Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File: 15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier: 8ZDKrk8RFClHlv13DiyY+dF7EEOZNOOkcCYXk9L8u3Q=
Subject key identifier: 07:EB:AD:91:A4:DF:0D:3B:8F:F3:A6:32:20:60:92:E2:0B:85:33:10
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer: /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial: 01A0005CF0D663D83E180225E147666B2E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number: 0DB6
Signing time: Fri 14 Aug 2026 13:01:25 +0000
Manifest this update: Fri 14 Aug 2026 13:01:25 +0000
Manifest next update: Sat 15 Aug 2026 13:01:25 +0000
Files and hashes: 1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: JQr6zwz6K0Bw8n2hUhhPuOZkpbyr5xa0sxkz7sq+P9U=)
2: 2k-hABvku-dYjJOVfo3xeBP8cRY.roa (hash: XafS8+mVQnUWcM/3ycAQWdenTwfS74mCIdH+X8KYUYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:f0:d6:63:d8:3e:18:02:25:e1:47:66:6b:2e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
Validity
Not Before: Aug 14 13:01:25 2026 GMT
Not After : Aug 15 13:01:25 2026 GMT
Subject: CN=07ebad91a4df0d3b8ff3a632206092e20b853310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:11:c6:ba:3d:1d:1b:38:73:9b:89:ee:85:
ca:b0:55:f6:58:fc:26:7c:f0:8d:69:b4:d0:56:95:
bc:c8:c4:a5:29:d6:4b:0a:2c:15:8e:73:8c:0b:76:
82:2e:fb:98:2d:f6:8f:4f:0a:50:eb:5a:21:82:ee:
21:ca:c3:fa:fa:2e:9d:46:54:64:1f:6a:d8:28:19:
19:b3:bc:df:a9:c9:53:8b:c3:54:2f:90:ac:f6:d1:
6e:3c:5a:e5:cd:e0:36:8b:b7:e1:f2:72:c7:ce:da:
6e:76:51:0d:27:ce:c9:76:a8:f0:26:57:cd:a6:51:
76:69:d3:aa:b2:54:37:7f:b5:5a:11:49:8d:c8:46:
5e:16:b4:4d:82:6a:98:38:83:d1:f3:7a:df:38:52:
79:8b:23:58:bb:99:b2:40:c8:6e:8d:5c:d3:63:d2:
ab:16:e8:58:b4:db:43:16:3f:05:4c:f7:10:ad:c4:
a0:e2:48:a6:34:0c:fb:ef:27:aa:ff:32:79:ac:e2:
bb:05:d1:c0:b9:9e:e3:55:ec:c7:b0:7b:0a:8f:4e:
62:4e:0e:9c:a3:e7:17:d1:57:b9:cf:2c:60:6a:03:
47:93:97:d2:6a:a8:b7:54:b2:53:c8:be:8a:c7:5a:
00:14:54:9c:53:72:c8:02:ad:a1:b3:e0:4c:81:53:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:AD:91:A4:DF:0D:3B:8F:F3:A6:32:20:60:92:E2:0B:85:33:10
X509v3 Authority Key Identifier:
keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:40:92:28:67:19:6c:90:2c:c7:83:de:72:1c:ba:3f:35:95:
bb:a0:a6:9e:96:4a:d4:1c:cc:63:09:ad:06:47:52:3d:32:79:
81:1a:30:1b:5d:bb:6e:6f:c3:d9:c3:1a:af:19:4a:f2:3e:42:
6d:5a:aa:26:4a:0b:9a:2d:84:44:0d:f0:b3:cf:dc:f9:6e:3f:
8b:02:17:04:3a:2e:61:b4:2b:62:01:c3:13:ff:1a:a8:df:30:
08:1d:5b:f4:43:28:aa:19:29:e2:29:de:d5:74:1a:64:e7:80:
1e:07:7d:d7:79:55:71:c5:82:09:e7:a5:34:3e:1b:78:05:b2:
d4:53:87:60:91:9e:17:9f:d4:ea:a3:c2:06:14:46:0d:02:2a:
18:d0:2a:6f:dd:fb:c1:01:00:6f:20:db:74:f9:db:7d:30:4d:
05:d2:24:87:5a:45:ef:69:ac:41:f5:17:35:c5:59:8d:d7:c1:
29:97:b3:f3:b6:c0:1c:df:e8:e3:4c:80:6c:f4:63:c4:c1:e0:
3f:61:23:5b:05:fb:85:66:63:97:07:1c:de:c7:69:97:14:fc:
59:1d:92:1b:94:53:95:fa:1a:06:df:5b:2a:e9:91:ce:8a:3d:
16:b8:41:88:00:8e:9d:a8:c9:96:47:f5:0b:07:15:9c:00:77:
85:e6:c1:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXPDWY9g+GAIl4Udmay6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTc0ZjQzNzQ2ODc2NTU4MzU3ZjFmYjkxYzM4NTJhNTgz
YTE0NTMwHhcNMjYwODE0MTMwMTI1WhcNMjYwODE1MTMwMTI1WjAzMTEwLwYDVQQD
EygwN2ViYWQ5MWE0ZGYwZDNiOGZmM2E2MzIyMDYwOTJlMjBiODUzMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+MRxro9HRs4c5uJ7oXKsFX2WPwm
fPCNabTQVpW8yMSlKdZLCiwVjnOMC3aCLvuYLfaPTwpQ61ohgu4hysP6+i6dRlRk
H2rYKBkZs7zfqclTi8NUL5Cs9tFuPFrlzeA2i7fh8nLHztpudlENJ87JdqjwJlfN
plF2adOqslQ3f7VaEUmNyEZeFrRNgmqYOIPR83rfOFJ5iyNYu5myQMhujVzTY9Kr
FuhYtNtDFj8FTPcQrcSg4kimNAz77yeq/zJ5rOK7BdHAuZ7jVezHsHsKj05iTg6c
o+cX0Ve5zyxgagNHk5fSaqi3VLJTyL6Kx1oAFFScU3LIAq2hs+BMgVNTMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfrrZGk3w07j/OmMiBgkuILhTMQMB8GA1UdIwQY
MBaAFNeXT0N0aHZVg1fx+5HDhSpYOhRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVkUFEzUm9kbFdEVl9IN2tjT0ZLbGc2RkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82MDY5YzItOTYyNS00ZmZmLWI3Mzct
Y2MyNjViMDQ2MWMyLzEvMTVkUFEzUm9kbFdEVl9IN2tjT0ZLbGc2RkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82MDY5YzItOTYyNS00ZmZmLWI3MzctY2MyNjViMDQ2MWMy
LzEvMTVkUFEzUm9kbFdEVl9IN2tjT0ZLbGc2RkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUCSKGcZ
bJAsx4Pechy6PzWVu6CmnpZK1BzMYwmtBkdSPTJ5gRowG127bm/D2cMarxlK8j5C
bVqqJkoLmi2ERA3ws8/c+W4/iwIXBDouYbQrYgHDE/8aqN8wCB1b9EMoqhkp4ine
1XQaZOeAHgd913lVccWCCeelND4beAWy1FOHYJGeF5/U6qPCBhRGDQIqGNAqb937
wQEAbyDbdPnbfTBNBdIkh1pF72msQfUXNcVZjdfBKZez87bAHN/o40yAbPRjxMHg
P2EjWwX7hWZjlwcc3sdplxT8WR2SG5RTlfoaBt9bKumRzoo9FrhBiACOnajJlkf1
CwcVnAB3hebB5w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:43 2026 by rpki-client