Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier: 5w90z389o+yB3VbaZtJoejGb3JztQ57FZatToEIVuuA=
Subject key identifier: DA:8E:04:E4:56:C2:07:52:39:89:D1:CB:FA:92:25:DB:3E:59:B7:58
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial: 01A08AFAAB36AF4EC9686CBE59C1E9A0BE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 11:01:18 +0000
Manifest this update: Thu 10 Sep 2026 11:01:18 +0000
Manifest next update: Fri 11 Sep 2026 11:01:18 +0000
Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: 3B36bZLqdP6+bZ3wYdM55qfSfvQI7TUhex0yBhaIjjk=)
2: zWv6lPCafLJnQppl_Q2Krp9R-ts.roa (hash: PnRp68chs8F3bed1Cp1lvtVxJK9TEVJMwXnA7+PU/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ab:36:af:4e:c9:68:6c:be:59:c1:e9:a0:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
Validity
Not Before: Sep 10 11:01:18 2026 GMT
Not After : Sep 11 11:01:18 2026 GMT
Subject: CN=da8e04e456c207523989d1cbfa9225db3e59b758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:bc:fb:cf:a5:db:91:01:51:3a:36:db:10:
4b:1c:94:3a:45:3d:a9:01:04:08:ee:ab:70:96:cc:
d2:7b:46:8a:0e:eb:c9:9a:c0:e5:c6:87:9c:10:34:
23:ac:06:52:c4:a1:0b:2e:03:48:96:53:85:f2:2f:
a8:c2:79:a9:92:d7:42:b2:00:11:ef:85:14:a3:be:
54:f1:19:18:31:c9:cd:60:4d:37:e6:ad:0f:62:74:
da:52:99:b8:d2:17:a2:cc:86:9f:11:19:e0:68:26:
a0:b2:bf:f9:2b:55:c1:a9:46:95:05:4e:d1:2a:4a:
8b:1b:e9:8c:ef:87:01:28:6e:2a:92:a7:63:f6:d7:
5b:9d:76:22:a2:81:b8:6f:72:8d:cc:09:35:80:61:
0e:01:01:e9:97:58:00:55:55:c6:a5:91:25:6b:07:
0b:a4:39:2e:87:92:be:19:a5:48:c2:66:73:31:25:
e9:11:bb:31:8a:06:16:64:5f:bc:05:0c:79:ae:f3:
4f:c5:7b:9e:4d:b3:3a:bc:8a:5b:44:7b:61:f0:b0:
7d:55:28:a5:ed:38:74:f0:15:7f:19:e2:44:46:cb:
27:e2:bb:2e:ef:10:ff:43:d2:6d:08:6a:08:a3:60:
11:40:a8:f9:81:48:f6:6f:a8:dd:4f:fa:0a:9e:06:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:04:E4:56:C2:07:52:39:89:D1:CB:FA:92:25:DB:3E:59:B7:58
X509v3 Authority Key Identifier:
keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:8f:12:19:d8:2e:3e:2c:46:40:12:54:ee:96:80:c9:93:
db:2f:be:44:54:52:35:4d:c2:6b:b3:10:51:fa:3e:1e:3f:2c:
2b:aa:e6:24:b1:70:31:dc:9f:a6:1a:44:eb:a4:89:fe:00:af:
4d:45:1f:41:cb:88:57:50:1a:87:4f:ed:26:8d:46:08:b8:d6:
a2:0d:26:64:7f:8e:3e:ef:33:45:dd:f4:7c:3b:06:a8:f5:a4:
69:1d:a1:f6:6f:b1:dc:78:4d:09:ed:83:5d:b7:6a:3a:81:05:
2e:19:db:59:2e:4d:82:f9:0e:6c:04:42:66:ef:0d:c3:d4:a9:
57:d9:b7:1b:d0:49:32:c4:99:a6:1c:58:20:1e:dc:c7:25:be:
d7:b4:96:3d:56:50:46:fb:f7:4b:63:09:64:05:d3:e8:0c:21:
49:67:34:ef:3a:fd:5f:4a:fa:2c:c1:d7:40:a4:f0:c1:82:ca:
ab:d5:7e:78:4a:ec:9d:a7:d2:72:91:c2:57:7d:9c:58:fe:91:
e2:85:58:18:cd:9c:91:6a:fc:eb:d3:40:7d:49:89:48:79:ec:
4e:76:ed:6a:54:8c:d0:53:87:3f:5c:fb:f2:29:75:3f:cc:fe:
40:08:6e:5f:07:32:6b:1d:18:a4:0a:12:39:84:9a:fa:d9:b5:
cb:f6:c1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+qs2r07JaGy+WcHpoL42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjU3MDkzZjMyNjU0N2JmMjVhOTk4NWM4MWNmMTQwMzE0
MGEzYTgwHhcNMjYwOTEwMTEwMTE4WhcNMjYwOTExMTEwMTE4WjAzMTEwLwYDVQQD
EyhkYThlMDRlNDU2YzIwNzUyMzk4OWQxY2JmYTkyMjVkYjNlNTliNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS+8+8+l25EBUTo22xBLHJQ6RT2p
AQQI7qtwlszSe0aKDuvJmsDlxoecEDQjrAZSxKELLgNIllOF8i+ownmpktdCsgAR
74UUo75U8RkYMcnNYE035q0PYnTaUpm40heizIafERngaCagsr/5K1XBqUaVBU7R
KkqLG+mM74cBKG4qkqdj9tdbnXYiooG4b3KNzAk1gGEOAQHpl1gAVVXGpZElawcL
pDkuh5K+GaVIwmZzMSXpEbsxigYWZF+8BQx5rvNPxXueTbM6vIpbRHth8LB9VSil
7Th08BV/GeJERssn4rsu7xD/Q9JtCGoIo2ARQKj5gUj2b6jdT/oKngb3EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqOBORWwgdSOYnRy/qSJds+WbdYMB8GA1UdIwQY
MBaAFA9lcJPzJlR78lqZhcgc8UAxQKOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjIt
MGFmZjY5ZmFmNjhhLzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjItMGFmZjY5ZmFmNjhh
LzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuyPEhnY
Lj4sRkASVO6WgMmT2y++RFRSNU3Ca7MQUfo+Hj8sK6rmJLFwMdyfphpE66SJ/gCv
TUUfQcuIV1Aah0/tJo1GCLjWog0mZH+OPu8zRd30fDsGqPWkaR2h9m+x3HhNCe2D
XbdqOoEFLhnbWS5NgvkObARCZu8Nw9SpV9m3G9BJMsSZphxYIB7cxyW+17SWPVZQ
Rvv3S2MJZAXT6AwhSWc07zr9X0r6LMHXQKTwwYLKq9V+eErsnafScpHCV32cWP6R
4oVYGM2ckWr869NAfUmJSHnsTnbtalSM0FOHP1z78il1P8z+QAhuXwcyax0YpAoS
OYSa+tm1y/bBUw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:32 2026 by rpki-client