Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: Hm/dm7xqA0fu4MJ+JP3peD2dNwutxr7++TelPGMD4NE=
Subject key identifier: 22:F9:38:C2:E9:D9:4D:D0:A2:3C:84:47:71:C6:E8:4F:51:19:80:78
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 01A13E9531DDD2CA66320F976CD70247932E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 08:02:07 +0000
Manifest this update: Thu 15 Oct 2026 08:02:07 +0000
Manifest next update: Fri 16 Oct 2026 08:02:07 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: RPgj5ugASJYGvCSBUz3tZQQNekDf1OE6G5SyDw8spE4=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:31:dd:d2:ca:66:32:0f:97:6c:d7:02:47:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Oct 15 08:02:07 2026 GMT
Not After : Oct 16 08:02:07 2026 GMT
Subject: CN=22f938c2e9d94dd0a23c844771c6e84f51198078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:83:f9:5c:95:81:e1:bb:47:e6:b8:8c:cb:
cf:22:3f:5c:b8:03:fe:04:07:1d:2b:d0:01:40:70:
d9:a1:76:6f:d4:6f:78:79:1a:7d:c6:a7:38:ed:ca:
ea:d1:7c:ce:9a:21:24:6c:68:46:9f:c4:08:73:ce:
0b:5e:f2:f3:43:f7:6e:bb:11:aa:0f:c2:04:be:12:
b5:ea:bb:d8:fd:2e:e9:3a:41:19:41:55:f4:70:fe:
ec:32:cd:af:03:ee:61:84:66:5f:c4:de:62:c6:27:
8f:78:bd:56:da:ec:15:58:7b:1c:fd:7d:89:c5:f0:
b5:fd:d7:4f:5a:ea:10:69:e8:6d:18:a5:c0:a7:f5:
43:ef:94:e8:d4:b4:71:da:41:a2:14:fa:a1:7b:6d:
1c:45:2a:97:02:31:e7:17:6d:3b:7e:a1:d1:9b:0a:
da:00:f9:fc:16:f7:f9:af:c5:eb:69:d7:0e:2e:1e:
ae:5b:87:d3:1e:1e:14:60:2d:d9:bb:10:b5:0e:87:
9c:68:62:57:9b:ef:df:57:f3:b6:a5:99:59:db:56:
60:23:32:da:9d:c0:4f:4e:67:de:d9:8b:85:51:36:
ea:59:e2:95:1e:ec:45:7a:28:27:bd:75:aa:5b:fc:
69:4c:cc:b8:96:c4:16:2b:69:99:bf:c1:a2:41:78:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:38:C2:E9:D9:4D:D0:A2:3C:84:47:71:C6:E8:4F:51:19:80:78
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:02:19:9c:66:fb:5d:59:15:18:e5:b8:2d:73:86:8b:69:
32:4f:74:e1:df:bd:78:03:90:68:cb:b8:13:67:7b:b7:f5:d6:
63:1c:e9:3a:76:c3:fd:ee:40:fd:dd:ad:6a:d7:7d:03:43:8f:
b2:4f:81:a2:13:df:0d:c5:21:b9:47:8e:17:a5:89:fa:d1:a9:
55:75:7f:a1:ed:d6:b1:f9:52:fe:1a:13:40:d4:29:27:cb:5b:
7d:27:6b:4a:1d:1e:da:18:e0:bd:05:86:e2:5e:30:23:d9:08:
00:35:e9:b8:0a:16:60:c9:69:95:e6:b3:b7:fe:1f:db:eb:67:
26:13:da:df:01:f7:3e:a0:6e:49:14:ad:3a:06:e5:e5:d9:0a:
83:f4:9f:c5:e3:43:82:12:3a:57:e6:60:8f:a8:aa:17:35:cc:
60:e4:84:de:93:98:7d:24:3f:78:ba:da:25:8b:48:56:3d:bc:
5b:bb:ad:a3:63:37:87:19:7d:e8:dc:c4:00:84:e3:fc:27:c6:
75:fd:55:e0:3f:48:86:5d:e1:e6:bd:7f:5d:33:bf:32:0f:8e:
44:8f:ff:f7:e6:da:a1:13:3b:a6:57:9a:99:f1:d6:b2:41:7f:
fb:6b:66:62:8d:28:f2:4c:7a:f4:73:da:4b:21:69:fc:00:9f:
f1:5a:56:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lTHd0spmMg+XbNcCR5MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh
YzYzY2MwHhcNMjYxMDE1MDgwMjA3WhcNMjYxMDE2MDgwMjA3WjAzMTEwLwYDVQQD
EygyMmY5MzhjMmU5ZDk0ZGQwYTIzYzg0NDc3MWM2ZTg0ZjUxMTk4MDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7iD+VyVgeG7R+a4jMvPIj9cuAP+
BAcdK9ABQHDZoXZv1G94eRp9xqc47crq0XzOmiEkbGhGn8QIc84LXvLzQ/duuxGq
D8IEvhK16rvY/S7pOkEZQVX0cP7sMs2vA+5hhGZfxN5ixiePeL1W2uwVWHsc/X2J
xfC1/ddPWuoQaehtGKXAp/VD75To1LRx2kGiFPqhe20cRSqXAjHnF207fqHRmwra
APn8Fvf5r8XradcOLh6uW4fTHh4UYC3ZuxC1DoecaGJXm+/fV/O2pZlZ21ZgIzLa
ncBPTmfe2YuFUTbqWeKVHuxFeignvXWqW/xpTMy4lsQWK2mZv8GiQXhsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL5OMLp2U3QojyER3HG6E9RGYB4MB8GA1UdIwQY
MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt
MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm
LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGggCGZxm
+11ZFRjluC1zhotpMk904d+9eAOQaMu4E2d7t/XWYxzpOnbD/e5A/d2tatd9A0OP
sk+BohPfDcUhuUeOF6WJ+tGpVXV/oe3WsflS/hoTQNQpJ8tbfSdrSh0e2hjgvQWG
4l4wI9kIADXpuAoWYMlpleazt/4f2+tnJhPa3wH3PqBuSRStOgbl5dkKg/SfxeND
ghI6V+Zgj6iqFzXMYOSE3pOYfSQ/eLraJYtIVj28W7uto2M3hxl96NzEAITj/CfG
df1V4D9Ihl3h5r1/XTO/Mg+ORI//9+baoRM7pleamfHWskF/+2tmYo0o8kx69HPa
SyFp/ACf8VpWvw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:00 2026 by rpki-client