Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: WgIBLf0pCp6/67uUuAuYe1lYENS64Kj37RvhUsJ+Ya4=
Subject key identifier: C2:80:44:91:C9:55:78:C9:FF:68:83:0B:0A:A9:5E:19:49:96:81:61
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 01A152F6B3A3F35AD56395C8F12292FFEEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1AB3
Signing time: Mon 19 Oct 2026 07:01:01 +0000
Manifest this update: Mon 19 Oct 2026 07:01:01 +0000
Manifest next update: Tue 20 Oct 2026 07:01:01 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: la8R256E5+phyBEuz1iUAraA/aIaukYOBzPaEr6T/8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:f6:b3:a3:f3:5a:d5:63:95:c8:f1:22:92:ff:ee:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Oct 19 07:01:01 2026 GMT
Not After : Oct 20 07:01:01 2026 GMT
Subject: CN=c2804491c95578c9ff68830b0aa95e1949968161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:c3:e9:7d:77:41:da:ae:9e:07:87:97:9a:
ba:c7:5b:1d:e9:50:3f:3e:bf:75:c7:ed:d1:fc:64:
e9:3e:44:22:0a:c5:14:9d:08:db:c3:5d:51:01:f5:
34:bb:49:4c:6e:2d:48:06:6f:60:09:02:92:6a:07:
d3:9e:3d:74:23:53:43:ed:d4:9b:70:f3:9b:3a:53:
3d:99:43:13:43:a5:e2:17:23:31:62:6f:e0:33:54:
13:3a:96:f1:0e:7a:44:dc:02:59:26:d2:a3:7f:7c:
48:8d:9a:2b:15:11:21:db:c7:29:ba:59:d3:98:df:
b3:6f:05:04:fb:e8:96:5b:bb:9f:7a:c7:6b:38:28:
e5:82:0f:69:f0:52:3d:e5:5a:7a:98:35:c2:13:46:
3d:67:df:95:ee:51:30:84:f1:97:40:03:b7:79:09:
22:d6:5b:2c:a7:89:62:6b:52:61:d1:d5:f7:ab:14:
56:b3:0f:33:c4:65:45:09:85:ad:a0:a1:2d:09:c8:
7b:61:7d:e9:37:02:87:3f:1f:34:4d:2b:0a:a7:4e:
eb:1a:a0:51:7a:6d:93:2b:5d:06:a5:d1:ff:de:de:
a9:95:fa:d4:2f:1c:67:97:a3:94:a0:3e:1c:68:3e:
b9:62:99:0d:50:ba:58:7b:31:72:cb:9b:8f:ba:d9:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:44:91:C9:55:78:C9:FF:68:83:0B:0A:A9:5E:19:49:96:81:61
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d5:6a:00:df:13:53:89:f2:c3:48:e8:24:f2:dd:3c:9a:16:
33:2b:1f:e5:94:a3:34:46:60:fa:21:5f:26:f7:13:b3:b0:bf:
f6:05:85:a2:c4:09:15:db:bb:e9:e0:bb:ed:00:16:1b:fb:a7:
bd:9c:31:c0:fa:ec:38:37:36:ef:9e:c2:1d:a0:72:13:32:be:
e2:2a:7b:e2:46:17:e0:74:ff:63:b3:15:5e:7a:0d:1a:46:b4:
01:b3:af:4a:f4:e5:90:6f:0e:1e:02:3c:33:74:75:1a:07:51:
e3:c1:71:7f:2a:fb:9d:a3:9b:f1:3b:df:05:2c:13:72:9d:4d:
ce:76:78:8a:d8:3f:e4:f2:c5:70:e3:b2:55:49:29:57:61:06:
df:7a:16:84:bd:c6:a6:cb:e7:b8:36:84:b8:3a:95:e5:38:d6:
04:3b:28:3a:26:6d:1a:97:c4:53:87:d7:0b:82:3c:4f:94:9b:
7a:5a:e1:ba:ff:94:e9:c4:cc:fc:b4:5a:75:29:a6:f7:e0:cd:
de:13:df:fa:65:d0:4c:bc:a4:e6:0d:8c:2e:21:97:90:be:d9:
cb:c6:2a:e8:20:5a:d7:b7:e3:19:ea:d5:2e:51:9d:34:a7:b1:
88:4d:c6:f8:98:9e:1a:55:78:7b:b9:91:51:c7:27:67:14:75:
1f:c5:e5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFS9rOj81rVY5XI8SKS/+7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWU4NzBkMzFjYTcwMTk5NTEzNzBjYjIyMWYxOGYxZjA5
ZmE1OGEwHhcNMjYxMDE5MDcwMTAxWhcNMjYxMDIwMDcwMTAxWjAzMTEwLwYDVQQD
EyhjMjgwNDQ5MWM5NTU3OGM5ZmY2ODgzMGIwYWE5NWUxOTQ5OTY4MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cPD6X13QdqungeHl5q6x1sd6VA/
Pr91x+3R/GTpPkQiCsUUnQjbw11RAfU0u0lMbi1IBm9gCQKSagfTnj10I1ND7dSb
cPObOlM9mUMTQ6XiFyMxYm/gM1QTOpbxDnpE3AJZJtKjf3xIjZorFREh28cpulnT
mN+zbwUE++iWW7ufesdrOCjlgg9p8FI95Vp6mDXCE0Y9Z9+V7lEwhPGXQAO3eQki
1lssp4lia1Jh0dX3qxRWsw8zxGVFCYWtoKEtCch7YX3pNwKHPx80TSsKp07rGqBR
em2TK10GpdH/3t6plfrULxxnl6OUoD4caD65YpkNULpYezFyy5uPutkw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKARJHJVXjJ/2iDCwqpXhlJloFhMB8GA1UdIwQY
MBaAFAxehw0xynAZlRNwyyIfGPHwn6WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQt
MzVjZjc3MGRjOGI5LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQtMzVjZjc3MGRjOGI5
LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9VqAN8T
U4nyw0joJPLdPJoWMysf5ZSjNEZg+iFfJvcTs7C/9gWFosQJFdu76eC77QAWG/un
vZwxwPrsODc2757CHaByEzK+4ip74kYX4HT/Y7MVXnoNGka0AbOvSvTlkG8OHgI8
M3R1GgdR48Fxfyr7naOb8TvfBSwTcp1NznZ4itg/5PLFcOOyVUkpV2EG33oWhL3G
psvnuDaEuDqV5TjWBDsoOiZtGpfEU4fXC4I8T5Sbelrhuv+U6cTM/LRadSmm9+DN
3hPf+mXQTLyk5g2MLiGXkL7Zy8Yq6CBa17fjGerVLlGdNKexiE3G+JieGlV4e7mR
UccnZxR1H8XlWg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:34:20 2026 by rpki-client