Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: dTt9EbIOe3ZBPsAOia0vDxGFy+Rld51OLGvyJoZtCJk=
Subject key identifier: 1D:C0:1F:03:75:B2:F5:8B:94:C7:51:7D:B9:1A:BB:CF:9F:E2:1D:4F
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01A0D3A5D1F468BD20FAEF17292227C17CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1899
Signing time: Thu 24 Sep 2026 13:40:54 +0000
Manifest this update: Thu 24 Sep 2026 13:40:54 +0000
Manifest next update: Fri 25 Sep 2026 13:40:54 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: Ts2be2sm4CO2pQT4Xwujq9aPOAhG9akoLkwo+VPUgck=)
2: knurMTGzv5N9Th8qibfuM3XDIRg.asa (hash: h5fB72wzGphQR7ZUl0WEDBhZkeKJwZbslJ5h82PZpR0=)
3: swjIGqN6DN3Ca974iRXFGBijp9c.roa (hash: rW/KrfsjqzaW573dxssu8kVIiwDSL2ZDsZ8f8WBDZhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:a5:d1:f4:68:bd:20:fa:ef:17:29:22:27:c1:7c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Sep 24 13:40:54 2026 GMT
Not After : Sep 25 13:40:54 2026 GMT
Subject: CN=1dc01f0375b2f58b94c7517db91abbcf9fe21d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:50:cf:4b:5a:9b:9d:ab:51:f7:16:66:f9:
b3:df:e1:05:79:83:aa:57:6d:37:52:03:05:27:f2:
c1:b8:75:85:a8:d5:bc:b7:35:79:d9:5c:13:17:ed:
a2:36:08:dd:5b:1f:59:27:27:a3:d7:f2:c2:0f:dc:
63:2e:7c:04:3b:86:e4:97:57:53:15:84:3e:7f:93:
d7:ab:3e:3b:02:59:a7:03:8f:5b:f5:c9:15:af:52:
1b:77:d7:8a:bc:fb:e3:83:86:a8:18:e5:32:91:12:
0f:c7:a5:f0:37:e0:6e:f6:51:92:39:e7:a6:80:5f:
21:f7:bf:78:38:4d:83:a5:d7:44:14:f0:17:f4:7c:
d2:52:0d:51:1a:b4:b9:bb:61:62:25:22:34:b9:98:
77:fd:02:87:f5:00:49:87:69:e7:7a:d9:0d:e8:0f:
84:de:16:a3:f1:85:df:c5:0c:23:cf:89:54:fd:4e:
23:98:6e:34:11:09:a2:0c:c2:b3:8b:7e:18:e6:3e:
26:c5:61:36:00:a6:81:85:f3:79:b2:82:85:8e:c1:
40:17:7a:22:e6:a0:d1:08:ff:2a:44:c1:4a:f2:7d:
f9:7b:f7:83:7c:d6:58:48:57:c4:76:15:4a:4a:56:
90:2a:cf:94:22:42:f2:7f:84:bc:18:15:9f:0e:d8:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:1F:03:75:B2:F5:8B:94:C7:51:7D:B9:1A:BB:CF:9F:E2:1D:4F
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6f:fb:fd:c4:57:dd:d4:34:ae:1c:60:45:ad:42:c0:c9:fe:
5a:35:e9:03:75:58:eb:11:f3:39:7e:0e:01:d6:ee:8a:31:06:
36:ae:12:09:15:8e:7c:cf:7d:41:0a:8d:02:19:14:1a:24:d9:
74:55:3f:53:6a:b8:7d:42:b5:fe:95:be:6d:51:3f:fd:e5:3a:
2d:11:09:11:0e:6e:1e:d6:77:c2:87:de:e6:b3:77:10:a7:3f:
ed:42:f8:32:92:89:d1:2c:c0:c4:2c:18:4e:4f:81:0f:13:bb:
df:ea:47:37:7a:ab:e1:b5:6c:61:1a:48:8f:cb:5e:cf:0f:1b:
45:a1:39:5c:7f:15:92:57:8b:04:02:ce:2a:8d:20:60:de:e2:
49:f8:4f:34:db:50:4b:1d:96:30:b5:cd:10:d9:3b:97:3c:8b:
9b:7b:6e:2c:3e:90:f3:da:71:ab:57:a6:12:92:69:d6:37:89:
94:15:77:c9:65:bb:df:ee:cb:71:31:50:f3:58:3d:42:03:3e:
30:d0:c0:e1:14:d2:cf:05:e0:3e:6b:a3:fc:58:98:d7:51:d6:
f0:fb:b4:30:22:7a:65:34:24:60:81:c4:b9:82:31:96:be:14:
e2:a4:7e:90:3c:5a:88:d1:dc:e7:9c:77:56:91:70:cc:a6:12:
f2:bf:c9:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTpdH0aL0g+u8XKSInwXzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux
MjAyOGIwHhcNMjYwOTI0MTM0MDU0WhcNMjYwOTI1MTM0MDU0WjAzMTEwLwYDVQQD
EygxZGMwMWYwMzc1YjJmNThiOTRjNzUxN2RiOTFhYmJjZjlmZTIxZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyRQz0tam52rUfcWZvmz3+EFeYOq
V203UgMFJ/LBuHWFqNW8tzV52VwTF+2iNgjdWx9ZJyej1/LCD9xjLnwEO4bkl1dT
FYQ+f5PXqz47AlmnA49b9ckVr1Ibd9eKvPvjg4aoGOUykRIPx6XwN+Bu9lGSOeem
gF8h9794OE2DpddEFPAX9HzSUg1RGrS5u2FiJSI0uZh3/QKH9QBJh2nnetkN6A+E
3haj8YXfxQwjz4lU/U4jmG40EQmiDMKzi34Y5j4mxWE2AKaBhfN5soKFjsFAF3oi
5qDRCP8qRMFK8n35e/eDfNZYSFfEdhVKSlaQKs+UIkLyf4S8GBWfDthz5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3AHwN1svWLlMdRfbkau8+f4h1PMB8GA1UdIwQY
MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt
Yzg0OWJjMGYzNTliLzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli
LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW/7/cRX
3dQ0rhxgRa1CwMn+WjXpA3VY6xHzOX4OAdbuijEGNq4SCRWOfM99QQqNAhkUGiTZ
dFU/U2q4fUK1/pW+bVE//eU6LREJEQ5uHtZ3wofe5rN3EKc/7UL4MpKJ0SzAxCwY
Tk+BDxO73+pHN3qr4bVsYRpIj8tezw8bRaE5XH8VkleLBALOKo0gYN7iSfhPNNtQ
Sx2WMLXNENk7lzyLm3tuLD6Q89pxq1emEpJp1jeJlBV3yWW73+7LcTFQ81g9QgM+
MNDA4RTSzwXgPmuj/FiY11HW8Pu0MCJ6ZTQkYIHEuYIxlr4U4qR+kDxaiNHc55x3
VpFwzKYS8r/JXQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:54:30 2026 by rpki-client