Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
File: D06qexV9TCV1EB0q4i7uhcIuWEI.mft (raw, json)
Hash identifier: 2b2ERLgjD9A4U+XNIS9NmohJvNXIQyqyJTMMvEKLDzc=
Subject key identifier: DC:A5:11:DB:FB:D4:4B:63:69:5B:57:86:08:2C:90:24:C1:7A:BC:73
Authority key identifier: 0F:4E:AA:7B:15:7D:4C:25:75:10:1D:2A:E2:2E:EE:85:C2:2E:58:42
Certificate issuer: /CN=0f4eaa7b157d4c2575101d2ae22eee85c22e5842
Certificate serial: 01A0D983D0CCC8AD2DBA9A430AF578B521EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
Manifest number: 01A7
Signing time: Fri 25 Sep 2026 17:01:29 +0000
Manifest this update: Fri 25 Sep 2026 17:01:29 +0000
Manifest next update: Sat 26 Sep 2026 17:01:29 +0000
Files and hashes: 1: 8jdCqTVjHLso8RGRhYig24As6Hw.roa (hash: 3D37NyFExPQXRihgpk761P7gkxTDxts0n/acpzT0qdo=)
2: D06qexV9TCV1EB0q4i7uhcIuWEI.crl (hash: 3XD1CsvrZTbMVkbFsJN36fh8yObWYjoKlx+OvfpBBng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:d0:cc:c8:ad:2d:ba:9a:43:0a:f5:78:b5:21:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4eaa7b157d4c2575101d2ae22eee85c22e5842
Validity
Not Before: Sep 25 17:01:29 2026 GMT
Not After : Sep 26 17:01:29 2026 GMT
Subject: CN=dca511dbfbd44b63695b5786082c9024c17abc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:6e:53:2f:af:da:59:89:45:4c:27:cd:98:
50:d4:bd:4c:9c:02:ea:54:9f:71:f8:e4:a2:0f:8e:
90:7e:f7:5c:cf:d1:77:04:d9:f2:57:3e:f9:8b:cc:
5d:8d:07:6e:20:25:49:ba:70:21:ff:f5:3e:c3:1b:
15:db:9c:ff:ea:44:1f:9d:fe:69:32:c0:1c:2b:bc:
73:9a:ba:5d:3a:57:16:cb:a9:20:07:03:6d:e6:09:
28:84:a0:4e:b2:21:a1:c3:09:e4:c8:59:15:68:55:
21:df:f6:31:7d:0e:ed:58:42:f8:3e:f5:ba:25:1c:
de:27:ca:e2:43:ce:db:26:12:55:7d:ff:55:da:48:
23:c0:ba:4b:e8:79:e9:05:89:dc:e5:10:46:f0:6d:
9d:84:f7:2f:50:49:3c:de:31:50:58:22:be:63:d4:
a3:42:cc:81:44:d3:66:ff:29:d4:13:a6:a7:4e:99:
0f:ce:99:8d:09:ef:35:b0:50:f4:5c:d0:4b:f0:88:
a1:8b:1e:00:b0:b2:44:4d:34:f4:18:f2:e1:cd:23:
ca:bb:a6:fb:6f:a1:99:3d:33:7b:75:33:a3:4a:a9:
4e:42:44:59:11:d6:8a:e9:3d:0d:48:58:d7:c3:87:
6b:8e:c2:c6:ba:c9:33:1a:20:5b:bc:7e:29:05:d6:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:11:DB:FB:D4:4B:63:69:5B:57:86:08:2C:90:24:C1:7A:BC:73
X509v3 Authority Key Identifier:
keyid:0F:4E:AA:7B:15:7D:4C:25:75:10:1D:2A:E2:2E:EE:85:C2:2E:58:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:12:28:f5:b1:87:a5:d1:f7:64:7f:9d:cd:4e:5a:c6:d5:b3:
a9:f4:66:b5:79:ed:55:86:3c:47:62:3b:77:af:d2:5d:45:32:
64:95:49:0f:11:51:84:88:59:5a:84:e2:36:c4:9c:10:3e:74:
50:5b:0f:c9:f6:f8:bb:9c:fb:4c:ff:ff:ed:11:23:3f:49:72:
86:7b:2b:b6:ab:2c:e8:45:b2:4b:0e:96:72:c9:11:cd:4d:0d:
fa:f8:94:6f:6b:d8:b9:08:5c:d2:e7:e3:45:32:ea:c2:f6:43:
a9:7c:23:43:0c:5c:98:c0:14:48:d3:02:1e:bc:19:c8:ed:10:
6f:3d:4f:f0:90:7c:31:c1:2d:9b:fb:d2:47:d1:e0:8d:69:13:
3c:53:2d:df:70:67:51:15:31:30:39:e8:76:81:36:67:3b:41:
83:f2:05:8f:9a:92:c0:9f:59:26:78:3c:ff:90:c7:80:58:60:
19:5c:48:6f:8a:f7:1e:59:f4:ac:1e:3c:9d:00:34:6d:4f:a7:
e6:85:1c:b3:fb:04:31:7b:5b:17:8b:b0:05:f2:01:df:dc:9f:
2d:78:1b:45:f3:f7:5d:18:2a:a9:5c:8e:ab:33:98:39:e6:17:
4e:46:fd:c0:21:d3:48:c4:62:55:f6:46:d7:41:bf:be:06:37:
e6:7e:25:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg9DMyK0tuppDCvV4tSHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNGVhYTdiMTU3ZDRjMjU3NTEwMWQyYWUyMmVlZTg1YzIy
ZTU4NDIwHhcNMjYwOTI1MTcwMTI5WhcNMjYwOTI2MTcwMTI5WjAzMTEwLwYDVQQD
EyhkY2E1MTFkYmZiZDQ0YjYzNjk1YjU3ODYwODJjOTAyNGMxN2FiYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLpuUy+v2lmJRUwnzZhQ1L1MnALq
VJ9x+OSiD46Qfvdcz9F3BNnyVz75i8xdjQduICVJunAh//U+wxsV25z/6kQfnf5p
MsAcK7xzmrpdOlcWy6kgBwNt5gkohKBOsiGhwwnkyFkVaFUh3/YxfQ7tWEL4PvW6
JRzeJ8riQ87bJhJVff9V2kgjwLpL6HnpBYnc5RBG8G2dhPcvUEk83jFQWCK+Y9Sj
QsyBRNNm/ynUE6anTpkPzpmNCe81sFD0XNBL8Iihix4AsLJETTT0GPLhzSPKu6b7
b6GZPTN7dTOjSqlOQkRZEdaK6T0NSFjXw4drjsLGuskzGiBbvH4pBdbqQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNylEdv71EtjaVtXhggskCTBerxzMB8GA1UdIwQY
MBaAFA9OqnsVfUwldRAdKuIu7oXCLlhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDA2cWV4VjlUQ1YxRUIwcTRpN3VoY0l1V0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NWZkNmMtZDFjYS00ODRhLTgyZDkt
ZWE2MmNlMzEwZTc0LzEvRDA2cWV4VjlUQ1YxRUIwcTRpN3VoY0l1V0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NWZkNmMtZDFjYS00ODRhLTgyZDktZWE2MmNlMzEwZTc0
LzEvRDA2cWV4VjlUQ1YxRUIwcTRpN3VoY0l1V0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxIo9bGH
pdH3ZH+dzU5axtWzqfRmtXntVYY8R2I7d6/SXUUyZJVJDxFRhIhZWoTiNsScED50
UFsPyfb4u5z7TP//7REjP0lyhnsrtqss6EWySw6WcskRzU0N+viUb2vYuQhc0ufj
RTLqwvZDqXwjQwxcmMAUSNMCHrwZyO0Qbz1P8JB8McEtm/vSR9HgjWkTPFMt33Bn
URUxMDnodoE2ZztBg/IFj5qSwJ9ZJng8/5DHgFhgGVxIb4r3Hln0rB48nQA0bU+n
5oUcs/sEMXtbF4uwBfIB39yfLXgbRfP3XRgqqVyOqzOYOeYXTkb9wCHTSMRiVfZG
10G/vgY35n4l9A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:42:33 2026 by rpki-client