Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: 1mvJ+ovf/R4GZXSxN/rM/Wpempan9N7lq+kUc59nzoM=
Subject key identifier: A5:A2:44:77:00:50:8E:04:3F:EA:C8:5E:B9:30:78:12:18:96:4E:FF
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019F934A1839D2A715E7D8F55D0BF9DE4EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 17EB
Signing time: Fri 24 Jul 2026 08:42:14 +0000
Manifest this update: Fri 24 Jul 2026 08:42:14 +0000
Manifest next update: Sat 25 Jul 2026 08:42:14 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: fxpnQYez7V8tqN24AGRVRgxRmf4S8L8+W+fzsTzzdMc=)
2: UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa (hash: slGaHxdN7Oqozliq50gNi9OxqgfS+8LclDE77QIbzI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:4a:18:39:d2:a7:15:e7:d8:f5:5d:0b:f9:de:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jul 24 08:42:14 2026 GMT
Not After : Jul 25 08:42:14 2026 GMT
Subject: CN=a5a2447700508e043feac85eb930781218964eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:38:43:3b:2f:49:ce:f9:10:47:49:70:e3:
43:e9:ff:e5:47:af:c7:2a:d7:c6:34:5c:bd:48:93:
4b:28:a4:16:06:c6:5c:4c:fa:ff:82:31:ba:60:97:
4d:d5:13:b4:49:78:5c:a5:d9:b9:95:e6:31:f5:7a:
e1:63:bc:4e:8c:f2:d9:b4:d4:5f:d9:a5:81:27:0b:
46:24:c9:a3:ef:54:59:08:77:c3:50:16:0c:c6:dc:
68:6f:5b:ed:76:28:eb:79:25:21:08:8e:dd:54:76:
bb:4c:6b:11:a8:63:8f:ad:3f:14:a8:66:b0:11:0b:
7d:95:22:99:a4:33:d2:c9:1d:bd:f8:db:4a:53:0d:
1f:8f:3e:37:2c:e3:6e:27:86:75:68:72:43:11:c7:
e8:65:8d:02:9d:ae:38:1b:bc:68:f1:31:84:ca:b2:
27:db:e5:20:f8:8f:56:57:e5:d5:4d:f9:02:2a:7e:
9e:32:42:34:88:86:c2:35:fb:72:ed:35:96:d4:e2:
c1:20:c9:68:9c:65:1e:f6:28:21:eb:62:ee:e9:c5:
85:c1:b0:d4:23:9f:6b:01:8d:32:c5:d8:80:ca:7f:
91:17:f5:d0:3d:2a:09:89:de:23:bf:73:3a:d5:38:
61:2a:dc:f1:74:ea:6b:ea:d8:81:6c:c2:1b:b6:e6:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A2:44:77:00:50:8E:04:3F:EA:C8:5E:B9:30:78:12:18:96:4E:FF
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ca:09:15:47:3f:33:57:ec:b1:79:8b:fa:15:60:ef:12:f8:
6e:c3:d8:be:fa:e0:bc:5a:4c:c7:93:d3:4a:28:9f:1f:ed:9d:
7e:c9:4b:ea:57:d7:a7:ab:af:c0:ca:93:20:b6:30:06:e4:37:
92:fc:99:d6:c5:d9:8e:b5:06:e0:59:c0:a5:e4:65:37:23:c1:
b1:9c:cd:0f:4b:e1:d8:75:02:74:23:3b:ca:ed:e7:11:bf:27:
58:6a:da:1d:f6:c9:6e:69:14:e0:70:cc:69:fb:68:37:36:e0:
92:c9:0a:27:c2:e3:ee:91:58:fe:c9:29:f4:e5:d9:ee:fd:78:
a9:7b:dd:6b:e8:98:11:95:7a:a5:54:81:47:c4:d1:4f:e5:c0:
59:a9:2d:b6:08:49:26:25:fa:6b:9c:02:10:be:5e:94:63:30:
d1:bc:25:2b:da:eb:a4:e6:01:90:19:b1:6a:9d:40:fb:31:31:
c8:11:8c:8f:32:16:10:55:41:3e:54:69:38:bc:90:9e:c4:50:
4b:fb:ac:cb:c2:c2:1f:a9:27:c3:19:79:c7:3c:8e:8c:51:9c:
68:c1:da:95:69:90:0c:1b:ac:43:49:97:ee:1a:72:05:33:6c:
4b:1d:a8:43:de:96:1e:e5:c7:84:14:4f:00:58:a6:96:b1:db:
1c:d8:18:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TShg50qcV59j1XQv53k6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk
NzJmYmEwHhcNMjYwNzI0MDg0MjE0WhcNMjYwNzI1MDg0MjE0WjAzMTEwLwYDVQQD
EyhhNWEyNDQ3NzAwNTA4ZTA0M2ZlYWM4NWViOTMwNzgxMjE4OTY0ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqo4QzsvSc75EEdJcOND6f/lR6/H
KtfGNFy9SJNLKKQWBsZcTPr/gjG6YJdN1RO0SXhcpdm5leYx9XrhY7xOjPLZtNRf
2aWBJwtGJMmj71RZCHfDUBYMxtxob1vtdijreSUhCI7dVHa7TGsRqGOPrT8UqGaw
EQt9lSKZpDPSyR29+NtKUw0fjz43LONuJ4Z1aHJDEcfoZY0Cna44G7xo8TGEyrIn
2+Ug+I9WV+XVTfkCKn6eMkI0iIbCNfty7TWW1OLBIMlonGUe9igh62Lu6cWFwbDU
I59rAY0yxdiAyn+RF/XQPSoJid4jv3M61ThhKtzxdOpr6tiBbMIbtuaRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWiRHcAUI4EP+rIXrkweBIYlk7/MB8GA1UdIwQY
MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et
YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3
LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsoJFUc/
M1fssXmL+hVg7xL4bsPYvvrgvFpMx5PTSiifH+2dfslL6lfXp6uvwMqTILYwBuQ3
kvyZ1sXZjrUG4FnApeRlNyPBsZzND0vh2HUCdCM7yu3nEb8nWGraHfbJbmkU4HDM
aftoNzbgkskKJ8Lj7pFY/skp9OXZ7v14qXvda+iYEZV6pVSBR8TRT+XAWakttghJ
JiX6a5wCEL5elGMw0bwlK9rrpOYBkBmxap1A+zExyBGMjzIWEFVBPlRpOLyQnsRQ
S/usy8LCH6knwxl5xzyOjFGcaMHalWmQDBusQ0mX7hpyBTNsSx2oQ96WHuXHhBRP
AFimlrHbHNgYlw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:44 2026 by rpki-client