Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: FV7CHa8Nq+bFaU1exhfTFWa6qJtq9tBSPstsKXpZGX8=
Subject key identifier: B9:92:59:32:3F:78:F9:73:C1:A9:81:DF:26:76:FF:EA:78:F0:5B:88
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 01A13DB80DF7E3505A646754BBC0A8E8577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 04:00:34 +0000
Manifest this update: Thu 15 Oct 2026 04:00:34 +0000
Manifest next update: Fri 16 Oct 2026 04:00:34 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: 38/Pn5CHaYucMGbSJXLD+2eIuBOS5WTvzDuojzXNyeY=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:0d:f7:e3:50:5a:64:67:54:bb:c0:a8:e8:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Oct 15 04:00:34 2026 GMT
Not After : Oct 16 04:00:34 2026 GMT
Subject: CN=b99259323f78f973c1a981df2676ffea78f05b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:86:3f:90:3f:5d:09:31:03:8f:46:b3:be:
9f:d5:fb:0c:9b:5a:0b:f5:fd:dc:81:f1:fe:e1:32:
3b:44:4d:40:52:b9:b4:7c:e0:c2:f5:9b:4d:54:57:
31:a5:72:59:d1:bd:2b:5b:14:3a:f4:6c:82:5e:12:
e2:60:59:ef:66:2e:ee:24:0d:06:0b:88:ba:3b:ed:
d1:73:8c:12:0c:fb:2f:08:8e:f4:bc:2a:59:84:3e:
5b:88:a0:20:f1:86:0c:27:5d:55:99:05:86:c5:c3:
69:67:dc:f5:ec:62:19:11:d0:f5:12:24:80:9b:db:
b7:62:02:2a:af:0f:1e:d5:bf:48:7e:0b:cb:8b:52:
d0:42:d2:2a:7e:1d:4d:64:a6:8f:64:1b:65:f6:ee:
f4:dc:82:81:58:dd:fc:d6:7a:42:86:02:31:09:26:
47:55:76:63:ff:5d:38:7b:c1:b1:82:74:57:45:2d:
52:be:13:41:12:59:37:ea:bc:c4:13:29:c2:00:f8:
0a:4c:01:3d:6b:bf:1c:7f:72:00:0e:56:95:04:96:
0a:66:cb:79:f6:76:92:8a:c9:d6:fd:6c:43:84:ef:
21:c1:cb:16:c3:0a:b9:50:94:62:2f:95:ca:89:07:
65:16:be:ff:ec:e8:fb:68:c9:ff:55:f3:64:0b:1f:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:92:59:32:3F:78:F9:73:C1:A9:81:DF:26:76:FF:EA:78:F0:5B:88
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4e:21:d1:9b:88:52:e8:79:bb:33:19:f8:8e:7c:3a:0e:f0:
87:8c:74:20:78:33:d8:e9:2e:2e:40:a5:32:6d:99:b1:e5:4e:
1e:b3:1c:5b:48:f6:5b:1d:9f:77:a4:47:8b:20:26:d5:b6:7e:
41:55:8b:5c:ae:60:52:e9:f8:4a:88:af:48:e5:5b:48:eb:60:
21:1f:96:62:9f:22:dc:3f:67:af:6a:25:6b:a6:71:f0:fe:aa:
29:c3:23:cb:eb:40:0c:48:a5:ee:0d:c7:1a:4e:07:62:38:12:
af:5c:48:1f:f3:99:c9:20:8a:e0:dc:16:a3:f1:b6:2a:69:5d:
99:73:cd:c9:18:e0:14:28:d1:94:f4:01:79:7e:b2:26:b2:5f:
9d:87:9e:b3:53:0a:5b:e9:74:23:6f:6d:a6:be:12:9e:0a:74:
fd:c2:e2:fa:07:a9:9f:0a:a9:81:bc:79:74:fc:ee:75:8b:92:
83:b7:0c:a5:21:de:66:ec:0e:0e:d3:7c:17:bc:a4:6c:ea:7b:
19:7a:3d:56:63:20:27:79:cb:33:43:2d:82:c6:12:54:41:ba:
1d:c2:0c:98:a7:8a:e2:19:23:e5:6d:63:59:a1:e0:4b:d9:7d:
00:d6:3d:48:de:2e:54:ac:9d:1e:55:7b:66:73:a2:57:e7:d1:
a2:09:09:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uA3341BaZGdUu8Co6Fd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm
Y2JlODEwHhcNMjYxMDE1MDQwMDM0WhcNMjYxMDE2MDQwMDM0WjAzMTEwLwYDVQQD
EyhiOTkyNTkzMjNmNzhmOTczYzFhOTgxZGYyNjc2ZmZlYTc4ZjA1Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7uGP5A/XQkxA49Gs76f1fsMm1oL
9f3cgfH+4TI7RE1AUrm0fODC9ZtNVFcxpXJZ0b0rWxQ69GyCXhLiYFnvZi7uJA0G
C4i6O+3Rc4wSDPsvCI70vCpZhD5biKAg8YYMJ11VmQWGxcNpZ9z17GIZEdD1EiSA
m9u3YgIqrw8e1b9IfgvLi1LQQtIqfh1NZKaPZBtl9u703IKBWN381npChgIxCSZH
VXZj/104e8GxgnRXRS1SvhNBElk36rzEEynCAPgKTAE9a78cf3IADlaVBJYKZst5
9naSisnW/WxDhO8hwcsWwwq5UJRiL5XKiQdlFr7/7Oj7aMn/VfNkCx+H/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmSWTI/ePlzwamB3yZ2/+p48FuIMB8GA1UdIwQY
MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt
ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh
LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk4h0ZuI
Uuh5uzMZ+I58Og7wh4x0IHgz2OkuLkClMm2ZseVOHrMcW0j2Wx2fd6RHiyAm1bZ+
QVWLXK5gUun4SoivSOVbSOtgIR+WYp8i3D9nr2ola6Zx8P6qKcMjy+tADEil7g3H
Gk4HYjgSr1xIH/OZySCK4NwWo/G2KmldmXPNyRjgFCjRlPQBeX6yJrJfnYees1MK
W+l0I29tpr4Sngp0/cLi+gepnwqpgbx5dPzudYuSg7cMpSHeZuwODtN8F7ykbOp7
GXo9VmMgJ3nLM0MtgsYSVEG6HcIMmKeK4hkj5W1jWaHgS9l9ANY9SN4uVKydHlV7
ZnOiV+fRogkJGA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:42 2026 by rpki-client