Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: xyGuOIpkkXzOldMMu0DWzNUtLv5Q8ZlC6AOg0EZSBic=
Subject key identifier: C1:81:F1:DC:8C:E9:DA:94:16:97:EC:3B:D7:03:FF:52:85:F2:46:79
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01A13DB8D73140DA4047CA6AF50E509E659C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 04:01:26 +0000
Manifest this update: Thu 15 Oct 2026 04:01:26 +0000
Manifest next update: Fri 16 Oct 2026 04:01:26 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: DIPjRLGXNnC344cWMRFybrNbXW9yebvDaEFvTEjvbSc=)
2: _L8W4pQYN95d_ru9437-S9YHe24.roa (hash: 7Vq9DgyAlsbGrBriOiUBAAmu/kBfnz1j1W0Ug2fBKPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d7:31:40:da:40:47:ca:6a:f5:0e:50:9e:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Oct 15 04:01:26 2026 GMT
Not After : Oct 16 04:01:26 2026 GMT
Subject: CN=c181f1dc8ce9da941697ec3bd703ff5285f24679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:38:a8:73:e5:de:b2:15:76:11:58:01:86:
5b:15:e5:57:97:d8:5f:29:26:9b:c3:58:5b:44:9a:
52:0e:37:9a:a4:fa:41:e0:fe:6f:f7:3b:7d:2c:61:
3a:5e:4b:ab:33:46:4b:4b:85:25:0a:96:49:b9:f1:
b5:fb:56:be:97:d8:4f:c9:bf:0e:4b:f0:d3:4a:50:
7c:84:d3:71:6d:ac:9a:a1:2b:1c:f2:c2:37:cc:1c:
a8:99:4c:02:53:77:2f:9b:23:fb:14:66:a7:f8:88:
58:60:46:17:30:0e:af:db:e6:5e:b0:0c:32:26:fd:
d9:65:25:20:6a:17:78:82:3a:9c:2f:21:1e:d6:eb:
f5:e8:cb:17:8a:be:d9:f6:4a:6a:92:44:f9:74:f6:
60:3b:87:70:f5:c2:ec:6a:c4:45:cf:9a:e3:d0:00:
90:58:23:3d:6f:3a:3d:5b:bb:af:66:48:f5:db:94:
78:01:ee:ba:82:78:97:ba:75:e6:00:92:59:82:1d:
b3:f6:3c:b3:5d:4f:39:8d:5f:44:e5:80:29:51:c7:
31:c3:3a:66:eb:78:5f:2c:2f:7a:d3:2d:3a:3e:74:
ad:7d:14:59:b6:84:8b:a0:09:32:be:fc:49:f5:9b:
c2:2d:bf:fd:46:38:d1:21:8e:01:fe:b3:1e:65:df:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:F1:DC:8C:E9:DA:94:16:97:EC:3B:D7:03:FF:52:85:F2:46:79
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3c:ec:9d:b8:8b:e9:0c:cf:32:9f:aa:5c:da:39:38:b4:05:
24:32:61:db:e9:c5:b9:8e:d6:79:07:1e:59:1d:8c:9e:e3:78:
fc:c0:7f:e2:6d:a8:06:8e:86:c9:ef:73:41:e6:21:3b:4b:9a:
63:77:fd:d3:4f:3a:1b:e0:92:a7:eb:2d:9d:06:7c:8b:c5:1f:
46:85:71:b6:34:86:58:a6:51:2e:1b:06:96:47:99:24:5a:21:
f0:ca:dd:1b:5f:15:1b:81:bb:6e:52:b4:6c:31:76:0e:fc:d6:
f3:33:72:3a:11:02:47:ce:33:fe:1f:9b:65:18:3e:22:de:2b:
93:19:da:10:68:81:e9:13:b6:97:04:6f:9d:e2:96:96:76:29:
aa:12:2e:0f:b5:01:6f:a9:b7:ab:58:e9:67:0b:35:00:d8:63:
15:b1:7f:d7:ce:cb:32:ec:b7:41:c8:b5:8e:1b:5e:8a:70:55:
e2:68:4c:e1:61:12:b8:ee:7a:f3:9f:ad:6b:68:91:f8:c5:79:
d4:8c:1f:36:8f:fd:0e:6f:d2:3c:60:4e:9b:db:1d:e0:e5:15:
93:00:39:86:06:c3:e0:25:df:80:85:05:9d:08:4c:e4:db:48:
a6:23:6d:61:b2:52:86:26:d5:cc:d6:79:a5:b4:38:e5:f4:d0:
1e:ce:52:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uNcxQNpAR8pq9Q5QnmWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjYxMDE1MDQwMTI2WhcNMjYxMDE2MDQwMTI2WjAzMTEwLwYDVQQD
EyhjMTgxZjFkYzhjZTlkYTk0MTY5N2VjM2JkNzAzZmY1Mjg1ZjI0Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5o4qHPl3rIVdhFYAYZbFeVXl9hf
KSabw1hbRJpSDjeapPpB4P5v9zt9LGE6XkurM0ZLS4UlCpZJufG1+1a+l9hPyb8O
S/DTSlB8hNNxbayaoSsc8sI3zByomUwCU3cvmyP7FGan+IhYYEYXMA6v2+ZesAwy
Jv3ZZSUgahd4gjqcLyEe1uv16MsXir7Z9kpqkkT5dPZgO4dw9cLsasRFz5rj0ACQ
WCM9bzo9W7uvZkj125R4Ae66gniXunXmAJJZgh2z9jyzXU85jV9E5YApUccxwzpm
63hfLC960y06PnStfRRZtoSLoAkyvvxJ9ZvCLb/9RjjRIY4B/rMeZd9jZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGB8dyM6dqUFpfsO9cD/1KF8kZ5MB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzzsnbiL
6QzPMp+qXNo5OLQFJDJh2+nFuY7WeQceWR2MnuN4/MB/4m2oBo6Gye9zQeYhO0ua
Y3f90086G+CSp+stnQZ8i8UfRoVxtjSGWKZRLhsGlkeZJFoh8MrdG18VG4G7blK0
bDF2DvzW8zNyOhECR84z/h+bZRg+It4rkxnaEGiB6RO2lwRvneKWlnYpqhIuD7UB
b6m3q1jpZws1ANhjFbF/187LMuy3Qci1jhteinBV4mhM4WESuO5685+ta2iR+MV5
1IwfNo/9Dm/SPGBOm9sd4OUVkwA5hgbD4CXfgIUFnQhM5NtIpiNtYbJShibVzNZ5
pbQ45fTQHs5SYw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:22 2026 by rpki-client