Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: 9ZdxYUnO0zm/7ageJTWi5Ej2FD4ovDn4I2ulqt83j8M=
Subject key identifier: 79:D5:1C:98:C9:73:65:50:22:55:01:B2:B2:C5:20:58:89:08:9F:69
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 01A106CA94E47EC85C9EABD52DC9DAF44AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 12:01:42 +0000
Manifest this update: Sun 04 Oct 2026 12:01:42 +0000
Manifest next update: Mon 05 Oct 2026 12:01:42 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: UqnPbOk0wTZbS/wg6RVwzscxYvHOCiOEYwnLA06UMXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:94:e4:7e:c8:5c:9e:ab:d5:2d:c9:da:f4:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Oct 4 12:01:42 2026 GMT
Not After : Oct 5 12:01:42 2026 GMT
Subject: CN=79d51c98c9736550225501b2b2c5205889089f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4d:a9:b4:76:37:23:df:4f:b1:16:44:21:21:
92:eb:6e:59:51:e1:7f:0d:b8:90:df:92:72:0d:b3:
d3:7a:36:1a:cd:fe:2f:fd:97:eb:a3:87:a2:ab:36:
37:63:da:53:97:25:62:f8:00:44:46:e2:3d:68:02:
d1:d3:9b:d1:10:f7:c8:e3:89:d8:3c:ce:f3:2c:5a:
c1:11:62:ce:87:9a:92:95:fa:14:37:8d:13:ef:32:
ae:1a:8a:da:db:6a:4b:88:cf:a5:00:b2:2e:38:1f:
05:8e:8c:e6:40:7e:1e:6a:49:f9:c8:94:fb:de:6e:
4c:f9:2e:eb:5d:d4:b2:b3:4e:77:02:00:7e:5e:5d:
2e:e7:70:b7:69:ba:0f:d1:94:82:8b:d0:c3:08:8b:
21:07:46:31:c0:2c:e1:31:5f:1f:ac:5d:81:2b:0f:
bc:23:76:ef:90:1f:59:1b:48:62:fe:91:82:e6:c9:
82:f7:95:0c:86:c1:17:e8:5e:b5:56:ae:ef:11:ca:
79:34:27:23:2b:04:15:d0:f4:70:58:ae:94:64:2a:
d5:31:14:43:78:33:69:6f:72:0b:aa:36:60:ee:96:
94:23:2e:d9:13:2d:93:ad:da:89:97:54:b9:91:10:
9a:28:c3:8c:59:1b:68:90:5a:0c:d6:fe:70:59:4a:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D5:1C:98:C9:73:65:50:22:55:01:B2:B2:C5:20:58:89:08:9F:69
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:eb:de:f8:8d:6b:da:2d:3b:94:9f:d4:3f:7d:e9:ff:c3:2c:
1d:c8:09:7d:b3:1c:4b:ac:b0:b1:ac:52:b4:61:ee:28:34:86:
b4:61:34:b1:01:71:94:38:20:8a:08:58:2f:eb:6f:75:a3:5d:
7b:3f:dd:97:3a:ff:f5:b7:1c:5a:ef:34:9b:f6:c3:f2:d5:6e:
8d:3a:a8:e4:27:15:6a:eb:29:d7:38:3c:85:b7:f5:c0:7a:b4:
d6:b3:6b:6c:c6:e4:fa:b6:5d:f1:91:7d:ee:4d:3a:76:ee:5a:
d3:46:e6:fa:46:a1:77:11:4a:78:c3:cd:96:49:6c:d8:d6:a0:
61:34:d1:c0:6d:c2:71:f3:9a:e9:f1:47:8c:ac:ae:5a:61:94:
be:04:16:07:45:8d:6a:70:86:a4:1f:da:c6:d3:1f:22:0e:cc:
92:15:d9:87:76:b1:70:a9:da:71:ac:19:83:e2:67:ea:93:04:
dd:cd:d9:14:17:d2:8f:55:2f:eb:6e:52:b8:17:32:51:68:0f:
88:41:20:93:59:a7:13:67:77:d8:4d:c9:f3:c2:75:d2:bd:6e:
0c:89:8b:3c:32:e3:ba:da:5f:57:81:ef:75:61:81:12:f8:ad:
ed:35:1c:8b:fc:28:a1:ed:88:0b:81:5c:de:03:e9:88:fb:da:
d0:aa:40:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGypTkfshcnqvVLcna9Er0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjYxMDA0MTIwMTQyWhcNMjYxMDA1MTIwMTQyWjAzMTEwLwYDVQQD
Eyg3OWQ1MWM5OGM5NzM2NTUwMjI1NTAxYjJiMmM1MjA1ODg5MDg5ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k2ptHY3I99PsRZEISGS625ZUeF/
DbiQ35JyDbPTejYazf4v/Zfro4eiqzY3Y9pTlyVi+ABERuI9aALR05vREPfI44nY
PM7zLFrBEWLOh5qSlfoUN40T7zKuGora22pLiM+lALIuOB8FjozmQH4eakn5yJT7
3m5M+S7rXdSys053AgB+Xl0u53C3aboP0ZSCi9DDCIshB0YxwCzhMV8frF2BKw+8
I3bvkB9ZG0hi/pGC5smC95UMhsEX6F61Vq7vEcp5NCcjKwQV0PRwWK6UZCrVMRRD
eDNpb3ILqjZg7paUIy7ZEy2TrdqJl1S5kRCaKMOMWRtokFoM1v5wWUoBkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnVHJjJc2VQIlUBsrLFIFiJCJ9pMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeve+I1r
2i07lJ/UP33p/8MsHcgJfbMcS6ywsaxStGHuKDSGtGE0sQFxlDggighYL+tvdaNd
ez/dlzr/9bccWu80m/bD8tVujTqo5CcVausp1zg8hbf1wHq01rNrbMbk+rZd8ZF9
7k06du5a00bm+kahdxFKeMPNlkls2NagYTTRwG3CcfOa6fFHjKyuWmGUvgQWB0WN
anCGpB/axtMfIg7MkhXZh3axcKnacawZg+Jn6pME3c3ZFBfSj1Uv625SuBcyUWgP
iEEgk1mnE2d32E3J88J10r1uDImLPDLjutpfV4HvdWGBEvit7TUci/wooe2IC4Fc
3gPpiPva0KpAYw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:11 2026 by rpki-client