Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: Z3NxjXjbTt5Yn22PBQzS3Yj/4FFHmEdtpWYjK/wPtAk=
Subject key identifier: DD:DA:7E:0F:0D:11:6A:39:49:D4:41:35:B6:51:BF:78:2F:2A:6C:C4
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 01A0E8C1A4A1DE2A6DCFCDB8A2F97FF19624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 1A7F
Signing time: Mon 28 Sep 2026 16:03:19 +0000
Manifest this update: Mon 28 Sep 2026 16:03:19 +0000
Manifest next update: Tue 29 Sep 2026 16:03:19 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: +b1NeJnokbretjnbzFXwqlwE2Z0mIXbdsoKZLLj3f4c=)
2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=)
3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=)
4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:a4:a1:de:2a:6d:cf:cd:b8:a2:f9:7f:f1:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Sep 28 16:03:19 2026 GMT
Not After : Sep 29 16:03:19 2026 GMT
Subject: CN=ddda7e0f0d116a3949d44135b651bf782f2a6cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:b9:ad:6c:e4:c0:d3:87:8a:41:60:36:fc:
48:88:c8:54:15:c1:37:10:5f:6f:c8:33:18:41:ad:
6e:db:a4:42:40:06:1e:ba:12:33:38:fc:b1:59:7d:
61:6c:f6:f4:4c:85:11:b3:43:3e:2f:b5:1e:11:39:
3d:88:5b:4e:d2:9e:08:31:6e:89:32:d2:92:3d:d2:
64:c5:25:d7:a2:f3:8c:87:5a:f7:be:a1:85:02:0a:
99:a2:2e:74:19:ef:79:78:28:0b:24:fb:bb:1e:6b:
91:3d:14:c7:3a:d0:0c:7c:11:67:0c:26:db:c4:34:
41:93:65:e3:be:ce:20:aa:48:dd:1a:6d:77:f3:a6:
7d:0b:5f:b3:1d:e9:16:c5:40:56:9b:1a:a2:f3:92:
0b:d9:3c:6e:1f:03:c0:64:27:ce:33:46:3b:45:73:
a6:87:15:19:92:da:9d:d9:5f:71:29:a0:5d:9a:c0:
d6:42:37:a7:ee:20:c4:ad:cb:69:ca:b3:6d:e7:36:
35:66:64:12:44:c5:d7:a6:ba:54:8c:f0:8e:3c:54:
36:d0:e4:67:3d:89:9a:c0:b4:8e:97:f9:1b:f1:a3:
d4:9a:54:68:b4:28:9b:b3:49:85:6c:10:cd:18:9b:
af:53:d9:d5:af:29:5d:90:9a:dc:2c:c1:cf:7f:e7:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DA:7E:0F:0D:11:6A:39:49:D4:41:35:B6:51:BF:78:2F:2A:6C:C4
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1a:fb:84:de:d6:f9:c3:26:5c:b1:c4:a9:38:ab:28:29:ee:
20:7d:10:1f:f9:43:24:f3:ef:ea:d0:21:5f:2f:0c:5d:eb:52:
ce:ec:00:ce:99:1e:ad:d1:54:22:05:aa:a4:d0:ee:d1:a6:ad:
5d:22:74:39:76:1d:bd:cf:a5:a2:13:19:ba:6e:16:6a:b6:ee:
f7:83:69:c2:42:27:60:c4:66:39:4f:55:50:af:58:69:e0:6f:
4c:bf:bd:68:20:ba:90:0d:50:cb:ad:17:25:99:6e:21:71:06:
bb:74:d0:39:9f:b8:5e:98:79:4c:0d:30:3e:9d:72:a8:99:60:
09:94:d6:1e:74:6e:a8:81:fa:04:02:7e:ea:e5:ca:93:88:81:
f0:e8:0e:5a:a0:9c:2a:b7:c6:7e:32:d7:df:e4:bd:89:3e:01:
87:76:bb:01:62:fb:2a:67:6b:e2:d5:a4:5b:83:50:f3:46:fe:
e4:e6:ab:9f:cc:87:1f:7c:ad:39:69:5d:c0:d7:28:ff:61:65:
e4:3b:94:66:43:3f:5c:0b:42:0f:af:63:f0:5d:2c:80:23:3f:
05:bd:90:8c:ce:22:e3:c7:2a:1c:55:0e:f7:be:4b:4b:a0:b4:
0c:b3:01:d3:e4:66:2b:e1:ff:59:3f:04:6e:7b:62:42:ef:c3:
5f:e2:11:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowaSh3iptz824ovl/8ZYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk
ZjhjYWIwHhcNMjYwOTI4MTYwMzE5WhcNMjYwOTI5MTYwMzE5WjAzMTEwLwYDVQQD
EyhkZGRhN2UwZjBkMTE2YTM5NDlkNDQxMzViNjUxYmY3ODJmMmE2Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPW5rWzkwNOHikFgNvxIiMhUFcE3
EF9vyDMYQa1u26RCQAYeuhIzOPyxWX1hbPb0TIURs0M+L7UeETk9iFtO0p4IMW6J
MtKSPdJkxSXXovOMh1r3vqGFAgqZoi50Ge95eCgLJPu7HmuRPRTHOtAMfBFnDCbb
xDRBk2Xjvs4gqkjdGm1386Z9C1+zHekWxUBWmxqi85IL2TxuHwPAZCfOM0Y7RXOm
hxUZktqd2V9xKaBdmsDWQjen7iDErctpyrNt5zY1ZmQSRMXXprpUjPCOPFQ20ORn
PYmawLSOl/kb8aPUmlRotCibs0mFbBDNGJuvU9nVryldkJrcLMHPf+fxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3afg8NEWo5SdRBNbZRv3gvKmzEMB8GA1UdIwQY
MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt
MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj
LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBr7hN7W
+cMmXLHEqTirKCnuIH0QH/lDJPPv6tAhXy8MXetSzuwAzpkerdFUIgWqpNDu0aat
XSJ0OXYdvc+lohMZum4Warbu94NpwkInYMRmOU9VUK9YaeBvTL+9aCC6kA1Qy60X
JZluIXEGu3TQOZ+4Xph5TA0wPp1yqJlgCZTWHnRuqIH6BAJ+6uXKk4iB8OgOWqCc
KrfGfjLX3+S9iT4Bh3a7AWL7Kmdr4tWkW4NQ80b+5Oarn8yHH3ytOWldwNco/2Fl
5DuUZkM/XAtCD69j8F0sgCM/Bb2QjM4i48cqHFUO975LS6C0DLMB0+RmK+H/WT8E
bntiQu/DX+IRVg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:32:07 2026 by rpki-client