Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: PJYlbF4uB+jIm4qYB8IeJif1Fvpr+2fF0tVHrjamqX8=
Subject key identifier: 6F:E7:BC:6C:7A:7F:05:78:39:24:2C:29:6C:4C:2F:B7:D0:D6:BF:9C
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 01A1347E5FA549E32392A5FD3455CD906114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0A0E
Signing time: Tue 13 Oct 2026 09:00:59 +0000
Manifest this update: Tue 13 Oct 2026 09:00:59 +0000
Manifest next update: Wed 14 Oct 2026 09:00:59 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: LhgBuzjJzlx3fezNET8yiAtA02o5BSafqKt8Lk3c8uU=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:5f:a5:49:e3:23:92:a5:fd:34:55:cd:90:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Oct 13 09:00:59 2026 GMT
Not After : Oct 14 09:00:59 2026 GMT
Subject: CN=6fe7bc6c7a7f057839242c296c4c2fb7d0d6bf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:2e:9c:b8:83:8a:dd:bc:bc:a1:be:de:18:
1c:95:ce:62:75:64:67:7c:6b:be:37:9c:c9:9f:93:
84:40:ab:45:93:df:13:22:6c:97:a3:8d:ea:43:9f:
d5:1a:2a:f2:0b:52:59:26:8c:1d:22:40:3a:51:18:
25:6b:94:75:cb:6a:8c:d2:8c:2f:02:09:6a:ce:dc:
ae:63:e0:82:e1:c3:4d:89:03:f0:8f:e3:7e:15:d7:
69:b6:3f:7b:56:09:ae:3b:72:7e:e6:d7:71:a8:8d:
9f:b5:f6:78:5f:ac:d3:f4:b9:d2:cd:58:4f:aa:dc:
86:18:5f:b4:11:df:2b:fb:12:01:5c:7b:41:82:42:
88:c6:85:25:ae:c2:6c:cc:2e:ee:71:04:83:8d:e4:
ba:68:fe:aa:f0:e5:ae:45:e8:3a:4c:cb:12:f4:6d:
29:ca:ae:6c:c1:a9:01:3e:89:5b:14:b3:fc:c1:7c:
96:9a:74:c9:51:55:27:1d:ff:a6:b2:85:de:c8:32:
5a:ee:ca:ab:c0:ae:65:60:8c:cc:23:61:73:d9:28:
61:da:72:1d:0e:7f:ef:9e:65:d2:8a:b8:d6:d0:f5:
16:56:44:1b:df:58:72:a1:e3:37:b6:82:75:8d:f7:
64:96:4e:ac:2b:61:a7:c5:7d:71:c9:f1:75:42:49:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:BC:6C:7A:7F:05:78:39:24:2C:29:6C:4C:2F:B7:D0:D6:BF:9C
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:fa:99:83:ac:eb:8b:83:8f:f8:70:b5:d2:38:92:2e:0c:
0f:02:dd:54:00:e5:66:1c:03:1e:e1:4a:03:85:d5:5c:c1:5e:
ba:73:05:aa:ff:f9:11:97:5d:45:77:95:e0:ae:9e:4d:5e:6c:
ce:cb:43:11:52:ab:c2:fc:d4:60:bf:03:55:0d:c4:ad:8e:c4:
e4:b3:d3:1e:0c:1a:03:31:a1:fb:54:ae:bb:7c:ea:56:7c:c7:
db:e6:80:8b:84:e4:af:aa:a0:59:2a:aa:7f:32:d7:c6:aa:09:
fa:e6:e0:7f:af:66:79:1d:55:38:e0:eb:bd:d6:96:45:c6:2e:
a9:8a:d6:02:ad:fa:ec:e5:4a:60:8b:89:b6:92:5e:0d:3b:a1:
4d:3d:c0:72:db:2e:bd:07:38:09:b9:59:94:26:3a:0a:7b:86:
8c:f4:23:0f:51:a7:c9:ff:2e:81:7a:83:01:6f:d0:d5:37:e5:
0c:1d:94:97:68:05:9b:8b:6f:2a:bb:7f:c7:93:10:fd:14:ba:
12:01:84:b8:ee:39:96:d7:6f:f7:57:a0:ed:5e:1a:a9:70:9b:
c5:fb:0b:1c:11:22:ed:d0:97:3f:83:a5:53:9d:0d:a3:c3:15:
26:d8:a0:5b:e6:21:48:dc:75:4d:b8:e9:de:f0:31:03:d1:33:
15:51:55:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0fl+lSeMjkqX9NFXNkGEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjYxMDEzMDkwMDU5WhcNMjYxMDE0MDkwMDU5WjAzMTEwLwYDVQQD
Eyg2ZmU3YmM2YzdhN2YwNTc4MzkyNDJjMjk2YzRjMmZiN2QwZDZiZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32cunLiDit28vKG+3hgclc5idWRn
fGu+N5zJn5OEQKtFk98TImyXo43qQ5/VGiryC1JZJowdIkA6URgla5R1y2qM0owv
AglqztyuY+CC4cNNiQPwj+N+Fddptj97VgmuO3J+5tdxqI2ftfZ4X6zT9LnSzVhP
qtyGGF+0Ed8r+xIBXHtBgkKIxoUlrsJszC7ucQSDjeS6aP6q8OWuReg6TMsS9G0p
yq5swakBPolbFLP8wXyWmnTJUVUnHf+msoXeyDJa7sqrwK5lYIzMI2Fz2Shh2nId
Dn/vnmXSirjW0PUWVkQb31hyoeM3toJ1jfdklk6sK2GnxX1xyfF1QknEGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/nvGx6fwV4OSQsKWxML7fQ1r+cMB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDT6mYOs
64uDj/hwtdI4ki4MDwLdVADlZhwDHuFKA4XVXMFeunMFqv/5EZddRXeV4K6eTV5s
zstDEVKrwvzUYL8DVQ3ErY7E5LPTHgwaAzGh+1Suu3zqVnzH2+aAi4Tkr6qgWSqq
fzLXxqoJ+ubgf69meR1VOODrvdaWRcYuqYrWAq367OVKYIuJtpJeDTuhTT3Actsu
vQc4CblZlCY6CnuGjPQjD1Gnyf8ugXqDAW/Q1TflDB2Ul2gFm4tvKrt/x5MQ/RS6
EgGEuO45ltdv91eg7V4aqXCbxfsLHBEi7dCXP4OlU50No8MVJtigW+YhSNx1Tbjp
3vAxA9EzFVFVEg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:15 2026 by rpki-client