Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: JJGGKAxJX25NCwO6o53U6HFrvXAA27O2Yzf2itMWS/0=
Subject key identifier: 4F:0D:C4:51:ED:23:89:8C:45:E1:F4:78:DF:83:B7:1B:1A:45:96:54
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 01A18E9D669938087BC0219F53F5158E2B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 21:00:42 +0000
Manifest this update: Fri 30 Oct 2026 21:00:42 +0000
Manifest next update: Sat 31 Oct 2026 21:00:42 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: 5ALHu74d6uAVg9GQdgI35v6hjqL9OG0H14u4EVpaDio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:66:99:38:08:7b:c0:21:9f:53:f5:15:8e:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Oct 30 21:00:42 2026 GMT
Not After : Oct 31 21:00:42 2026 GMT
Subject: CN=4f0dc451ed23898c45e1f478df83b71b1a459654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:99:af:31:c0:c9:08:64:ad:4a:bd:0b:3f:
e7:19:24:c6:bd:d0:cc:c0:70:72:5d:70:78:54:33:
49:56:e7:bf:bb:bf:c2:04:99:61:6e:b3:a0:72:3f:
16:9b:3e:53:54:94:e9:e8:25:b9:df:56:6a:85:e9:
71:df:97:e7:31:62:2d:51:c1:14:62:6e:9f:f4:78:
31:41:5d:1b:da:1a:2e:32:2d:9a:8d:f0:80:30:fd:
83:fd:68:7a:40:d7:dd:9f:79:5b:8e:05:13:99:fe:
b8:58:80:0e:e6:8b:dc:4c:5b:43:85:5c:8f:9f:b3:
06:82:58:81:3f:ac:6d:11:f7:fa:27:53:46:9c:c6:
56:a3:06:a1:b1:ee:b1:9a:3e:16:6a:30:fc:e9:f5:
ee:f0:2e:80:e8:ad:ee:77:a6:e3:e1:28:e3:54:60:
b3:12:be:05:48:22:21:94:41:dd:63:86:09:13:be:
fb:3e:85:f3:7e:91:64:a7:79:c5:63:38:0c:59:70:
09:86:72:80:4c:87:fe:a9:ac:e5:6b:a5:0a:3e:d4:
69:ad:ee:9e:b6:31:d9:21:32:51:fb:7d:f0:db:a3:
02:bb:52:1b:d4:95:d3:de:8d:f2:9d:96:22:19:f0:
10:4e:f7:39:75:69:24:f5:ed:ea:14:80:4d:c7:e5:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:C4:51:ED:23:89:8C:45:E1:F4:78:DF:83:B7:1B:1A:45:96:54
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0c:8a:9c:4d:38:e2:5a:e0:79:b1:51:78:16:02:c6:bd:2d:
24:f1:ca:44:a5:07:c9:d2:ba:9b:84:17:c5:eb:2f:cd:74:57:
9f:7c:64:51:70:de:1b:bb:a9:8a:de:a8:1c:f0:d7:36:f5:f9:
72:f5:74:05:39:9f:17:6e:88:32:a6:12:7f:ab:ad:e4:b8:e1:
7a:70:21:37:a6:c0:e0:82:2f:7a:8e:2b:85:19:85:20:e8:2f:
e2:84:83:0a:25:7f:12:ae:16:1e:62:7a:b1:8e:99:3b:6a:c8:
65:de:ec:d1:b7:72:ae:3b:64:2d:b1:f8:8a:0e:65:80:cd:2b:
f2:ae:22:1f:5d:d6:93:e0:84:a3:18:d6:7b:60:54:7e:3c:d9:
77:ad:ce:6e:a8:87:6f:6c:f2:d8:11:87:0c:07:75:73:76:d6:
dc:6e:17:4e:df:8b:91:de:c2:34:ff:ee:66:9a:a4:ac:9b:50:
64:b4:a5:a5:ab:9d:30:5f:c8:3c:9b:40:5a:13:47:67:8f:6b:
60:bd:6b:1b:18:c6:2b:e9:82:e2:ad:21:d9:8e:06:ad:55:fd:
7d:0a:85:c5:53:c3:b8:70:de:0a:8a:0a:c1:64:e8:3d:47:fa:
36:36:7c:db:4a:02:cd:9f:f4:3b:0b:7f:86:10:5e:aa:19:40:
00:73:bf:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOnWaZOAh7wCGfU/UVjispMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm
Nzc4MTEwHhcNMjYxMDMwMjEwMDQyWhcNMjYxMDMxMjEwMDQyWjAzMTEwLwYDVQQD
Eyg0ZjBkYzQ1MWVkMjM4OThjNDVlMWY0NzhkZjgzYjcxYjFhNDU5NjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeeZrzHAyQhkrUq9Cz/nGSTGvdDM
wHByXXB4VDNJVue/u7/CBJlhbrOgcj8Wmz5TVJTp6CW531Zqhelx35fnMWItUcEU
Ym6f9HgxQV0b2houMi2ajfCAMP2D/Wh6QNfdn3lbjgUTmf64WIAO5ovcTFtDhVyP
n7MGgliBP6xtEff6J1NGnMZWowahse6xmj4WajD86fXu8C6A6K3ud6bj4SjjVGCz
Er4FSCIhlEHdY4YJE777PoXzfpFkp3nFYzgMWXAJhnKATIf+qazla6UKPtRpre6e
tjHZITJR+33w26MCu1Ib1JXT3o3ynZYiGfAQTvc5dWkk9e3qFIBNx+VMtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8NxFHtI4mMReH0eN+DtxsaRZZUMB8GA1UdIwQY
MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt
NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw
LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQyKnE04
4lrgebFReBYCxr0tJPHKRKUHydK6m4QXxesvzXRXn3xkUXDeG7upit6oHPDXNvX5
cvV0BTmfF26IMqYSf6ut5LjhenAhN6bA4IIveo4rhRmFIOgv4oSDCiV/Eq4WHmJ6
sY6ZO2rIZd7s0bdyrjtkLbH4ig5lgM0r8q4iH13Wk+CEoxjWe2BUfjzZd63ObqiH
b2zy2BGHDAd1c3bW3G4XTt+Lkd7CNP/uZpqkrJtQZLSlpaudMF/IPJtAWhNHZ49r
YL1rGxjGK+mC4q0h2Y4GrVX9fQqFxVPDuHDeCooKwWToPUf6NjZ820oCzZ/0Owt/
hhBeqhlAAHO/Xw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:16:38 2026 by rpki-client