Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
File: D5otI3SqascUtfim7duA3GlnnMY.mft (raw, json)
Hash identifier: s5sy6bc1AWdVjCU2ZZHjXsIjrDeCc4hSFj3iqdgIXXI=
Subject key identifier: AA:B5:0E:BE:C6:38:72:FF:8B:BC:5A:FA:17:B9:3A:E4:EB:D2:DC:A4
Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Certificate serial: 01A13DB7D3182D25F3EED78CE50BF4504C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
Manifest number: 1109
Signing time: Thu 15 Oct 2026 04:00:19 +0000
Manifest this update: Thu 15 Oct 2026 04:00:19 +0000
Manifest next update: Fri 16 Oct 2026 04:00:19 +0000
Files and hashes: 1: 8SEsdKMq767CnaRYG-1hJ5v6Hic.roa (hash: h/RdezdmLSdHmsoFs8q7JJ7Hnulds2LoEiNuAXGhUZg=)
2: D5otI3SqascUtfim7duA3GlnnMY.crl (hash: CkG2P6hPP65O7VjW6XX2/WUoCp0iJYgbZgcPNR4ZGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:d3:18:2d:25:f3:ee:d7:8c:e5:0b:f4:50:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Validity
Not Before: Oct 15 04:00:19 2026 GMT
Not After : Oct 16 04:00:19 2026 GMT
Subject: CN=aab50ebec63872ff8bbc5afa17b93ae4ebd2dca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:1f:b4:af:eb:51:35:79:47:27:9e:6c:e2:
18:73:9f:99:8f:6c:fd:df:46:d3:1c:5c:6c:07:e5:
66:2f:a4:dd:e0:5c:7a:d5:a6:95:14:78:f5:50:e5:
ec:e6:6f:a4:00:3f:9f:d5:56:66:99:e6:42:b1:c2:
47:2e:94:48:65:e4:12:d5:9d:87:d2:fb:02:c9:79:
86:7e:e3:f7:90:63:99:54:ab:fa:4f:3b:96:d5:da:
8f:2a:23:f9:50:db:d0:a4:4f:32:62:ee:70:67:fa:
f9:3e:fc:97:80:a4:19:c3:84:d6:f5:ab:ef:01:dd:
e3:49:da:53:93:2f:5d:21:5b:99:81:8e:28:8a:88:
aa:15:e5:f8:55:19:41:8b:44:9c:93:8b:99:6d:42:
8e:8f:0f:8e:20:28:cd:58:d7:fd:2f:79:22:d1:5c:
01:79:bd:c9:5a:cc:90:9b:cd:d2:b2:73:00:90:7a:
9e:92:89:4c:41:55:c3:17:8c:0d:49:a4:02:d5:dc:
d7:fa:80:16:33:a3:c2:7a:92:37:cd:fe:ff:29:96:
19:eb:08:e6:f9:1d:7f:57:c5:de:d0:f9:05:c6:11:
dc:52:4a:9e:be:c0:06:79:96:b9:f3:85:80:9b:92:
e7:3c:8b:0d:06:86:5a:63:8b:68:98:85:fc:c1:bf:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:0E:BE:C6:38:72:FF:8B:BC:5A:FA:17:B9:3A:E4:EB:D2:DC:A4
X509v3 Authority Key Identifier:
keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:f5:0f:4a:b7:6f:d4:cc:a2:03:e2:05:49:c2:7a:5d:ab:
a2:d6:44:05:a0:2b:e6:8d:cc:27:bc:ae:f5:f2:6d:72:7f:d8:
32:09:07:9e:5d:7f:78:e6:20:cb:0b:52:ca:ab:91:e5:05:14:
d7:40:13:60:bf:33:31:55:c3:07:9d:dc:e0:67:50:ac:90:9d:
b1:b2:89:db:22:17:bd:51:d2:ce:98:4b:8e:ec:08:60:6f:a6:
73:e9:e3:c7:bd:62:42:ee:78:0b:23:41:9c:6c:cd:af:d8:68:
0a:e8:43:8d:f6:dd:37:e8:d9:47:bd:22:55:87:20:0b:22:6a:
de:68:9b:f5:cf:c6:87:9c:d4:22:b6:19:36:a8:5c:d6:6b:64:
b7:5b:30:19:60:b7:3f:2e:a9:47:ba:88:69:46:cd:de:66:7f:
d2:bd:3b:ad:40:c6:2c:db:bf:de:a6:86:06:74:ca:48:46:3f:
cb:72:25:18:e5:5e:8c:0b:df:26:2c:de:29:9c:d3:de:b4:a9:
af:ba:3e:00:68:3e:73:77:1c:e0:44:48:e2:dc:05:94:11:fc:
62:7f:90:d1:99:40:45:5e:9f:d3:26:8e:8b:48:14:c0:8e:40:
42:15:84:25:4e:fe:34:d9:32:6a:f7:8f:8d:bc:72:64:ea:bc:
76:f1:27:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t9MYLSXz7teM5Qv0UEyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWEyZDIzNzRhYTZhYzcxNGI1ZjhhNmVkZGI4MGRjNjk2
NzljYzYwHhcNMjYxMDE1MDQwMDE5WhcNMjYxMDE2MDQwMDE5WjAzMTEwLwYDVQQD
EyhhYWI1MGViZWM2Mzg3MmZmOGJiYzVhZmExN2I5M2FlNGViZDJkY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVwftK/rUTV5RyeebOIYc5+Zj2z9
30bTHFxsB+VmL6Td4Fx61aaVFHj1UOXs5m+kAD+f1VZmmeZCscJHLpRIZeQS1Z2H
0vsCyXmGfuP3kGOZVKv6TzuW1dqPKiP5UNvQpE8yYu5wZ/r5PvyXgKQZw4TW9avv
Ad3jSdpTky9dIVuZgY4oioiqFeX4VRlBi0Sck4uZbUKOjw+OICjNWNf9L3ki0VwB
eb3JWsyQm83SsnMAkHqekolMQVXDF4wNSaQC1dzX+oAWM6PCepI3zf7/KZYZ6wjm
+R1/V8Xe0PkFxhHcUkqevsAGeZa584WAm5LnPIsNBoZaY4tomIX8wb9R6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq1Dr7GOHL/i7xa+he5OuTr0tykMB8GA1UdIwQY
MBaAFA+aLSN0qmrHFLX4pu3bgNxpZ5zGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYt
NmQ5NzE5OTJjMzQ5LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYtNmQ5NzE5OTJjMzQ5
LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzv1D0q3
b9TMogPiBUnCel2rotZEBaAr5o3MJ7yu9fJtcn/YMgkHnl1/eOYgywtSyquR5QUU
10ATYL8zMVXDB53c4GdQrJCdsbKJ2yIXvVHSzphLjuwIYG+mc+njx71iQu54CyNB
nGzNr9hoCuhDjfbdN+jZR70iVYcgCyJq3mib9c/Gh5zUIrYZNqhc1mtkt1swGWC3
Py6pR7qIaUbN3mZ/0r07rUDGLNu/3qaGBnTKSEY/y3IlGOVejAvfJizeKZzT3rSp
r7o+AGg+c3cc4ERI4twFlBH8Yn+Q0ZlARV6f0yaOi0gUwI5AQhWEJU7+NNkyaveP
jbxyZOq8dvEn3w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:45 2026 by rpki-client