Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: /y8KaO9Rl42iTbLD3rrvnWbgA/a2Ak5OLJlU0j0oENE=
Subject key identifier: B6:23:E4:F9:20:B2:96:67:29:39:66:BE:20:70:DF:98:DB:F8:C2:50
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 01A13F39A105E43FB38054B35F6581594DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 11:01:43 +0000
Manifest this update: Thu 15 Oct 2026 11:01:43 +0000
Manifest next update: Fri 16 Oct 2026 11:01:43 +0000
Files and hashes: 1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: ap4ebC3XME0pAiMA6QzRYEqpc/Hxnjvfe1MWwWInkCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:a1:05:e4:3f:b3:80:54:b3:5f:65:81:59:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Oct 15 11:01:43 2026 GMT
Not After : Oct 16 11:01:43 2026 GMT
Subject: CN=b623e4f920b29667293966be2070df98dbf8c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:d1:24:91:f3:53:67:9c:88:cb:44:dd:2b:
89:f8:d9:29:9a:3d:75:3a:bf:65:ba:f8:58:69:7e:
36:c3:57:1c:c2:ba:59:b8:c0:bd:8c:17:44:a7:84:
dd:be:d5:2c:1c:01:8c:22:d7:cb:fb:a5:52:b6:b4:
c1:6f:c2:f0:eb:c7:ef:ca:62:b5:f8:33:a5:e1:6b:
02:08:95:f4:e6:7e:b4:5b:75:2f:db:01:cb:d4:35:
6b:34:80:7b:bc:e8:8e:9d:f4:6a:c0:3d:4a:e4:5c:
3c:00:55:76:ff:63:c9:aa:47:ec:53:23:9d:af:eb:
0c:4f:a2:f8:ca:e8:16:7c:7f:03:96:08:0c:1d:bc:
b9:0d:95:f4:f1:9d:be:b2:df:5b:ae:88:56:da:9d:
99:9f:87:ea:4a:4a:0a:be:25:78:4a:06:15:11:a0:
64:b0:89:27:4b:10:b5:7e:b4:ae:65:33:e7:84:4a:
bb:94:f7:b1:3f:37:11:db:e0:be:9c:45:56:8e:89:
c5:e4:51:20:b0:7b:aa:c4:12:5c:6d:91:08:cf:6e:
0c:43:48:17:eb:36:5a:05:f3:b1:00:fb:ca:ca:ec:
58:3a:46:ad:14:5c:2a:14:57:fa:c5:c1:8b:15:30:
a4:c3:12:50:a6:b9:61:ed:f7:49:32:eb:ab:43:8d:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:E4:F9:20:B2:96:67:29:39:66:BE:20:70:DF:98:DB:F8:C2:50
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:5c:7d:cd:b0:f8:09:36:cd:e2:bc:2d:fd:5b:2e:4c:63:
86:3f:b0:0a:56:20:10:46:92:4f:e1:90:3b:dd:6c:23:0a:e3:
ba:bc:52:49:42:ef:20:f2:fa:5c:ad:01:0c:a7:5f:4c:bc:1c:
56:e4:ea:d9:96:34:25:de:d8:d9:fb:62:89:c2:ae:6a:38:0f:
78:69:bb:1a:9f:02:29:73:c0:91:5b:85:64:86:de:87:ce:09:
01:40:3d:24:f2:44:6a:ac:e5:ea:3e:8f:03:f5:5a:07:69:53:
af:ed:10:a8:3b:42:77:86:e3:ea:56:e7:be:4d:58:3c:86:6f:
7d:a6:72:07:31:47:83:2b:c3:2a:93:02:b1:b5:bb:ea:3f:3d:
38:4f:53:d1:15:58:e4:4a:77:c1:2f:ea:12:95:56:53:57:66:
b1:f7:32:bf:b4:f9:61:2e:95:28:6d:45:2e:0c:86:4d:4d:4f:
10:52:2f:c0:8a:d2:02:1d:04:66:da:53:d2:c3:3f:eb:24:fa:
f2:c2:ce:30:ff:02:24:12:9d:f9:fe:49:f5:62:f7:2f:63:b1:
d4:15:a4:54:cb:0e:a7:e4:0d:97:a4:10:6b:0c:cf:4c:dc:8c:
17:8a:5d:c1:6b:09:59:d5:f3:bb:a8:c8:70:31:e4:0e:81:73:
b3:87:8b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OaEF5D+zgFSzX2WBWU37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0
ZjhhZTgwHhcNMjYxMDE1MTEwMTQzWhcNMjYxMDE2MTEwMTQzWjAzMTEwLwYDVQQD
EyhiNjIzZTRmOTIwYjI5NjY3MjkzOTY2YmUyMDcwZGY5OGRiZjhjMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgfRJJHzU2eciMtE3SuJ+Nkpmj11
Or9luvhYaX42w1ccwrpZuMC9jBdEp4TdvtUsHAGMItfL+6VStrTBb8Lw68fvymK1
+DOl4WsCCJX05n60W3Uv2wHL1DVrNIB7vOiOnfRqwD1K5Fw8AFV2/2PJqkfsUyOd
r+sMT6L4yugWfH8DlggMHby5DZX08Z2+st9brohW2p2Zn4fqSkoKviV4SgYVEaBk
sIknSxC1frSuZTPnhEq7lPexPzcR2+C+nEVWjonF5FEgsHuqxBJcbZEIz24MQ0gX
6zZaBfOxAPvKyuxYOkatFFwqFFf6xcGLFTCkwxJQprlh7fdJMuurQ40x/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYj5PkgspZnKTlmviBw35jb+MJQMB8GA1UdIwQY
MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt
ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk
LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJZcfc2w
+Ak2zeK8Lf1bLkxjhj+wClYgEEaST+GQO91sIwrjurxSSULvIPL6XK0BDKdfTLwc
VuTq2ZY0Jd7Y2ftiicKuajgPeGm7Gp8CKXPAkVuFZIbeh84JAUA9JPJEaqzl6j6P
A/VaB2lTr+0QqDtCd4bj6lbnvk1YPIZvfaZyBzFHgyvDKpMCsbW76j89OE9T0RVY
5Ep3wS/qEpVWU1dmsfcyv7T5YS6VKG1FLgyGTU1PEFIvwIrSAh0EZtpT0sM/6yT6
8sLOMP8CJBKd+f5J9WL3L2Ox1BWkVMsOp+QNl6QQawzPTNyMF4pdwWsJWdXzu6jI
cDHkDoFzs4eLuw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:30 2026 by rpki-client