Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: MAXQKdcnCnD+nyIf/KgAEHe0nPPZSVaTTnisIit2Qtg=
Subject key identifier: 3E:E0:3C:21:EC:6A:15:52:A4:33:E1:A4:8A:E2:52:D2:09:9E:45:2B
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01A178F19100F4FDD4790C84610773BB14E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1AC9
Signing time: Mon 26 Oct 2026 16:00:59 +0000
Manifest this update: Mon 26 Oct 2026 16:00:59 +0000
Manifest next update: Tue 27 Oct 2026 16:00:59 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: VioB3/iXAqs8OnB5AcNPiMV5HQ1MeQnZHr7Qbqcu/po=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:91:00:f4:fd:d4:79:0c:84:61:07:73:bb:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Oct 26 16:00:59 2026 GMT
Not After : Oct 27 16:00:59 2026 GMT
Subject: CN=3ee03c21ec6a1552a433e1a48ae252d2099e452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:6f:6f:a7:e4:44:de:8e:2e:92:e6:2a:d9:
bc:17:dd:e5:7c:21:26:48:35:cf:b1:4b:50:4b:be:
86:e4:94:40:60:11:b1:17:96:b0:33:d3:71:aa:55:
70:23:12:2c:0d:df:d4:aa:ca:91:42:c8:d7:1b:cb:
63:60:ea:a6:d8:77:5e:14:ba:15:33:49:1c:f1:ef:
9b:af:fa:a3:a0:18:a8:ff:d7:ff:2c:d2:0f:92:8e:
4c:ca:99:e0:75:9a:99:04:24:f3:a8:a0:5d:34:37:
4d:99:b6:9d:6b:3c:fa:95:27:60:5d:5a:96:68:e5:
12:bf:be:10:11:d1:be:03:c6:67:91:aa:49:73:2b:
61:d6:0f:a0:58:e5:27:97:84:70:ba:d8:a3:a4:d9:
1c:68:22:1e:84:d6:aa:bb:ef:f1:5f:61:4b:1a:62:
30:3f:93:5c:ff:39:58:4c:e3:57:50:24:6a:db:df:
24:2d:7c:a5:91:d3:de:40:8b:a0:b1:5a:64:19:10:
ca:af:0e:d0:43:8c:33:6e:c5:0e:f9:8c:70:e5:78:
da:78:ae:94:b3:c2:b1:8f:0d:95:7d:02:02:7e:ff:
d3:4b:f2:16:ac:db:23:55:75:76:7a:53:ce:2c:8e:
a7:fd:cd:09:04:9f:5d:32:27:2b:1c:2b:75:8b:88:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:3C:21:EC:6A:15:52:A4:33:E1:A4:8A:E2:52:D2:09:9E:45:2B
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:34:c7:3f:f4:73:3e:d6:74:59:f5:7f:e8:f1:e5:02:ee:
f8:49:37:d1:b9:e5:01:b2:4b:2c:42:17:e3:da:0b:e9:b4:28:
c9:da:4b:56:3f:32:bd:98:22:fb:67:47:0c:f3:ff:e1:6b:d3:
a1:c7:e6:d4:dd:c9:87:09:c0:6d:e2:f1:26:3d:93:7b:66:2a:
3d:8e:a6:54:bc:ca:7f:e1:6e:6e:96:41:7d:18:29:c9:73:82:
c0:9b:6b:80:58:76:92:b2:c2:67:32:83:ef:99:da:d1:af:9f:
0e:a4:15:38:a2:cc:45:a5:bf:ca:5a:38:0f:62:07:e5:cb:57:
bd:27:81:05:f0:5c:f0:05:6c:98:99:86:39:73:8c:f4:ca:83:
c4:0b:84:f9:5a:00:57:d0:da:4b:01:55:b0:ba:3b:d6:fb:06:
53:e9:e9:c9:9c:d4:97:6b:c9:5b:48:ef:7f:c3:f3:55:fc:28:
95:05:94:44:00:00:7a:e4:fa:f8:4f:82:a1:bb:01:03:cb:1f:
59:99:43:f8:71:3d:37:9d:a5:b7:00:f7:ca:75:df:d0:99:99:
a6:56:5e:2c:8b:98:68:80:34:e1:99:f8:f3:26:c5:bd:47:7b:
0d:1f:61:aa:7f:cb:9e:56:51:fa:46:c3:f6:31:47:3d:43:2f:
d3:aa:d8:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48ZEA9P3UeQyEYQdzuxTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjYxMDI2MTYwMDU5WhcNMjYxMDI3MTYwMDU5WjAzMTEwLwYDVQQD
EygzZWUwM2MyMWVjNmExNTUyYTQzM2UxYTQ4YWUyNTJkMjA5OWU0NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkpvb6fkRN6OLpLmKtm8F93lfCEm
SDXPsUtQS76G5JRAYBGxF5awM9NxqlVwIxIsDd/UqsqRQsjXG8tjYOqm2HdeFLoV
M0kc8e+br/qjoBio/9f/LNIPko5MypngdZqZBCTzqKBdNDdNmbadazz6lSdgXVqW
aOUSv74QEdG+A8ZnkapJcyth1g+gWOUnl4RwutijpNkcaCIehNaqu+/xX2FLGmIw
P5Nc/zlYTONXUCRq298kLXylkdPeQIugsVpkGRDKrw7QQ4wzbsUO+Yxw5XjaeK6U
s8Kxjw2VfQICfv/TS/IWrNsjVXV2elPOLI6n/c0JBJ9dMicrHCt1i4gi+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7gPCHsahVSpDPhpIriUtIJnkUrMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUE0xz/0
cz7WdFn1f+jx5QLu+Ek30bnlAbJLLEIX49oL6bQoydpLVj8yvZgi+2dHDPP/4WvT
ocfm1N3JhwnAbeLxJj2Te2YqPY6mVLzKf+FubpZBfRgpyXOCwJtrgFh2krLCZzKD
75na0a+fDqQVOKLMRaW/ylo4D2IH5ctXvSeBBfBc8AVsmJmGOXOM9MqDxAuE+VoA
V9DaSwFVsLo71vsGU+npyZzUl2vJW0jvf8PzVfwolQWURAAAeuT6+E+CobsBA8sf
WZlD+HE9N52ltwD3ynXf0JmZplZeLIuYaIA04Zn48ybFvUd7DR9hqn/LnlZR+kbD
9jFHPUMv06rYWw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:57:20 2026 by rpki-client