Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: Pc71f+SbQFk6Md+Dwowjab0+mvtbCuLrXBuFQG5On1o=
Subject key identifier: 9C:F6:1C:05:A2:04:46:F6:08:2F:EB:5A:A5:3C:67:2A:45:D4:A7:06
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 01A13CDC3F3AA19C21DE8F846B2367192967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 118C
Signing time: Thu 15 Oct 2026 00:00:29 +0000
Manifest this update: Thu 15 Oct 2026 00:00:29 +0000
Manifest next update: Fri 16 Oct 2026 00:00:29 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: gEhGDfNNBPwntYubzCd6V4robKkHnFYNvmjv8Z6DAkU=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:3f:3a:a1:9c:21:de:8f:84:6b:23:67:19:29:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Oct 15 00:00:29 2026 GMT
Not After : Oct 16 00:00:29 2026 GMT
Subject: CN=9cf61c05a20446f6082feb5aa53c672a45d4a706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:5d:94:d7:0a:d9:08:bd:47:28:27:dd:d1:
e4:ca:ab:0d:ef:04:dc:c9:76:ec:c8:b7:d0:3f:53:
e1:37:24:e6:52:7a:ed:45:c5:09:d3:bd:e0:db:f7:
9b:f0:d3:5e:0a:15:1d:80:73:14:c9:59:b0:d9:d8:
37:50:63:e5:32:eb:96:a3:d4:79:a9:e4:ce:91:32:
ca:a3:44:c2:47:a3:39:82:64:36:73:96:3d:8f:b9:
5b:d6:18:e0:d4:ae:9e:59:3e:15:cf:bd:2d:b9:76:
34:1d:33:b5:1e:20:e5:4e:aa:12:81:19:62:52:0f:
a7:bb:2a:70:dc:26:51:8b:62:71:13:fa:46:cd:fc:
fb:40:93:ce:84:ea:a0:95:a0:8e:34:f6:98:02:99:
94:81:e2:c9:b7:6e:55:25:d8:03:f5:96:17:44:0d:
3e:c6:b0:d0:2f:10:7a:8e:b7:7f:32:51:6d:d9:8e:
8c:37:7a:55:03:1f:d1:79:22:f2:32:17:e3:11:f2:
b6:e9:4b:cc:74:9c:92:b0:f2:61:c8:4a:7c:9c:d2:
07:e9:8e:41:74:7e:4a:d1:9e:ac:1c:c2:6d:d3:28:
1c:df:a5:1d:a6:0e:06:65:33:3a:90:b9:6a:58:8d:
ed:51:b1:6d:9b:5a:9b:b6:55:a9:91:a7:d5:a4:f2:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:1C:05:A2:04:46:F6:08:2F:EB:5A:A5:3C:67:2A:45:D4:A7:06
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:85:8f:3c:5d:22:8a:b7:89:e7:c5:be:e6:d1:cd:26:6c:59:
30:2f:c1:5b:b9:ab:3c:7b:71:a5:af:e3:1c:a6:7c:7b:a2:c2:
56:bf:91:c0:79:3b:b3:d9:66:d0:45:91:ec:01:24:10:9a:b5:
69:93:46:2d:41:8d:c8:a0:2d:32:90:64:42:09:89:35:89:05:
8e:30:c8:d0:96:e7:5a:9f:f4:b2:1d:15:38:a8:35:bd:0f:c2:
cc:98:0a:72:72:87:fe:d6:68:b5:fb:94:a2:a4:c6:de:52:26:
b9:82:10:c8:db:07:e3:95:16:c3:1c:d2:1e:14:3b:4f:cd:93:
b3:28:f0:09:91:d5:96:a2:39:f7:a5:52:6b:7b:b9:7b:66:6a:
43:4f:f1:a7:c2:5e:49:16:cf:6a:28:bd:4d:86:4e:5a:65:6b:
ca:32:12:15:5d:79:ed:ba:35:7f:ac:5f:95:71:60:fc:7b:3c:
a1:d1:a6:b5:a1:05:86:e8:5b:9e:69:be:0a:14:45:ad:32:6e:
af:49:fe:aa:44:1e:57:ba:0e:3c:cc:3f:65:44:7b:26:15:3e:
cc:d5:a1:fd:fc:49:d4:e6:9d:9e:e2:65:0e:12:99:b7:de:93:
11:95:39:af:83:e8:9c:dc:18:39:6a:7a:c0:83:da:51:e0:c4:
06:61:ab:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83D86oZwh3o+EayNnGSlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy
OTk0OGUwHhcNMjYxMDE1MDAwMDI5WhcNMjYxMDE2MDAwMDI5WjAzMTEwLwYDVQQD
Eyg5Y2Y2MWMwNWEyMDQ0NmY2MDgyZmViNWFhNTNjNjcyYTQ1ZDRhNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTNdlNcK2Qi9Rygn3dHkyqsN7wTc
yXbsyLfQP1PhNyTmUnrtRcUJ073g2/eb8NNeChUdgHMUyVmw2dg3UGPlMuuWo9R5
qeTOkTLKo0TCR6M5gmQ2c5Y9j7lb1hjg1K6eWT4Vz70tuXY0HTO1HiDlTqoSgRli
Ug+nuypw3CZRi2JxE/pGzfz7QJPOhOqglaCONPaYApmUgeLJt25VJdgD9ZYXRA0+
xrDQLxB6jrd/MlFt2Y6MN3pVAx/ReSLyMhfjEfK26UvMdJySsPJhyEp8nNIH6Y5B
dH5K0Z6sHMJt0ygc36Udpg4GZTM6kLlqWI3tUbFtm1qbtlWpkafVpPLuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz2HAWiBEb2CC/rWqU8ZypF1KcGMB8GA1UdIwQY
MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt
YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3
LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYWPPF0i
ireJ58W+5tHNJmxZMC/BW7mrPHtxpa/jHKZ8e6LCVr+RwHk7s9lm0EWR7AEkEJq1
aZNGLUGNyKAtMpBkQgmJNYkFjjDI0JbnWp/0sh0VOKg1vQ/CzJgKcnKH/tZotfuU
oqTG3lImuYIQyNsH45UWwxzSHhQ7T82TsyjwCZHVlqI596VSa3u5e2ZqQ0/xp8Je
SRbPaii9TYZOWmVryjISFV157bo1f6xflXFg/Hs8odGmtaEFhuhbnmm+ChRFrTJu
r0n+qkQeV7oOPMw/ZUR7JhU+zNWh/fxJ1OadnuJlDhKZt96TEZU5r4PonNwYOWp6
wIPaUeDEBmGrAA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:03 2026 by rpki-client