Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
File: daobbpHzNqAdTS7JukRO_QZxYfc.mft (raw, json)
Hash identifier: 1Y1y5F2xkHB7tsudaFJlEqaulCk9UmQHv+SAp52Fnpo=
Subject key identifier: BD:CA:33:7E:F5:39:2A:F7:B0:81:8B:82:FF:0A:55:73:68:5F:97:0E
Authority key identifier: 75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
Certificate issuer: /CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Certificate serial: 01A1950D9F9DC6FB4F8B6DBD1375423A8584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
Manifest number: 014B
Signing time: Sun 01 Nov 2026 03:01:00 +0000
Manifest this update: Sun 01 Nov 2026 03:01:00 +0000
Manifest next update: Mon 02 Nov 2026 03:01:00 +0000
Files and hashes: 1: 1-nNpS75iYMcjjtHDmrPvO5OT4c0.asa (hash: 8ky8Utp0nRPsWBK/+jB+V8TaLHoS6comwINplKcWJxQ=)
2: daobbpHzNqAdTS7JukRO_QZxYfc.crl (hash: c8KGuIXuxqwcGZuw1yKsGXw8R0+5AQzHQ4w1cdAIuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:9f:9d:c6:fb:4f:8b:6d:bd:13:75:42:3a:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Validity
Not Before: Nov 1 03:01:00 2026 GMT
Not After : Nov 2 03:01:00 2026 GMT
Subject: CN=bdca337ef5392af7b0818b82ff0a5573685f970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:af:bb:1f:d1:d4:d0:7b:b0:69:12:94:41:
5e:1f:e7:47:f9:9e:dd:52:f8:f2:b2:4e:04:84:63:
4b:1f:4d:31:d9:36:d2:db:1c:cb:41:f6:7d:ad:6e:
10:87:ea:83:dc:23:02:69:fb:e3:47:89:83:e8:8f:
78:47:14:d8:ed:f3:8d:1d:ee:30:be:ff:e7:43:5a:
29:63:50:10:ce:3c:69:c4:4e:2f:4e:ad:6a:20:34:
66:ca:66:97:39:d3:2d:04:cb:11:68:91:c8:ab:cf:
ef:7f:dd:44:0d:bc:ac:d4:56:1e:a8:50:49:78:09:
fb:50:7a:48:ed:1e:fa:48:0a:a4:9a:c5:d1:9e:4d:
37:f5:53:6e:77:0b:b5:26:14:19:1c:7a:b8:72:a7:
30:ea:06:16:c6:5b:5a:f3:b5:24:1e:6f:e5:36:68:
19:75:f9:19:51:06:99:4a:af:19:67:e3:5c:18:e7:
4e:29:b0:0d:fc:91:e5:3e:c1:8c:13:97:cc:02:41:
8b:31:64:6d:46:90:74:92:da:be:45:cf:0a:0c:4f:
fd:4b:42:15:85:7e:ba:83:d5:cd:ee:ef:07:6d:7b:
83:2e:14:08:22:66:b8:8d:46:73:e8:94:70:15:21:
5a:e4:7f:7d:6c:b6:c2:d2:2a:fe:d8:25:15:ac:61:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:33:7E:F5:39:2A:F7:B0:81:8B:82:FF:0A:55:73:68:5F:97:0E
X509v3 Authority Key Identifier:
keyid:75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:58:0c:b6:cf:7e:a1:93:df:03:6e:4e:f5:d5:b3:54:be:6b:
a3:55:ba:37:04:7c:5f:89:66:66:8c:de:2d:84:80:a0:b2:e9:
22:c4:d2:b3:28:94:47:c5:a6:9e:3f:9f:a4:dd:85:5b:cc:a2:
18:5c:0a:d2:be:65:2f:4a:d2:bc:27:8a:fb:f7:d1:ee:64:d0:
84:a3:09:fa:9a:71:ef:a0:4f:88:4c:5f:cf:18:7b:29:60:e4:
2f:3c:a1:2f:f5:d3:ee:fa:23:3a:d3:67:16:eb:49:f2:b3:76:
7c:44:9d:b1:67:5a:52:71:5f:e9:14:a3:8d:20:65:87:75:a1:
2f:35:d1:c4:fc:a4:90:47:ab:8c:b8:b5:2f:2a:09:08:29:e9:
c0:60:56:34:1b:a0:0a:cb:0d:6c:f9:1c:84:3f:58:9c:31:69:
79:0a:0b:75:96:a7:0a:85:9f:81:a9:36:17:ad:9b:88:d8:be:
50:c8:b8:29:32:f9:8f:03:4b:28:97:d7:3f:33:fd:2f:29:02:
80:6c:cb:b9:92:95:33:e2:0f:6f:21:0c:f6:ae:5b:67:20:57:
f2:f1:f5:c8:5b:df:49:66:8b:40:22:b0:75:e5:4f:70:f6:bb:
80:53:1d:ea:d6:65:27:84:b2:f1:10:07:b4:33:46:21:70:a6:
61:c4:e4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGVDZ+dxvtPi229E3VCOoWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YWExYjZlOTFmMzM2YTAxZDRkMmVjOWJhNDQ0ZWZkMDY3
MTYxZjcwHhcNMjYxMTAxMDMwMTAwWhcNMjYxMTAyMDMwMTAwWjAzMTEwLwYDVQQD
EyhiZGNhMzM3ZWY1MzkyYWY3YjA4MThiODJmZjBhNTU3MzY4NWY5NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BKvux/R1NB7sGkSlEFeH+dH+Z7d
Uvjysk4EhGNLH00x2TbS2xzLQfZ9rW4Qh+qD3CMCafvjR4mD6I94RxTY7fONHe4w
vv/nQ1opY1AQzjxpxE4vTq1qIDRmymaXOdMtBMsRaJHIq8/vf91EDbys1FYeqFBJ
eAn7UHpI7R76SAqkmsXRnk039VNudwu1JhQZHHq4cqcw6gYWxlta87UkHm/lNmgZ
dfkZUQaZSq8ZZ+NcGOdOKbAN/JHlPsGME5fMAkGLMWRtRpB0ktq+Rc8KDE/9S0IV
hX66g9XN7u8HbXuDLhQIIma4jUZz6JRwFSFa5H99bLbC0ir+2CUVrGGYfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3KM371OSr3sIGLgv8KVXNoX5cOMB8GA1UdIwQY
MBaAFHWqG26R8zagHU0uybpETv0GcWH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFvYmJwSHpOcUFkVFM3SnVrUk9fUVp4WWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt
OTJmNTIwZTQ2ZTg4LzEvZGFvYmJwSHpOcUFkVFM3SnVrUk9fUVp4WWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4
LzEvZGFvYmJwSHpOcUFkVFM3SnVrUk9fUVp4WWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFgMts9+
oZPfA25O9dWzVL5ro1W6NwR8X4lmZozeLYSAoLLpIsTSsyiUR8Wmnj+fpN2FW8yi
GFwK0r5lL0rSvCeK+/fR7mTQhKMJ+ppx76BPiExfzxh7KWDkLzyhL/XT7vojOtNn
FutJ8rN2fESdsWdaUnFf6RSjjSBlh3WhLzXRxPykkEerjLi1LyoJCCnpwGBWNBug
CssNbPkchD9YnDFpeQoLdZanCoWfgak2F62biNi+UMi4KTL5jwNLKJfXPzP9LykC
gGzLuZKVM+IPbyEM9q5bZyBX8vH1yFvfSWaLQCKwdeVPcPa7gFMd6tZlJ4Sy8RAH
tDNGIXCmYcTkDg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:19:18 2026 by rpki-client