Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: RnwMzMHKdrMyvdRfL9a82YX4vxlotXv8/NV2HrXNGBw=
Subject key identifier: D8:3C:2E:2B:84:48:F9:E4:C1:A8:69:A2:11:E9:7F:A6:75:E5:D9:50
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 01A13D1346B5BBC0604424705ACFD15FCB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 130A
Signing time: Thu 15 Oct 2026 01:00:35 +0000
Manifest this update: Thu 15 Oct 2026 01:00:35 +0000
Manifest next update: Fri 16 Oct 2026 01:00:35 +0000
Files and hashes: 1: CwIjYjnTILTtmzxjO1L06aXYXx0.roa (hash: eJSJ7vi3vMU6tYUCxmim/j5RdYogwWkRqmaPqZMw+kY=)
2: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: Y5pmEKiyPfLJ9Xk90/Uhf/Vraj7Yl2hr0fRsmL40cS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:46:b5:bb:c0:60:44:24:70:5a:cf:d1:5f:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Oct 15 01:00:35 2026 GMT
Not After : Oct 16 01:00:35 2026 GMT
Subject: CN=d83c2e2b8448f9e4c1a869a211e97fa675e5d950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:be:1c:6c:e8:3b:63:4d:54:0f:2c:98:06:
a9:7f:09:a5:e6:09:e8:6c:09:5a:fb:0b:af:6b:5c:
77:5c:77:f7:99:0a:dc:59:59:a2:27:23:8e:ef:c4:
9c:bf:d1:48:a7:e1:88:10:91:58:6d:35:46:19:51:
41:38:28:c3:22:10:2a:87:a5:e7:ac:c7:08:8f:10:
f2:fc:e4:10:67:57:78:21:ae:8e:d6:5f:51:15:95:
7f:ed:ab:13:6f:cc:42:6c:79:5c:30:04:6f:e3:79:
20:a3:d1:2f:a6:17:57:3c:c0:f1:0a:8a:dc:5f:ac:
99:dd:ba:bc:21:59:55:b6:30:29:c0:0c:0e:be:51:
27:3b:ee:d6:65:19:62:a4:b5:60:73:08:a7:ce:ee:
0c:f6:94:c3:e8:42:bb:3d:5b:c7:49:2e:f3:00:c3:
ee:44:9d:ba:21:92:8a:35:2e:0f:02:0c:ff:76:0f:
99:3e:49:53:33:7e:ff:e5:a8:a9:34:54:67:a3:4c:
45:c2:87:1f:09:11:cf:7a:01:0e:a9:1e:25:0f:67:
cc:c1:80:85:b6:ee:49:ea:2e:47:ab:dd:23:10:84:
67:4d:39:88:87:fb:57:01:21:22:83:5b:66:6a:da:
04:6f:d1:7f:41:89:b9:58:f9:40:2e:2d:87:2f:37:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:2E:2B:84:48:F9:E4:C1:A8:69:A2:11:E9:7F:A6:75:E5:D9:50
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:26:8f:40:70:05:5a:6e:ce:56:63:f0:09:ba:89:af:1e:
bb:95:88:5a:f6:1c:93:b6:47:d4:79:5f:e7:60:a0:15:1c:5d:
e1:0e:97:ef:ef:7b:38:6e:63:94:08:bf:3b:5b:d4:a0:1f:c8:
36:15:7c:1d:fa:4c:ce:58:1a:55:41:3d:79:62:e1:95:05:72:
aa:57:b6:9d:f7:b9:8c:e2:4b:b7:a4:9c:9c:67:48:21:a6:15:
69:36:c9:13:ae:ed:4a:7e:86:f5:6b:d2:b7:82:5a:b8:1a:d3:
2d:e5:18:a6:36:3a:af:3b:9d:b0:d8:43:7d:6f:a3:24:cf:1f:
68:3c:fa:81:11:a6:c2:b5:8e:82:2a:3d:55:eb:27:b2:61:61:
55:6f:6d:e7:e5:b5:fb:5d:bf:13:d0:0f:16:fb:7d:f6:e4:e0:
94:06:cf:ef:2e:b3:69:ac:89:89:76:12:e3:80:89:92:84:6b:
cc:df:5c:07:49:e5:b2:50:c1:d1:6c:ef:91:d1:3d:09:e8:53:
ac:c3:8e:2e:f1:9b:af:5d:9e:2d:d1:f0:3b:ae:80:9f:c3:90:
00:0a:28:a5:2c:d4:32:b1:ae:a5:cb:54:08:e4:e4:41:3d:a0:
f4:6d:4f:b7:84:0f:ae:61:90:82:07:73:e3:bf:dd:67:03:36:
0a:0b:b2:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E0a1u8BgRCRwWs/RX8sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjcxZmVjMzhmMDBjNDAyZjMwNjZmMTNjNzkyZTFhMGVk
MTZkYjMwHhcNMjYxMDE1MDEwMDM1WhcNMjYxMDE2MDEwMDM1WjAzMTEwLwYDVQQD
EyhkODNjMmUyYjg0NDhmOWU0YzFhODY5YTIxMWU5N2ZhNjc1ZTVkOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWi+HGzoO2NNVA8smAapfwml5gno
bAla+wuva1x3XHf3mQrcWVmiJyOO78Scv9FIp+GIEJFYbTVGGVFBOCjDIhAqh6Xn
rMcIjxDy/OQQZ1d4Ia6O1l9RFZV/7asTb8xCbHlcMARv43kgo9EvphdXPMDxCorc
X6yZ3bq8IVlVtjApwAwOvlEnO+7WZRlipLVgcwinzu4M9pTD6EK7PVvHSS7zAMPu
RJ26IZKKNS4PAgz/dg+ZPklTM37/5aipNFRno0xFwocfCRHPegEOqR4lD2fMwYCF
tu5J6i5Hq90jEIRnTTmIh/tXASEig1tmatoEb9F/QYm5WPlALi2HLzdtMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg8LiuESPnkwahpohHpf6Z15dlQMB8GA1UdIwQY
MBaAFA9nH+w48AxALzBm8Tx5LhoO0W2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80OWJiNjktZGZmOS00NDhlLWE4YTIt
OTc3MzA1YzcwMDUxLzEvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80OWJiNjktZGZmOS00NDhlLWE4YTItOTc3MzA1YzcwMDUx
LzEvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXYmj0Bw
BVpuzlZj8Am6ia8eu5WIWvYck7ZH1Hlf52CgFRxd4Q6X7+97OG5jlAi/O1vUoB/I
NhV8HfpMzlgaVUE9eWLhlQVyqle2nfe5jOJLt6ScnGdIIaYVaTbJE67tSn6G9WvS
t4JauBrTLeUYpjY6rzudsNhDfW+jJM8faDz6gRGmwrWOgio9VesnsmFhVW9t5+W1
+12/E9APFvt99uTglAbP7y6zaayJiXYS44CJkoRrzN9cB0nlslDB0WzvkdE9CehT
rMOOLvGbr12eLdHwO66An8OQAAoopSzUMrGupctUCOTkQT2g9G1Pt4QPrmGQggdz
47/dZwM2CguyQQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:38 2026 by rpki-client