Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: yu8hcTNt0uO4JhuTENSbYyQinYHVQG7XuKmbwkIBWKc=
Subject key identifier: D7:4B:82:28:31:C6:00:61:76:78:B6:5D:D6:31:B4:A6:EC:9A:C5:C7
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01A0DA28EE4D76CBFB2D524E63A9979ED18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 194F
Signing time: Fri 25 Sep 2026 20:01:50 +0000
Manifest this update: Fri 25 Sep 2026 20:01:50 +0000
Manifest next update: Sat 26 Sep 2026 20:01:50 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: gMlEZLKPMT/mXdv82vn8wYpVAn/Tus/fnHl53qOrhsk=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:ee:4d:76:cb:fb:2d:52:4e:63:a9:97:9e:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Sep 25 20:01:50 2026 GMT
Not After : Sep 26 20:01:50 2026 GMT
Subject: CN=d74b822831c600617678b65dd631b4a6ec9ac5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:e8:19:ad:b3:8f:d5:af:a6:fa:0f:19:bb:
40:a6:c0:a5:4c:c0:26:eb:3e:b3:d5:7c:4e:b0:43:
20:43:10:e5:74:bb:7f:e1:cf:28:00:4c:08:c0:54:
77:56:8a:ad:0f:62:19:58:7b:df:35:10:53:dc:94:
7c:31:ff:86:79:aa:d6:dd:0d:21:2d:7c:f3:f2:eb:
02:d4:80:c2:22:4f:a2:3d:17:f3:9c:cf:5e:14:b0:
ca:4e:a5:13:e6:b6:5c:4a:92:49:2e:86:e3:e7:31:
47:31:7f:79:9b:10:e5:21:52:4e:4e:24:6b:1c:b6:
e8:f0:52:f9:35:0f:c5:0c:16:cd:30:cc:42:6a:a2:
c2:d3:77:06:dd:d1:89:3e:94:96:8f:37:35:cd:1e:
19:31:c6:17:a1:90:ff:b5:19:da:f3:cb:d6:48:5c:
02:09:31:6e:47:1d:b6:2e:77:3c:aa:a6:06:2c:76:
76:c9:c0:16:43:3b:45:c3:d8:b9:71:fc:16:41:3c:
2f:ae:27:f6:1d:c4:3e:4d:c4:78:2a:91:44:5c:cc:
c7:c7:6b:4e:ab:c2:ee:5f:bc:75:27:c2:7a:85:9d:
4d:78:92:64:9e:41:37:99:b0:25:a0:6f:77:76:45:
42:31:a3:62:fb:96:1d:9b:86:1b:56:78:9f:a2:3e:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:82:28:31:C6:00:61:76:78:B6:5D:D6:31:B4:A6:EC:9A:C5:C7
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:05:98:06:a0:a9:2a:ee:9f:24:cc:88:3b:e0:cf:53:ba:
94:c0:81:23:4d:4a:22:4d:21:04:32:63:43:69:55:0f:c3:a4:
9b:64:27:00:78:a9:ce:da:64:80:4e:2e:4d:c1:d1:91:be:f6:
55:dd:a1:39:e6:33:60:35:aa:bc:90:00:dd:6c:60:9f:67:f5:
f8:ad:15:b4:bd:eb:14:fc:e6:b9:6a:04:38:25:a8:45:d3:1a:
87:81:f8:b9:f8:97:47:ba:a4:af:3d:bf:20:57:72:22:5c:19:
92:53:40:98:13:c8:07:7a:22:ff:05:30:42:24:e6:ac:eb:20:
78:3c:0a:3f:4d:c3:ab:a5:ec:df:49:2f:38:d3:f4:d1:18:76:
f8:c8:ea:26:49:05:33:8b:83:e9:67:07:29:05:6a:cf:41:4e:
4d:af:f8:02:a4:60:6a:18:e2:d5:a0:ac:0a:d2:8d:c3:4a:23:
21:03:6a:ea:fa:62:d9:0a:c3:e9:b5:93:a5:8f:31:4a:cb:b0:
54:7d:e8:b8:f7:96:76:3a:b5:e1:e0:11:01:ba:48:92:bb:38:
47:a1:9a:b0:5b:31:96:0e:88:a5:dd:19:bc:8d:4b:2f:0d:60:
7c:bb:21:cc:7a:ae:78:88:80:09:52:18:9b:f5:13:17:4d:64:
a9:57:f2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKO5Ndsv7LVJOY6mXntGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi
Yjg1MWQwHhcNMjYwOTI1MjAwMTUwWhcNMjYwOTI2MjAwMTUwWjAzMTEwLwYDVQQD
EyhkNzRiODIyODMxYzYwMDYxNzY3OGI2NWRkNjMxYjRhNmVjOWFjNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8HoGa2zj9WvpvoPGbtApsClTMAm
6z6z1XxOsEMgQxDldLt/4c8oAEwIwFR3VoqtD2IZWHvfNRBT3JR8Mf+GearW3Q0h
LXzz8usC1IDCIk+iPRfznM9eFLDKTqUT5rZcSpJJLobj5zFHMX95mxDlIVJOTiRr
HLbo8FL5NQ/FDBbNMMxCaqLC03cG3dGJPpSWjzc1zR4ZMcYXoZD/tRna88vWSFwC
CTFuRx22Lnc8qqYGLHZ2ycAWQztFw9i5cfwWQTwvrif2HcQ+TcR4KpFEXMzHx2tO
q8LuX7x1J8J6hZ1NeJJknkE3mbAloG93dkVCMaNi+5Ydm4YbVnifoj53PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdLgigxxgBhdni2XdYxtKbsmsXHMB8GA1UdIwQY
MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt
NDNlNGQ1NmQ0MDQzLzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz
LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2IFmAag
qSrunyTMiDvgz1O6lMCBI01KIk0hBDJjQ2lVD8Okm2QnAHipztpkgE4uTcHRkb72
Vd2hOeYzYDWqvJAA3Wxgn2f1+K0VtL3rFPzmuWoEOCWoRdMah4H4ufiXR7qkrz2/
IFdyIlwZklNAmBPIB3oi/wUwQiTmrOsgeDwKP03Dq6Xs30kvONP00Rh2+MjqJkkF
M4uD6WcHKQVqz0FOTa/4AqRgahji1aCsCtKNw0ojIQNq6vpi2QrD6bWTpY8xSsuw
VH3ouPeWdjq14eARAbpIkrs4R6GasFsxlg6Ipd0ZvI1LLw1gfLshzHqueIiACVIY
m/UTF01kqVfy+g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:35:53 2026 by rpki-client