
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
File: DXPUvXkdXM6A4CbErX1CfRV1k0c.mft (raw, json)
Hash identifier: 6X7su5VhG0yJJOJhNuHnxsPHwdjzciv9MK+2zoN/698=
Subject key identifier: A7:26:9F:F1:BA:CC:27:4F:3F:34:F7:F8:77:41:05:BC:98:43:44:48
Authority key identifier: 0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
Certificate issuer: /CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Certificate serial: 01A0D94D1992A5547B92846BCC200DC3993A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
Manifest number: 1F
Signing time: Fri 25 Sep 2026 16:01:43 +0000
Manifest this update: Fri 25 Sep 2026 16:01:43 +0000
Manifest next update: Sat 26 Sep 2026 16:01:43 +0000
Files and hashes: 1: DXPUvXkdXM6A4CbErX1CfRV1k0c.crl (hash: bK0s6le0X07xPPRvX6gVu4AeELIBEU0Ev8UG0TQQLPs=)
2: dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa (hash: DyW/hyjh1BJFkTRjbEkpEYcuJTV4LPGigS20lQaYWE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:19:92:a5:54:7b:92:84:6b:cc:20:0d:c3:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Validity
Not Before: Sep 25 16:01:43 2026 GMT
Not After : Sep 26 16:01:43 2026 GMT
Subject: CN=a7269ff1bacc274f3f34f7f8774105bc98434448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:23:e5:13:cb:ff:23:3d:c1:eb:42:b9:db:
ef:be:9f:9c:e7:19:ac:b8:f2:6e:a4:38:c2:fc:93:
93:06:41:11:96:c8:1e:66:aa:9e:78:17:e9:6c:07:
36:4f:4b:05:01:5d:5b:eb:a4:b1:c6:4d:c3:55:12:
dd:73:06:d3:41:ae:a7:f7:2e:b9:90:7f:8c:47:c8:
66:28:f5:56:16:f1:8c:a0:38:03:eb:ff:27:83:38:
f8:fd:4d:ba:b3:0c:c0:fb:d6:75:fe:dd:4e:42:c7:
90:67:13:02:bf:87:e0:3a:d7:bd:c1:47:9d:b8:ce:
19:5f:db:46:10:f4:3a:51:66:2a:57:cd:ae:99:ae:
3a:d7:9a:ce:5a:cc:a1:5c:3b:66:a2:38:b7:2a:b3:
3e:ae:26:58:1c:16:0f:4f:e8:46:05:af:0d:90:ab:
60:df:60:49:91:36:5f:5f:47:2a:c5:f9:75:bf:cd:
75:14:20:f2:78:63:3f:b9:c0:dc:28:f3:b4:f4:99:
fb:70:4f:64:cf:49:82:88:68:88:44:93:a4:a8:1a:
e4:ef:9f:0b:9a:55:d3:bd:ac:0a:db:fd:94:87:fd:
3e:4f:40:6c:d5:3d:9d:b3:51:d3:22:7d:b8:44:95:
93:a1:27:61:79:e8:9e:1f:52:92:61:fe:6e:34:20:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:26:9F:F1:BA:CC:27:4F:3F:34:F7:F8:77:41:05:BC:98:43:44:48
X509v3 Authority Key Identifier:
keyid:0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:b4:3f:07:4d:a7:c5:77:b4:83:6f:0f:9d:f9:51:16:92:
e1:1f:33:b9:94:29:5f:09:5b:ed:f4:e0:5d:7d:58:a9:56:54:
00:05:37:cc:39:09:18:54:14:96:5e:6a:03:d9:c9:85:87:ea:
fe:5a:ce:a5:0f:f6:65:0e:11:2b:d2:36:bc:e6:11:fa:c7:f6:
ad:ca:54:bd:9f:93:1d:84:ed:b4:36:4f:b0:f6:c4:bc:68:9b:
05:db:ad:f6:2b:5c:35:df:bf:4b:4c:3b:0c:47:4c:e2:8f:2f:
77:9d:01:ac:d9:8e:e1:64:b9:7f:00:29:2d:c2:f9:3c:14:75:
a8:cc:55:80:16:0c:1b:86:1a:3d:b7:63:f1:e9:93:81:7a:c6:
e3:f1:19:50:6d:49:7a:24:48:72:6a:15:20:78:40:57:78:ff:
8d:8d:79:d7:69:1d:5a:8b:64:3b:4d:1d:fc:b0:17:ba:d5:98:
3a:15:42:de:a4:d9:5f:98:84:3a:81:d6:cf:db:30:c7:26:c2:
32:89:75:16:81:97:58:19:70:ec:41:fa:60:5b:c5:5b:6f:ec:
7f:e8:f4:b8:c3:fd:2b:33:6a:ba:d2:c6:1a:74:cd:ee:0d:b2:
cd:9b:00:eb:a5:8f:f5:5f:de:b8:cc:e2:b0:60:c6:e6:c8:13:
7f:6f:ae:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTRmSpVR7koRrzCANw5k6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzNkNGJkNzkxZDVjY2U4MGUwMjZjNGFkN2Q0MjdkMTU3
NTkzNDcwHhcNMjYwOTI1MTYwMTQzWhcNMjYwOTI2MTYwMTQzWjAzMTEwLwYDVQQD
EyhhNzI2OWZmMWJhY2MyNzRmM2YzNGY3Zjg3NzQxMDViYzk4NDM0NDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFoj5RPL/yM9wetCudvvvp+c5xms
uPJupDjC/JOTBkERlsgeZqqeeBfpbAc2T0sFAV1b66Sxxk3DVRLdcwbTQa6n9y65
kH+MR8hmKPVWFvGMoDgD6/8ngzj4/U26swzA+9Z1/t1OQseQZxMCv4fgOte9wUed
uM4ZX9tGEPQ6UWYqV82uma4615rOWsyhXDtmoji3KrM+riZYHBYPT+hGBa8NkKtg
32BJkTZfX0cqxfl1v811FCDyeGM/ucDcKPO09Jn7cE9kz0mCiGiIRJOkqBrk758L
mlXTvawK2/2Uh/0+T0Bs1T2ds1HTIn24RJWToSdheeieH1KSYf5uNCBlmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcmn/G6zCdPPzT3+HdBBbyYQ0RIMB8GA1UdIwQY
MBaAFA1z1L15HVzOgOAmxK19Qn0VdZNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhQVXZYa2RYTTZBNENiRXJYMUNmUlYxazBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kODZlYjYtOWZiMi00ZDdlLTg3YTMt
MGY5OWEzOWIwY2ZiLzEvRFhQVXZYa2RYTTZBNENiRXJYMUNmUlYxazBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kODZlYjYtOWZiMi00ZDdlLTg3YTMtMGY5OWEzOWIwY2Zi
LzEvRFhQVXZYa2RYTTZBNENiRXJYMUNmUlYxazBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0W0PwdN
p8V3tINvD535URaS4R8zuZQpXwlb7fTgXX1YqVZUAAU3zDkJGFQUll5qA9nJhYfq
/lrOpQ/2ZQ4RK9I2vOYR+sf2rcpUvZ+THYTttDZPsPbEvGibBdut9itcNd+/S0w7
DEdM4o8vd50BrNmO4WS5fwApLcL5PBR1qMxVgBYMG4YaPbdj8emTgXrG4/EZUG1J
eiRIcmoVIHhAV3j/jY1512kdWotkO00d/LAXutWYOhVC3qTZX5iEOoHWz9swxybC
Mol1FoGXWBlw7EH6YFvFW2/sf+j0uMP9KzNqutLGGnTN7g2yzZsA66WP9V/euMzi
sGDG5sgTf2+uMg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:02:11 2026 by rpki-client