Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
File: dF5pC2XdK2La_T6uUwne-ky1x8Q.mft (raw, json)
Hash identifier: EcdoWA8HNtglRy5qVmsOmbsi0w/qg+pV/TaOtbDVmpE=
Subject key identifier: DE:CF:B6:B0:C3:D8:F5:87:F2:1F:94:C0:38:77:45:DF:05:55:0D:17
Authority key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Certificate issuer: /CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Certificate serial: 01A14BAB368B91B0B885BC69B765E2B336A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:14 +0000
Manifest this update: Sat 17 Oct 2026 21:01:14 +0000
Manifest next update: Sun 18 Oct 2026 21:01:14 +0000
Files and hashes: 1: Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa (hash: tXWgzC52m15bMpTie/nAe4jMMYYoA58oLlL3abiDdMc=)
2: V_c0MczS3zUpZJNTtQxngj6lCXY.roa (hash: I3RW9QlgWDHOKk+vzXe99y6FDPghIiCTxEZoxiZd0LQ=)
3: dF5pC2XdK2La_T6uUwne-ky1x8Q.crl (hash: x18QW9jth3f/jqTBmdhuELMke+cPM0vXapbYuqUlMLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:36:8b:91:b0:b8:85:bc:69:b7:65:e2:b3:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Validity
Not Before: Oct 17 21:01:14 2026 GMT
Not After : Oct 18 21:01:14 2026 GMT
Subject: CN=decfb6b0c3d8f587f21f94c0387745df05550d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:e3:5f:d8:5f:3c:39:11:53:77:35:cd:47:
7c:ed:59:58:9b:bc:2e:ef:4c:b3:72:af:6b:89:84:
01:e9:1f:eb:c1:af:ba:03:17:91:0b:45:cf:0b:d0:
22:76:8d:a8:ae:49:b3:4a:b7:f5:57:0a:a4:d6:52:
4b:7f:45:31:16:d5:1f:d6:db:49:f7:ed:d9:e2:97:
6a:b6:fc:49:49:66:97:2b:7b:62:71:58:b7:d0:04:
e6:33:82:77:c8:6a:c0:f6:59:3c:18:da:61:b0:38:
e0:f1:31:ef:f9:d6:4d:7a:11:5f:10:9c:46:95:3b:
43:57:20:81:65:58:25:20:12:76:86:0c:10:69:f1:
fb:82:98:cf:83:e7:34:96:68:8d:c5:b8:b0:36:04:
c1:77:b0:b5:1b:a1:23:40:ab:5d:a6:6c:2a:23:09:
45:a5:0a:3a:a0:88:1d:d3:65:af:e3:44:d1:81:cf:
c5:1f:ee:83:30:8b:6e:2c:d3:65:a0:07:e7:ac:b0:
f4:10:cb:b3:3f:f4:e1:75:d6:91:e8:a8:d6:3b:51:
11:92:62:d2:89:af:2c:33:a6:40:1c:5a:5e:29:8f:
7a:4f:0b:84:cb:b0:a6:3c:b8:b0:b5:a1:7a:ef:0a:
bc:c2:08:b0:c9:af:b4:c9:7d:a3:a9:b8:ca:dc:58:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:B6:B0:C3:D8:F5:87:F2:1F:94:C0:38:77:45:DF:05:55:0D:17
X509v3 Authority Key Identifier:
keyid:74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:88:cb:77:40:ad:b5:17:d7:29:e7:70:ce:b5:89:f1:fd:
d2:eb:74:cc:35:cf:31:54:a3:52:16:a5:00:c2:2e:64:b2:7c:
94:21:ab:a0:df:86:fe:44:d7:61:d2:34:dd:17:36:7b:9c:e1:
01:aa:5a:1a:51:ba:a9:81:f6:eb:17:01:a3:c3:73:a1:ab:6b:
16:77:5d:2a:87:cd:80:95:33:6b:9b:4f:e2:78:ee:05:95:8a:
c0:8d:ab:a6:58:67:f6:25:44:fd:d0:6c:e1:de:23:a7:d6:05:
2b:14:ac:f5:2e:60:6f:91:5a:3c:1f:4b:d1:e4:a5:1f:c8:a3:
3f:0d:29:25:f5:3e:d4:de:52:c0:f8:6d:07:70:3e:84:bf:da:
22:4d:17:bf:35:45:e7:61:1d:81:5e:28:27:58:da:52:e2:6e:
9a:c7:b8:3d:0b:92:79:26:b3:61:c6:dd:07:4a:98:dc:d0:ee:
a2:67:30:55:bd:b4:6c:6b:5e:26:0c:49:aa:7a:e9:e1:2f:77:
13:ad:69:7b:3e:dd:68:cc:43:99:67:e0:2d:4a:60:9b:06:41:
0a:2f:dc:41:9e:1c:6b:63:4d:f4:fa:b5:35:e0:11:9c:22:f7:
1f:fa:cc:ec:b5:c3:8e:4c:15:8a:55:9c:ee:f7:4d:e8:77:97:
3d:66:09:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLqzaLkbC4hbxpt2XiszamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWU2OTBiNjVkZDJiNjJkYWZkM2VhZTUzMDlkZWZhNGNi
NWM3YzQwHhcNMjYxMDE3MjEwMTE0WhcNMjYxMDE4MjEwMTE0WjAzMTEwLwYDVQQD
EyhkZWNmYjZiMGMzZDhmNTg3ZjIxZjk0YzAzODc3NDVkZjA1NTUwZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzHjX9hfPDkRU3c1zUd87VlYm7wu
70yzcq9riYQB6R/rwa+6AxeRC0XPC9Aido2orkmzSrf1Vwqk1lJLf0UxFtUf1ttJ
9+3Z4pdqtvxJSWaXK3ticVi30ATmM4J3yGrA9lk8GNphsDjg8THv+dZNehFfEJxG
lTtDVyCBZVglIBJ2hgwQafH7gpjPg+c0lmiNxbiwNgTBd7C1G6EjQKtdpmwqIwlF
pQo6oIgd02Wv40TRgc/FH+6DMItuLNNloAfnrLD0EMuzP/ThddaR6KjWO1ERkmLS
ia8sM6ZAHFpeKY96TwuEy7CmPLiwtaF67wq8wgiwya+0yX2jqbjK3FhcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7PtrDD2PWH8h+UwDh3Rd8FVQ0XMB8GA1UdIwQY
MBaAFHReaQtl3Sti2v0+rlMJ3vpMtcfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEY1cEMyWGRLMkxhX1Q2dVV3bmUta3kxeDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMt
MTY5MmZjOGJiYTE1LzEvZEY1cEMyWGRLMkxhX1Q2dVV3bmUta3kxeDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMtMTY5MmZjOGJiYTE1
LzEvZEY1cEMyWGRLMkxhX1Q2dVV3bmUta3kxeDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSWIy3dA
rbUX1ynncM61ifH90ut0zDXPMVSjUhalAMIuZLJ8lCGroN+G/kTXYdI03Rc2e5zh
AapaGlG6qYH26xcBo8NzoatrFnddKofNgJUza5tP4njuBZWKwI2rplhn9iVE/dBs
4d4jp9YFKxSs9S5gb5FaPB9L0eSlH8ijPw0pJfU+1N5SwPhtB3A+hL/aIk0XvzVF
52EdgV4oJ1jaUuJumse4PQuSeSazYcbdB0qY3NDuomcwVb20bGteJgxJqnrp4S93
E61pez7daMxDmWfgLUpgmwZBCi/cQZ4ca2NN9Pq1NeARnCL3H/rM7LXDjkwVilWc
7vdN6HeXPWYJGg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:10:09 2026 by rpki-client