Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
File: DlF73Wltm7EfqnjCFqFeFg10Xmk.mft (raw, json)
Hash identifier: MLEcwv9jyHejqN4KM9lrwsgILG5M8tbIx+Xu87MA0jE=
Subject key identifier: BF:4A:C0:6B:E3:49:45:45:69:64:73:AE:BF:06:E4:21:DD:05:89:FA
Authority key identifier: 0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
Certificate issuer: /CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Certificate serial: 01A08A8C88CEFE7D831BE511258307733042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:00 +0000
Manifest this update: Thu 10 Sep 2026 09:01:00 +0000
Manifest next update: Fri 11 Sep 2026 09:01:00 +0000
Files and hashes: 1: DlF73Wltm7EfqnjCFqFeFg10Xmk.crl (hash: QkC8uCpaGyZWsxFKZQxw02JSrB2NS5snG31WtfQ9o+w=)
2: Q1Q0DhzuTCi0jVC3ZwvS2z89fWY.roa (hash: gZPINODeqX2SsKrHs+U4Y9Hw6JIKCtowrKwWGgtFtv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:88:ce:fe:7d:83:1b:e5:11:25:83:07:73:30:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Validity
Not Before: Sep 10 09:01:00 2026 GMT
Not After : Sep 11 09:01:00 2026 GMT
Subject: CN=bf4ac06be3494545696473aebf06e421dd0589fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:2c:e7:3a:91:b4:fc:30:16:dd:42:20:ac:
aa:1c:c2:68:5b:fa:a5:8c:a7:fd:92:ce:70:62:86:
7f:34:a8:c2:f8:58:69:a4:94:0f:34:d1:b8:f7:f6:
e0:1e:96:a9:70:d2:a3:c2:0b:f0:1f:82:49:ca:8a:
42:0b:b0:2f:15:d6:97:a5:2c:8a:17:3c:9f:22:f6:
9d:61:78:ff:90:1d:bb:c0:44:b4:e1:a0:29:de:ae:
21:ab:00:f9:97:eb:c9:fd:27:b2:fa:d0:a3:be:fd:
57:69:d7:1b:e6:3d:c7:03:97:db:aa:3c:ec:db:ba:
7a:97:01:f4:c6:94:82:54:8e:ab:bf:ac:9d:53:fe:
11:10:c9:b0:c3:90:9e:98:e2:3d:31:dc:3d:1e:35:
1d:29:8a:be:8d:cf:7a:c9:8c:db:3b:1e:67:ce:3f:
06:85:1d:7a:d7:e4:21:d2:ba:75:2f:a6:23:6f:5d:
d6:45:e9:5e:08:f1:2d:0e:aa:ee:10:cd:1f:80:b2:
da:a0:eb:d0:ae:d0:e5:ef:64:6d:52:e8:32:dc:7a:
26:7d:59:ce:46:9b:97:ab:97:13:ed:66:4c:e6:14:
cc:84:39:f3:c9:82:df:8c:25:df:a1:43:24:ac:0e:
c0:7f:7e:f0:41:06:59:db:a9:ec:a0:88:85:ab:81:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:C0:6B:E3:49:45:45:69:64:73:AE:BF:06:E4:21:DD:05:89:FA
X509v3 Authority Key Identifier:
keyid:0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:e7:51:9a:4f:a9:01:d5:62:4e:c2:06:30:e2:99:2a:69:
59:ea:f5:ed:7e:62:d4:53:c5:fa:be:08:f5:c9:93:e3:e8:32:
52:a1:64:16:ed:83:39:0c:fe:7c:09:47:53:c3:30:8f:c9:ae:
ed:bc:cf:0b:ef:d2:d8:df:d7:08:bc:cc:8b:4f:fc:8d:71:73:
50:68:bf:e2:dd:07:4d:bd:46:b1:b2:99:3b:94:cc:a0:9b:b7:
85:49:f8:57:b6:94:7c:21:ae:1e:b2:75:5c:aa:2a:61:4f:c0:
17:ea:cf:f5:d9:37:39:b6:56:d0:39:ae:9c:c9:4e:cd:bb:35:
d6:7b:4b:66:6b:19:dd:95:8b:4b:cb:2e:4e:9f:97:3a:88:12:
7b:2b:86:ad:68:d3:c9:f6:f0:35:78:c8:eb:37:6e:ff:42:cf:
dc:2d:4c:35:89:ee:f2:55:e4:f4:f4:fa:9a:8e:a2:b0:da:ef:
59:3a:84:79:3d:d3:e9:e6:df:b8:b9:3a:9a:1d:a9:e9:dc:8d:
8a:c7:b8:56:b5:66:aa:6a:a5:47:51:4d:3d:4a:14:84:2d:7b:
08:b1:7d:6b:1e:6d:a4:f9:9d:d8:bb:fb:9b:f3:a2:e3:50:ea:
6b:58:1f:25:ac:fa:62:f8:0a:b9:f6:5b:e4:fc:f6:d4:7f:22:
58:14:4a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjIjO/n2DG+URJYMHczBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNTE3YmRkNjk2ZDliYjExZmFhNzhjMjE2YTE1ZTE2MGQ3
NDVlNjkwHhcNMjYwOTEwMDkwMTAwWhcNMjYwOTExMDkwMTAwWjAzMTEwLwYDVQQD
EyhiZjRhYzA2YmUzNDk0NTQ1Njk2NDczYWViZjA2ZTQyMWRkMDU4OWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g8s5zqRtPwwFt1CIKyqHMJoW/ql
jKf9ks5wYoZ/NKjC+FhppJQPNNG49/bgHpapcNKjwgvwH4JJyopCC7AvFdaXpSyK
FzyfIvadYXj/kB27wES04aAp3q4hqwD5l+vJ/Sey+tCjvv1Xadcb5j3HA5fbqjzs
27p6lwH0xpSCVI6rv6ydU/4REMmww5CemOI9Mdw9HjUdKYq+jc96yYzbOx5nzj8G
hR161+Qh0rp1L6Yjb13WReleCPEtDqruEM0fgLLaoOvQrtDl72RtUugy3HomfVnO
RpuXq5cT7WZM5hTMhDnzyYLfjCXfoUMkrA7Af37wQQZZ26nsoIiFq4E9zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9KwGvjSUVFaWRzrr8G5CHdBYn6MB8GA1UdIwQY
MBaAFA5Re91pbZuxH6p4whahXhYNdF5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGxGNzNXbHRtN0VmcW5qQ0ZxRmVGZzEwWG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgt
NWYxZGMwYTBiZmNmLzEvRGxGNzNXbHRtN0VmcW5qQ0ZxRmVGZzEwWG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgtNWYxZGMwYTBiZmNm
LzEvRGxGNzNXbHRtN0VmcW5qQ0ZxRmVGZzEwWG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWfnUZpP
qQHVYk7CBjDimSppWer17X5i1FPF+r4I9cmT4+gyUqFkFu2DOQz+fAlHU8Mwj8mu
7bzPC+/S2N/XCLzMi0/8jXFzUGi/4t0HTb1GsbKZO5TMoJu3hUn4V7aUfCGuHrJ1
XKoqYU/AF+rP9dk3ObZW0DmunMlOzbs11ntLZmsZ3ZWLS8suTp+XOogSeyuGrWjT
yfbwNXjI6zdu/0LP3C1MNYnu8lXk9PT6mo6isNrvWTqEeT3T6ebfuLk6mh2p6dyN
ise4VrVmqmqlR1FNPUoUhC17CLF9ax5tpPmd2Lv7m/Oi41Dqa1gfJaz6YvgKufZb
5Pz21H8iWBRKhQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:58:52 2026 by rpki-client