Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: UKGuTvLxhzjGgqE/gtGO/MA5EAH2sCjkQiduNZihSkE=
Subject key identifier: 55:BA:16:B5:B1:5F:12:2A:CF:18:B1:F6:B9:B9:7F:AF:17:DE:D2:63
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 01A13F705945404FC05217E9B79FD2A7391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 075D
Signing time: Thu 15 Oct 2026 12:01:29 +0000
Manifest this update: Thu 15 Oct 2026 12:01:29 +0000
Manifest next update: Fri 16 Oct 2026 12:01:29 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: LLLC0zJxg9YzXWMtvSmCAVpVjhibb8jZA2mEJTn4blc=)
2: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (hash: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:59:45:40:4f:c0:52:17:e9:b7:9f:d2:a7:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Oct 15 12:01:29 2026 GMT
Not After : Oct 16 12:01:29 2026 GMT
Subject: CN=55ba16b5b15f122acf18b1f6b9b97faf17ded263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:01:ce:26:09:53:a9:69:d8:e6:83:bd:c2:
71:64:97:d5:27:39:6e:5a:d5:f2:6c:34:a2:ab:fe:
9a:e5:29:49:2c:5b:5f:15:34:a1:52:e2:2e:47:3a:
60:6b:f1:94:d1:9b:5b:7f:8a:b1:96:ee:e5:07:80:
a0:7b:e9:91:65:dc:b2:c9:59:28:18:76:d9:a7:23:
b1:68:33:66:98:e6:19:70:1e:af:3b:0f:32:9b:54:
eb:7a:ca:96:07:d3:20:24:36:e1:24:3a:c7:8a:04:
e4:35:7b:8f:09:61:b1:2b:d1:38:43:56:2b:dc:74:
91:25:1f:f6:27:33:a2:3d:c4:39:e4:99:53:a5:6d:
45:40:db:ca:b3:e4:85:c5:a1:98:55:9d:67:6c:88:
b4:09:93:d8:67:1d:fe:6c:0b:35:46:2a:64:98:04:
21:6a:d4:43:6a:3c:73:fe:88:d0:7f:d5:2f:0b:ab:
56:2c:fe:5a:c0:cc:9e:7e:f7:52:d4:91:62:83:c6:
55:93:84:f9:bd:56:11:f7:0a:92:6a:38:02:5d:c8:
d4:23:40:fb:6c:28:44:df:e8:b6:85:ec:dd:38:d1:
f7:6f:14:f2:d1:41:64:83:0d:38:ff:ee:45:13:3e:
91:d0:6c:92:4e:36:7f:38:67:a2:94:56:f3:95:8f:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:16:B5:B1:5F:12:2A:CF:18:B1:F6:B9:B9:7F:AF:17:DE:D2:63
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:c3:f2:57:69:f9:65:ee:d3:7d:80:68:b0:f3:a0:d4:92:
33:51:d1:de:ed:c7:0a:37:f2:a1:c0:fb:0d:98:cc:3a:45:e5:
7b:ac:e9:57:8f:53:7d:87:4b:81:33:19:75:1f:69:e1:78:08:
1d:a4:c6:2b:0d:15:27:82:15:4a:d2:ae:ed:a6:a7:22:47:89:
d8:e1:84:9e:01:c9:9b:20:4f:dc:0c:60:9b:0a:ef:7c:e3:c1:
e8:7e:7a:65:a2:5b:de:4d:19:1b:9e:17:91:8b:0a:73:e9:a9:
dc:66:21:83:18:b2:cc:32:4a:64:71:29:06:bc:4b:3d:2d:6d:
47:ce:0b:5b:d6:db:e8:d1:9a:65:b6:df:ec:3b:e2:b4:2c:19:
c6:bd:68:ec:95:54:a9:dd:f7:a8:6a:0f:47:56:34:4d:0a:8d:
33:a4:0a:9c:4d:e0:a5:4a:cb:34:a2:26:0f:a3:64:ab:cd:be:
e8:ef:53:55:32:b1:76:24:75:df:92:9c:01:d7:c0:86:03:54:
72:44:b0:ed:11:08:3c:4c:b5:36:0d:24:04:d4:07:72:08:53:
da:cc:6f:53:44:22:12:4c:91:bb:61:94:ce:4a:a5:b9:c6:1d:
c7:8b:98:20:76:e6:7a:19:40:76:30:2d:fd:aa:39:ad:d4:c9:
99:18:4a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cFlFQE/AUhfpt5/SpzkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjYxMDE1MTIwMTI5WhcNMjYxMDE2MTIwMTI5WjAzMTEwLwYDVQQD
Eyg1NWJhMTZiNWIxNWYxMjJhY2YxOGIxZjZiOWI5N2ZhZjE3ZGVkMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EgBziYJU6lp2OaDvcJxZJfVJzlu
WtXybDSiq/6a5SlJLFtfFTShUuIuRzpga/GU0Ztbf4qxlu7lB4Cge+mRZdyyyVko
GHbZpyOxaDNmmOYZcB6vOw8ym1TresqWB9MgJDbhJDrHigTkNXuPCWGxK9E4Q1Yr
3HSRJR/2JzOiPcQ55JlTpW1FQNvKs+SFxaGYVZ1nbIi0CZPYZx3+bAs1RipkmAQh
atRDajxz/ojQf9UvC6tWLP5awMyefvdS1JFig8ZVk4T5vVYR9wqSajgCXcjUI0D7
bChE3+i2hezdONH3bxTy0UFkgw04/+5FEz6R0GySTjZ/OGeilFbzlY/0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW6FrWxXxIqzxix9rm5f68X3tJjMB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcnD8ldp
+WXu032AaLDzoNSSM1HR3u3HCjfyocD7DZjMOkXle6zpV49TfYdLgTMZdR9p4XgI
HaTGKw0VJ4IVStKu7aanIkeJ2OGEngHJmyBP3AxgmwrvfOPB6H56ZaJb3k0ZG54X
kYsKc+mp3GYhgxiyzDJKZHEpBrxLPS1tR84LW9bb6NGaZbbf7DvitCwZxr1o7JVU
qd33qGoPR1Y0TQqNM6QKnE3gpUrLNKImD6Nkq82+6O9TVTKxdiR135KcAdfAhgNU
ckSw7REIPEy1Ng0kBNQHcghT2sxvU0QiEkyRu2GUzkqlucYdx4uYIHbmehlAdjAt
/ao5rdTJmRhK5A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:56:32 2026 by rpki-client