Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: SYNINFKk6Fv/Fi+AGQSiDpVeLs39bROh6mW+xIJ/w6w=
Subject key identifier: 33:D5:A0:4D:B0:FA:F2:80:D7:0D:97:85:E0:26:DA:A9:E9:DC:99:BC
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01A17EBD42454161A19AB6645F110DA18F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0C5C
Signing time: Tue 27 Oct 2026 19:01:34 +0000
Manifest this update: Tue 27 Oct 2026 19:01:34 +0000
Manifest next update: Wed 28 Oct 2026 19:01:34 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: T15QSWxdkzDeRZIQglqkoeV91cBODagp0IpcSStarRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:42:45:41:61:a1:9a:b6:64:5f:11:0d:a1:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Oct 27 19:01:34 2026 GMT
Not After : Oct 28 19:01:34 2026 GMT
Subject: CN=33d5a04db0faf280d70d9785e026daa9e9dc99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:5b:1b:19:33:45:1d:de:7f:ae:b7:21:69:
f5:08:50:25:f4:95:6d:cb:66:10:76:7b:ab:5b:6b:
b6:c8:85:9b:83:0d:78:51:f7:18:3a:79:f2:5c:64:
eb:11:43:50:56:dc:e4:e0:96:f4:2b:40:53:b2:15:
2f:fa:ab:2f:b7:72:62:e1:ca:dd:d2:1f:10:c5:ea:
38:d7:50:58:94:02:40:4c:a6:24:48:1d:6b:00:fb:
8b:c5:67:d3:19:0b:92:59:39:71:8f:86:71:df:04:
89:93:df:47:92:2c:66:05:10:25:82:5a:db:3d:2b:
2e:1c:ae:f9:b3:fe:10:aa:9d:d0:99:93:f7:2a:ca:
b6:a0:62:d7:b2:98:05:ea:aa:08:b5:85:52:24:0f:
ee:f4:90:1d:3a:43:58:a6:4b:cf:39:22:81:9f:f9:
93:8a:64:5d:7f:54:47:a3:a0:ec:69:a3:be:d9:3a:
cd:91:e5:f8:c5:0b:35:6f:d9:3d:50:ff:ca:ee:02:
69:f6:fb:9d:20:0c:4f:94:ad:c4:b3:78:91:a4:ba:
90:6a:6d:d0:de:85:06:3a:da:8b:7d:4c:18:28:64:
e7:f1:a5:a7:e8:3c:e3:db:10:2a:0b:4b:e7:c8:3f:
8e:9c:ed:b1:b1:ef:b0:80:38:62:0d:c3:b3:3e:18:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:A0:4D:B0:FA:F2:80:D7:0D:97:85:E0:26:DA:A9:E9:DC:99:BC
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:67:01:2e:c3:67:eb:18:c2:0a:a2:47:29:ab:df:e6:a8:a6:
bf:1e:16:c9:1a:50:ca:5d:7d:33:84:20:d0:ea:de:57:d2:36:
33:44:97:5d:b3:93:d1:03:45:11:3c:67:be:48:78:a6:1e:12:
eb:a2:35:e3:db:73:88:8e:94:d7:0c:5a:1b:6c:fa:1c:d5:75:
ba:0a:d5:77:19:16:32:c5:18:cb:49:ea:4c:5b:99:b1:e8:bd:
c0:fe:04:a8:46:a2:f8:e1:1b:3e:4c:35:a5:39:b8:dd:c6:5b:
38:ea:24:9a:fc:3b:d5:ef:f9:26:3e:f7:92:aa:19:ee:3e:64:
09:d3:0c:33:fd:a0:d6:07:fc:2c:c7:fe:bc:5d:54:d9:35:06:
90:a6:ae:46:59:77:47:96:99:bb:57:58:8e:0d:63:39:16:22:
ac:c0:ca:34:8b:2d:e3:fe:de:62:e8:0c:f7:e3:ad:87:a9:43:
fb:5b:6d:cb:b5:15:3d:4c:e0:79:49:86:0f:bc:4c:c3:a8:ba:
38:b9:91:1e:69:60:ff:97:93:90:64:90:06:20:f0:55:ca:fa:
fa:2a:ae:e4:9c:e4:d3:c4:1f:cf:99:4d:8e:38:c3:6a:ea:28:
77:f2:fd:bf:ff:09:0b:83:c4:25:e3:c3:02:f7:5a:05:80:9d:
c3:08:c4:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+vUJFQWGhmrZkXxENoY9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi
YmQ4MzgwHhcNMjYxMDI3MTkwMTM0WhcNMjYxMDI4MTkwMTM0WjAzMTEwLwYDVQQD
EygzM2Q1YTA0ZGIwZmFmMjgwZDcwZDk3ODVlMDI2ZGFhOWU5ZGM5OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlotbGxkzRR3ef663IWn1CFAl9JVt
y2YQdnurW2u2yIWbgw14UfcYOnnyXGTrEUNQVtzk4Jb0K0BTshUv+qsvt3Ji4crd
0h8Qxeo411BYlAJATKYkSB1rAPuLxWfTGQuSWTlxj4Zx3wSJk99HkixmBRAlglrb
PSsuHK75s/4Qqp3QmZP3Ksq2oGLXspgF6qoItYVSJA/u9JAdOkNYpkvPOSKBn/mT
imRdf1RHo6DsaaO+2TrNkeX4xQs1b9k9UP/K7gJp9vudIAxPlK3Es3iRpLqQam3Q
3oUGOtqLfUwYKGTn8aWn6Dzj2xAqC0vnyD+OnO2xse+wgDhiDcOzPhjIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPVoE2w+vKA1w2XheAm2qnp3Jm8MB8GA1UdIwQY
MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt
NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx
LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWcBLsNn
6xjCCqJHKavf5qimvx4WyRpQyl19M4Qg0OreV9I2M0SXXbOT0QNFETxnvkh4ph4S
66I149tziI6U1wxaG2z6HNV1ugrVdxkWMsUYy0nqTFuZsei9wP4EqEai+OEbPkw1
pTm43cZbOOokmvw71e/5Jj73kqoZ7j5kCdMMM/2g1gf8LMf+vF1U2TUGkKauRll3
R5aZu1dYjg1jORYirMDKNIst4/7eYugM9+Oth6lD+1tty7UVPUzgeUmGD7xMw6i6
OLmRHmlg/5eTkGSQBiDwVcr6+iqu5Jzk08Qfz5lNjjjDauood/L9v/8JC4PEJePD
AvdaBYCdwwjE/g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:38:31 2026 by rpki-client