Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: 9L+mg5sTftY0bn2AymFiTBdRkeHypNdVN3Ojwcv+/EE=
Subject key identifier: AD:33:6B:75:92:54:95:A5:8A:ED:2C:7B:24:E6:75:CE:A6:C1:04:10
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 01A13DB8C9039A5DF14700CDA2411BE3AEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 04:01:22 +0000
Manifest this update: Thu 15 Oct 2026 04:01:22 +0000
Manifest next update: Fri 16 Oct 2026 04:01:22 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: RCs3KTchFSDsiVlY4v07uh2cDRhgGRatHL6oLLUnZzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:c9:03:9a:5d:f1:47:00:cd:a2:41:1b:e3:ae:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Oct 15 04:01:22 2026 GMT
Not After : Oct 16 04:01:22 2026 GMT
Subject: CN=ad336b75925495a58aed2c7b24e675cea6c10410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:d7:4a:ab:56:e1:bb:3a:c1:39:64:25:24:
72:84:f8:0a:99:c5:ed:aa:1a:42:ce:48:13:cf:31:
97:61:ed:32:ec:ee:5f:c2:bb:ba:08:03:1a:a8:2d:
fe:c5:97:a3:d9:c9:2e:11:00:06:b4:f6:da:2b:46:
c5:92:ad:4e:d8:4d:c2:0c:e3:f3:6f:b5:ae:e4:62:
24:48:ae:24:4b:be:2c:6d:15:42:c5:98:36:9d:dd:
50:21:a7:f2:d8:1d:66:45:1f:68:b9:13:aa:33:dd:
3e:fe:d0:49:a9:5f:1e:c4:ce:45:49:f4:df:04:0c:
91:59:64:15:67:09:8f:f4:cc:28:76:03:0c:af:6b:
89:16:eb:12:a8:95:89:88:0b:cd:df:b1:91:b0:c1:
91:44:79:70:43:b5:56:a5:c7:36:62:74:01:49:8d:
0d:49:56:91:97:39:79:01:04:89:d1:f3:c8:58:f6:
e5:23:08:4f:7a:2d:6d:3d:91:67:48:07:8e:e4:c7:
c6:2e:08:9e:4b:11:4a:09:76:55:95:49:8f:91:87:
4e:df:e5:f5:ce:24:c2:65:76:59:52:40:cb:35:1f:
e1:75:f7:1a:f0:cb:7f:6d:b6:cf:70:20:78:60:e9:
3b:e9:e0:6c:7b:ff:da:8f:12:50:6a:9b:f8:c4:ae:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:6B:75:92:54:95:A5:8A:ED:2C:7B:24:E6:75:CE:A6:C1:04:10
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:66:20:cf:86:62:cf:61:c4:e9:09:7e:9c:00:97:47:fd:eb:
4d:72:2d:6a:b6:bc:b6:d6:ad:a1:66:03:86:19:23:5a:2f:a5:
39:b0:25:75:d7:21:36:28:58:a7:a6:c1:26:2b:76:e2:e6:e9:
d9:16:39:96:f4:e2:de:2a:95:2a:53:15:ad:2e:0b:d3:bf:4a:
de:44:62:df:40:ac:d6:84:8d:55:71:58:83:7d:f9:86:1c:e6:
23:5f:f5:a7:aa:ee:ff:97:23:a5:b2:80:7f:88:2a:a5:79:79:
24:79:60:01:ab:96:26:d4:d6:0b:5b:f1:22:0b:38:0a:fe:97:
b9:7b:cc:d9:03:f5:8d:04:b9:62:b6:62:16:12:80:91:8e:02:
a6:0b:9a:dc:04:a7:8b:8d:dc:7b:cf:98:3c:b5:e7:c3:ea:1b:
f0:48:60:03:c0:87:6b:ea:b1:4d:8f:7e:63:fd:23:a1:32:6b:
3f:a7:69:40:bc:1a:e8:be:1f:19:e4:85:24:28:23:b3:60:62:
69:56:d2:3a:f2:86:ad:06:5a:dd:43:c2:41:cc:a6:2b:df:93:
ea:39:c1:53:3a:4f:58:f6:78:61:f1:53:dd:bb:54:f4:db:5b:
bf:c1:9f:84:7d:32:67:63:36:da:cb:a5:8e:89:09:4f:38:3b:
e6:8a:cd:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uMkDml3xRwDNokEb467aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmEzNGJiMWNmZThiNmRhMGYxYjJiMDUyNDA2YzNlOTE2
MWJmMjMwHhcNMjYxMDE1MDQwMTIyWhcNMjYxMDE2MDQwMTIyWjAzMTEwLwYDVQQD
EyhhZDMzNmI3NTkyNTQ5NWE1OGFlZDJjN2IyNGU2NzVjZWE2YzEwNDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrvXSqtW4bs6wTlkJSRyhPgKmcXt
qhpCzkgTzzGXYe0y7O5fwru6CAMaqC3+xZej2ckuEQAGtPbaK0bFkq1O2E3CDOPz
b7Wu5GIkSK4kS74sbRVCxZg2nd1QIafy2B1mRR9ouROqM90+/tBJqV8exM5FSfTf
BAyRWWQVZwmP9MwodgMMr2uJFusSqJWJiAvN37GRsMGRRHlwQ7VWpcc2YnQBSY0N
SVaRlzl5AQSJ0fPIWPblIwhPei1tPZFnSAeO5MfGLgieSxFKCXZVlUmPkYdO3+X1
ziTCZXZZUkDLNR/hdfca8Mt/bbbPcCB4YOk76eBse//ajxJQapv4xK4eXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0za3WSVJWliu0seyTmdc6mwQQQMB8GA1UdIwQY
MBaAFA+6NLsc/ottoPGysFJAbD6RYb8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYt
ZTE0NGFiMTljNWQxLzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYtZTE0NGFiMTljNWQx
LzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamYgz4Zi
z2HE6Ql+nACXR/3rTXItara8ttatoWYDhhkjWi+lObAlddchNihYp6bBJit24ubp
2RY5lvTi3iqVKlMVrS4L079K3kRi30Cs1oSNVXFYg335hhzmI1/1p6ru/5cjpbKA
f4gqpXl5JHlgAauWJtTWC1vxIgs4Cv6XuXvM2QP1jQS5YrZiFhKAkY4Cpgua3ASn
i43ce8+YPLXnw+ob8EhgA8CHa+qxTY9+Y/0joTJrP6dpQLwa6L4fGeSFJCgjs2Bi
aVbSOvKGrQZa3UPCQcymK9+T6jnBUzpPWPZ4YfFT3btU9Ntbv8GfhH0yZ2M22sul
jokJTzg75orNoA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:08 2026 by rpki-client