Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: L6OUm6KIGPzHh7diXQ5WMg6doKTK4uIi3wfNVNE1Ol4=
Subject key identifier: 02:17:BC:67:B5:C1:88:52:46:9E:01:A6:86:88:55:EA:C8:21:95:C2
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01A000CA469694D21A9353911CCEEB6DB9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:00:51 +0000
Manifest this update: Fri 14 Aug 2026 15:00:51 +0000
Manifest next update: Sat 15 Aug 2026 15:00:51 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: 3TO2kUwuvW4V5OKxepSpPtJ/Xl8RT5cgl9j1g57VJYY=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:46:96:94:d2:1a:93:53:91:1c:ce:eb:6d:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Aug 14 15:00:51 2026 GMT
Not After : Aug 15 15:00:51 2026 GMT
Subject: CN=0217bc67b5c18852469e01a6868855eac82195c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:01:69:f1:c1:65:e9:da:58:c4:c8:2d:2d:
9d:48:78:0b:24:e9:42:9d:c8:c4:22:12:c1:96:d0:
34:5b:5e:3c:2d:71:0b:90:9e:56:9b:28:f1:f7:1b:
68:94:67:0b:4a:4d:34:0d:df:50:d0:4c:25:ca:ec:
b7:f1:73:ff:74:91:76:9d:a1:23:a1:da:60:f6:78:
1b:83:9d:66:47:af:12:d7:7b:57:80:aa:b2:5b:cc:
ff:6f:be:f7:ba:51:81:c6:c8:89:f1:30:24:77:01:
d9:b8:43:22:42:8c:7c:7c:5a:04:42:ce:b1:91:77:
fd:9a:ac:94:29:ef:84:90:26:a8:18:f2:5f:f1:2e:
42:27:73:6f:df:1f:fa:d5:d5:37:68:8a:e1:ba:7c:
e1:2e:4b:42:ee:d4:59:0e:be:7f:2e:7d:b2:ec:38:
ee:88:22:c1:71:64:2c:91:4c:62:89:32:dc:b4:7c:
6f:2f:a9:c8:bf:58:ee:9e:89:54:79:60:03:c5:7f:
d2:29:a9:82:78:6e:6c:59:9b:18:aa:41:24:fd:f4:
05:03:7e:95:af:5d:d6:73:8f:d2:f2:7e:ca:4a:ff:
c4:69:76:c9:4f:9a:ce:f1:fd:cc:97:cb:aa:ae:f0:
ce:1d:06:1b:ce:51:1d:f3:6e:ac:f8:e9:b9:d0:df:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:17:BC:67:B5:C1:88:52:46:9E:01:A6:86:88:55:EA:C8:21:95:C2
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:52:87:ac:12:a0:4a:bd:02:64:c8:27:0b:8c:91:4f:4e:
5b:a7:2a:e4:f6:54:69:6e:af:a0:89:dc:d0:68:42:9d:31:26:
2b:21:ca:46:15:d2:af:c9:76:b9:ad:e2:75:5f:5c:d0:60:28:
c8:69:0a:ea:4e:d2:ec:3a:be:ea:ca:6e:60:a6:41:f9:3d:22:
d3:53:74:99:be:42:44:83:67:ac:67:3c:64:5b:47:88:4f:05:
5f:4c:22:63:79:d1:59:59:e9:8e:bf:94:a7:8c:4c:83:33:58:
aa:cc:5f:26:aa:57:97:af:b0:01:46:31:83:e5:20:00:56:13:
f6:47:4b:4e:d7:2a:7d:37:8d:54:55:dc:1d:80:95:19:05:d0:
a7:f0:a9:3d:79:ac:1b:49:c9:98:8c:af:67:a3:ee:38:22:f5:
38:91:0f:34:42:b2:69:19:3e:a0:89:d9:1e:37:62:a0:68:67:
65:8f:b4:a4:3d:44:c4:b7:a1:32:e0:32:18:61:4a:41:37:d2:
63:6a:bf:c4:94:2a:d2:9a:1c:35:cd:18:54:32:52:07:2d:05:
f3:46:b2:63:47:5e:14:dd:9b:40:44:b0:69:67:5f:17:ce:e1:
04:0f:eb:17:c7:a0:f9:61:54:7e:7a:a7:96:5a:39:ba:2d:44:
6b:b7:4b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAykaWlNIak1ORHM7rbbmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjYwODE0MTUwMDUxWhcNMjYwODE1MTUwMDUxWjAzMTEwLwYDVQQD
EygwMjE3YmM2N2I1YzE4ODUyNDY5ZTAxYTY4Njg4NTVlYWM4MjE5NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrwBafHBZenaWMTILS2dSHgLJOlC
ncjEIhLBltA0W148LXELkJ5Wmyjx9xtolGcLSk00Dd9Q0Ewlyuy38XP/dJF2naEj
odpg9ngbg51mR68S13tXgKqyW8z/b773ulGBxsiJ8TAkdwHZuEMiQox8fFoEQs6x
kXf9mqyUKe+EkCaoGPJf8S5CJ3Nv3x/61dU3aIrhunzhLktC7tRZDr5/Ln2y7Dju
iCLBcWQskUxiiTLctHxvL6nIv1junolUeWADxX/SKamCeG5sWZsYqkEk/fQFA36V
r13Wc4/S8n7KSv/EaXbJT5rO8f3Ml8uqrvDOHQYbzlEd826s+Om50N9iiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIXvGe1wYhSRp4BpoaIVerIIZXCMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLxSh6wS
oEq9AmTIJwuMkU9OW6cq5PZUaW6voInc0GhCnTEmKyHKRhXSr8l2ua3idV9c0GAo
yGkK6k7S7Dq+6spuYKZB+T0i01N0mb5CRINnrGc8ZFtHiE8FX0wiY3nRWVnpjr+U
p4xMgzNYqsxfJqpXl6+wAUYxg+UgAFYT9kdLTtcqfTeNVFXcHYCVGQXQp/CpPXms
G0nJmIyvZ6PuOCL1OJEPNEKyaRk+oInZHjdioGhnZY+0pD1ExLehMuAyGGFKQTfS
Y2q/xJQq0pocNc0YVDJSBy0F80ayY0deFN2bQESwaWdfF87hBA/rF8eg+WFUfnqn
llo5ui1Ea7dL7Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:41 2026 by rpki-client