Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier: m3AbgCAIji4IRnmtUlDynLw5RDkmtOdz6PPl+ZlEOIc=
Subject key identifier: F8:64:26:44:D0:8C:66:94:1D:83:14:59:4B:0C:42:35:F7:A0:A0:E3
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 01A17FD0152FD0F18B0AAA780E57F2CD028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 00:01:45 +0000
Manifest this update: Wed 28 Oct 2026 00:01:45 +0000
Manifest next update: Thu 29 Oct 2026 00:01:45 +0000
Files and hashes: 1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: B4+g/p4TfNsrU7aawDIBZPUI81GnbtuxGyA0xFERaro=)
3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:15:2f:d0:f1:8b:0a:aa:78:0e:57:f2:cd:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Oct 28 00:01:45 2026 GMT
Not After : Oct 29 00:01:45 2026 GMT
Subject: CN=f8642644d08c66941d8314594b0c4235f7a0a0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:55:24:8b:5a:ec:32:78:af:65:a1:7a:3b:
fa:f8:8d:5f:0d:70:12:c3:9b:5b:dd:86:bd:05:17:
1f:a4:6e:88:c6:f1:16:99:93:90:0b:60:0e:c0:2c:
62:61:7a:2e:ea:c1:d0:32:d0:f0:92:ac:b2:be:b5:
20:bb:c5:59:52:e0:77:47:12:4a:c4:b1:09:13:01:
6e:94:f9:3d:25:5c:14:73:8a:f9:b5:54:b1:f5:29:
45:1e:3d:ee:bf:5b:86:3d:6c:6c:f0:35:7a:a4:fb:
60:8a:ba:e6:0d:ac:36:f4:76:37:21:4f:5a:9f:66:
63:4b:4b:93:52:09:55:16:1f:22:a6:2b:45:76:de:
1d:cf:ee:0f:2a:6f:78:01:65:05:e8:14:66:7b:ba:
4d:ce:b5:08:14:ff:62:f9:40:2b:d3:3f:7f:b0:da:
f7:ed:c6:e1:d3:94:4d:8c:60:c2:94:07:9b:f3:a1:
85:91:52:38:42:73:d7:9d:80:38:08:1a:86:52:05:
66:7b:e0:1d:2a:70:29:55:e4:45:8b:c7:12:56:e9:
77:94:60:9a:d8:64:b2:e7:65:a8:62:1a:6c:d9:d4:
7f:c3:7d:2b:66:cf:7e:63:08:33:c5:8f:c8:84:ee:
47:02:e1:c1:1d:b3:c7:ce:ec:77:30:c3:fd:58:17:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:26:44:D0:8C:66:94:1D:83:14:59:4B:0C:42:35:F7:A0:A0:E3
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9a:85:52:18:6b:89:aa:31:86:e9:e9:3d:b4:50:81:64:7c:
00:de:9e:c3:17:53:11:53:d0:07:66:a1:cb:01:d2:f4:5d:70:
e7:65:da:73:97:ae:68:60:97:3e:e7:22:8f:26:4f:b9:a7:da:
0b:0c:43:78:19:fe:53:0a:d5:a2:b1:66:6a:db:96:24:4f:d2:
a9:5c:12:f1:fe:bb:70:f2:41:f7:32:cf:d9:a5:64:a3:bc:d1:
fe:43:c3:4c:cb:4f:30:b2:2a:93:a6:44:b1:65:b2:3e:52:80:
78:24:2c:3e:c9:7a:7c:a8:8a:78:5a:96:43:9e:32:96:77:22:
63:47:64:bf:05:8a:ef:bf:54:b6:8a:5f:06:c1:1f:9f:23:c9:
f6:3b:62:5b:2c:12:8f:29:3b:af:3d:8f:aa:52:c4:10:0b:b5:
36:72:fa:34:3b:43:52:63:fb:f6:8f:f2:a8:58:3d:95:bb:f7:
9d:0b:cd:52:64:cf:2d:33:7a:fc:38:24:85:bc:06:b1:4b:8a:
c9:84:76:a1:57:58:f2:72:3d:3b:a5:79:a7:b0:a1:e4:6d:1d:
ba:b8:d5:70:26:77:f7:a6:74:15:99:f8:d6:86:2d:3c:72:c3:
c3:4e:d0:1a:d3:41:2e:d6:75:3a:5f:b3:a8:c7:3a:b7:74:71:
da:7a:29:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/0BUv0PGLCqp4DlfyzQKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw
NDI3NGMwHhcNMjYxMDI4MDAwMTQ1WhcNMjYxMDI5MDAwMTQ1WjAzMTEwLwYDVQQD
EyhmODY0MjY0NGQwOGM2Njk0MWQ4MzE0NTk0YjBjNDIzNWY3YTBhMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv5VJIta7DJ4r2Whejv6+I1fDXAS
w5tb3Ya9BRcfpG6IxvEWmZOQC2AOwCxiYXou6sHQMtDwkqyyvrUgu8VZUuB3RxJK
xLEJEwFulPk9JVwUc4r5tVSx9SlFHj3uv1uGPWxs8DV6pPtgirrmDaw29HY3IU9a
n2ZjS0uTUglVFh8ipitFdt4dz+4PKm94AWUF6BRme7pNzrUIFP9i+UAr0z9/sNr3
7cbh05RNjGDClAeb86GFkVI4QnPXnYA4CBqGUgVme+AdKnApVeRFi8cSVul3lGCa
2GSy52WoYhps2dR/w30rZs9+YwgzxY/IhO5HAuHBHbPHzux3MMP9WBdcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhkJkTQjGaUHYMUWUsMQjX3oKDjMB8GA1UdIwQY
MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt
N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi
LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpqFUhhr
iaoxhunpPbRQgWR8AN6ewxdTEVPQB2ahywHS9F1w52Xac5euaGCXPucijyZPuafa
CwxDeBn+UwrVorFmatuWJE/SqVwS8f67cPJB9zLP2aVko7zR/kPDTMtPMLIqk6ZE
sWWyPlKAeCQsPsl6fKiKeFqWQ54ylnciY0dkvwWK779UtopfBsEfnyPJ9jtiWywS
jyk7rz2PqlLEEAu1NnL6NDtDUmP79o/yqFg9lbv3nQvNUmTPLTN6/DgkhbwGsUuK
yYR2oVdY8nI9O6V5p7Ch5G0durjVcCZ396Z0FZn41oYtPHLDw07QGtNBLtZ1Ol+z
qMc6t3Rx2nopOA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:25 2026 by rpki-client