Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: fd19H2TFBWeT9feHWNo+AT7bTuNelNrci7Zm9xkRXhM=
Subject key identifier: 17:00:1E:B6:E6:2F:1E:CC:4F:A5:15:EF:6F:1D:AA:7E:EE:2A:BD:A3
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 01A13DEEBC80167FB220702F9035581FA1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 10AF
Signing time: Thu 15 Oct 2026 05:00:18 +0000
Manifest this update: Thu 15 Oct 2026 05:00:18 +0000
Manifest next update: Fri 16 Oct 2026 05:00:18 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: 4IeZEf1/R9qxQ/1JJS1rW469OQjziBBSXHZI+ms8geM=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:bc:80:16:7f:b2:20:70:2f:90:35:58:1f:a1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Oct 15 05:00:18 2026 GMT
Not After : Oct 16 05:00:18 2026 GMT
Subject: CN=17001eb6e62f1ecc4fa515ef6f1daa7eee2abda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:2a:5d:ed:e1:ae:97:fa:04:db:6a:31:5b:
8e:6d:32:e3:8f:1e:98:f0:37:29:a6:ba:aa:ca:ce:
35:45:ec:2f:fa:94:31:f7:ab:5d:dc:31:35:6e:eb:
66:15:ee:97:b5:23:b2:8a:46:fa:04:95:46:3a:74:
69:76:20:f0:eb:9e:87:81:e0:53:9e:44:bf:64:23:
e0:c0:40:35:a4:85:6d:18:48:a1:e2:e8:dc:37:1e:
00:78:70:c9:86:55:a0:bd:fc:d2:b6:e3:b1:3b:8f:
e9:74:ee:ab:dd:21:62:25:0d:ae:45:6e:99:cc:a9:
01:3f:dd:fb:0b:94:6d:af:81:6c:e8:c9:2f:4e:f9:
3c:bb:4a:c8:3c:c2:57:a3:0e:c2:54:c8:7f:7d:95:
61:5c:4c:38:7d:e8:ea:ee:d8:74:61:48:c0:a8:bf:
40:91:5e:73:db:4f:57:d5:b6:5b:4f:ad:50:92:64:
f5:8b:4c:9b:42:f7:a8:81:dc:23:5c:72:f1:2e:23:
80:51:6c:cb:a8:40:cc:88:34:5e:cb:02:2d:11:bb:
87:ed:8f:9a:fb:23:de:93:2c:ae:61:ba:37:60:d1:
5e:f8:0d:49:0d:e5:be:7b:cc:d5:cb:25:f1:07:8c:
ad:2c:3f:8f:92:35:76:db:95:b6:ce:08:42:5a:7a:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:1E:B6:E6:2F:1E:CC:4F:A5:15:EF:6F:1D:AA:7E:EE:2A:BD:A3
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3b:22:a5:3b:58:b8:b2:4c:b8:92:91:25:f4:5b:0e:de:87:
a7:5b:d1:ba:eb:9b:dc:ca:a7:91:fa:89:3b:44:e3:da:46:ea:
7a:2e:1f:65:58:54:12:62:f7:ab:58:ad:05:ca:dc:6b:21:4c:
75:1f:c1:1e:26:c6:dd:f6:20:a6:ff:00:56:15:33:ee:d2:ac:
83:bc:81:45:b7:74:97:53:93:d0:df:be:4d:8a:6f:7b:f0:28:
9f:04:4d:ba:a3:ac:09:3c:74:06:dc:89:83:b2:d4:78:a8:ff:
e5:20:ed:48:a5:2b:39:7f:cb:1e:e3:e3:0e:d7:92:e5:4c:47:
55:6c:28:05:b0:6f:61:be:8c:d6:aa:6a:0d:51:39:a7:f3:c2:
fb:da:84:57:29:e2:4d:6b:66:96:01:64:d9:93:ac:9d:98:cc:
ea:74:bd:f9:8c:f7:a0:a8:5d:da:a7:61:20:eb:10:c8:d0:62:
82:62:59:c2:fb:99:e1:a9:01:05:73:28:a5:ee:88:a0:35:05:
a5:19:1a:27:eb:41:fa:b8:cb:e9:f0:1a:3c:e2:02:a1:62:09:
dc:76:a4:53:b7:70:44:93:26:56:bb:3c:e7:3a:7e:15:81:d1:
28:b3:75:e6:b8:e4:ac:7f:6c:7b:43:1f:22:c6:0c:b1:f0:f0:
97:85:47:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97ryAFn+yIHAvkDVYH6HvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw
YTI5YzAwHhcNMjYxMDE1MDUwMDE4WhcNMjYxMDE2MDUwMDE4WjAzMTEwLwYDVQQD
EygxNzAwMWViNmU2MmYxZWNjNGZhNTE1ZWY2ZjFkYWE3ZWVlMmFiZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnIqXe3hrpf6BNtqMVuObTLjjx6Y
8Dcpprqqys41Rewv+pQx96td3DE1butmFe6XtSOyikb6BJVGOnRpdiDw656HgeBT
nkS/ZCPgwEA1pIVtGEih4ujcNx4AeHDJhlWgvfzStuOxO4/pdO6r3SFiJQ2uRW6Z
zKkBP937C5Rtr4Fs6MkvTvk8u0rIPMJXow7CVMh/fZVhXEw4fejq7th0YUjAqL9A
kV5z209X1bZbT61QkmT1i0ybQveogdwjXHLxLiOAUWzLqEDMiDReywItEbuH7Y+a
+yPekyyuYbo3YNFe+A1JDeW+e8zVyyXxB4ytLD+PkjV225W2zghCWnom4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcAHrbmLx7MT6UV728dqn7uKr2jMB8GA1UdIwQY
MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt
NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk
LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazsipTtY
uLJMuJKRJfRbDt6Hp1vRuuub3MqnkfqJO0Tj2kbqei4fZVhUEmL3q1itBcrcayFM
dR/BHibG3fYgpv8AVhUz7tKsg7yBRbd0l1OT0N++TYpve/AonwRNuqOsCTx0BtyJ
g7LUeKj/5SDtSKUrOX/LHuPjDteS5UxHVWwoBbBvYb6M1qpqDVE5p/PC+9qEVyni
TWtmlgFk2ZOsnZjM6nS9+Yz3oKhd2qdhIOsQyNBigmJZwvuZ4akBBXMope6IoDUF
pRkaJ+tB+rjL6fAaPOICoWIJ3HakU7dwRJMmVrs85zp+FYHRKLN15rjkrH9se0Mf
IsYMsfDwl4VHPA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:29 2026 by rpki-client