Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: 3Hwpdi2jhq0Xt6YhAmOms91Ww9z5zNRsq1QfQmhpFHg=
Subject key identifier: 00:88:92:58:D2:68:07:B0:87:1E:93:70:E4:8A:FA:FC:8C:44:D9:FF
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 01A1A6A6B3D5853B06D65E825475D27E7338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 0232
Signing time: Wed 04 Nov 2026 13:01:45 +0000
Manifest this update: Wed 04 Nov 2026 13:01:45 +0000
Manifest next update: Thu 05 Nov 2026 13:01:45 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: Ktlx+TXBcy1yrApG0zWGcIlNbJ1VwPziO7fuhgHp8JM=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:a6:b3:d5:85:3b:06:d6:5e:82:54:75:d2:7e:73:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Nov 4 13:01:45 2026 GMT
Not After : Nov 5 13:01:45 2026 GMT
Subject: CN=00889258d26807b0871e9370e48afafc8c44d9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:31:e6:76:5a:ef:47:e3:95:ba:27:b1:36:
1f:7f:6a:b0:91:9c:00:d1:61:73:16:e5:87:d9:45:
40:6f:d9:49:7f:29:c7:3e:1c:4d:e6:71:3d:6e:81:
32:c0:a2:6f:1e:c0:1e:d1:32:c3:6f:1e:2f:65:e3:
cf:c2:cb:e6:f6:1e:c3:e4:d5:d0:06:df:6d:77:1a:
36:1e:95:58:1f:26:d3:8d:ec:6e:60:cf:14:ac:1a:
80:e0:cf:db:74:95:ec:80:d9:c5:37:8f:df:ae:c0:
eb:4d:12:08:52:cc:e6:01:5f:ee:f3:bd:da:80:62:
8a:93:eb:20:20:3b:dd:4d:93:80:75:01:c1:22:0e:
1a:ab:27:34:57:98:0b:0a:17:93:6f:91:81:ce:3b:
4e:61:fa:e1:61:33:96:e8:fc:e5:cd:d3:93:0c:d5:
a3:5b:bc:33:f6:4a:94:4c:ac:87:5e:e9:55:d0:2c:
6c:65:0c:e6:dc:87:78:a1:50:70:dc:54:83:da:03:
d3:db:6e:23:a0:5b:f3:fe:ac:c4:ca:76:ea:9e:ab:
7f:b7:f2:73:0a:09:fd:f0:ae:18:59:68:ca:51:b5:
de:ed:2a:f6:99:92:46:66:63:5d:de:78:41:fb:14:
5e:1c:f9:18:f5:7c:8c:1e:a0:54:b2:e5:e8:1a:f0:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:92:58:D2:68:07:B0:87:1E:93:70:E4:8A:FA:FC:8C:44:D9:FF
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7b:ef:0a:ce:08:b2:48:30:4c:0c:61:2a:19:04:30:eb:2c:
4f:d8:27:33:74:14:22:ee:6b:76:b1:ef:25:cb:1e:32:21:73:
e3:a3:4b:bd:91:3f:b5:8d:8d:57:71:cd:c2:ce:c3:48:35:d9:
f2:b1:7f:18:09:57:f2:6b:8e:25:ae:b6:d8:8f:73:c8:1d:3f:
58:99:20:f9:dd:7e:e3:b5:a9:a2:52:97:74:ee:56:07:8b:51:
da:43:8e:ae:54:90:67:9d:a6:36:a6:f0:90:7d:6d:10:13:51:
39:b2:6a:33:e0:25:fb:f1:c9:a4:9b:bb:20:95:e9:e0:7b:3e:
1a:74:08:23:6f:4f:08:88:07:fe:c1:fc:3a:85:42:f9:d9:69:
b4:a1:95:33:7e:3e:9f:e8:bc:a6:08:47:0e:c5:75:76:92:8b:
40:6f:b5:2c:a8:93:fb:84:91:19:31:d3:c3:65:b2:3f:f4:92:
4c:71:a8:58:c9:fa:73:b9:a9:d1:4b:36:83:8c:3c:6e:4f:7e:
65:53:89:ea:09:a0:06:38:0c:43:78:9c:e5:40:87:c7:69:30:
aa:af:df:eb:c7:56:eb:ac:bb:cf:32:79:d8:b2:3a:cd:96:38:
2c:5e:3a:7c:c9:df:bd:ec:27:f9:ac:b9:ad:54:d9:49:b1:27:
ef:25:d3:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGmprPVhTsG1l6CVHXSfnM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjk1NjZiNjJkZTg0MDRiODU2YzU2MDA0Y2M0OWJlNjIx
MzU0ZTgwHhcNMjYxMTA0MTMwMTQ1WhcNMjYxMTA1MTMwMTQ1WjAzMTEwLwYDVQQD
EygwMDg4OTI1OGQyNjgwN2IwODcxZTkzNzBlNDhhZmFmYzhjNDRkOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX0x5nZa70fjlbonsTYff2qwkZwA
0WFzFuWH2UVAb9lJfynHPhxN5nE9boEywKJvHsAe0TLDbx4vZePPwsvm9h7D5NXQ
Bt9tdxo2HpVYHybTjexuYM8UrBqA4M/bdJXsgNnFN4/frsDrTRIIUszmAV/u873a
gGKKk+sgIDvdTZOAdQHBIg4aqyc0V5gLCheTb5GBzjtOYfrhYTOW6PzlzdOTDNWj
W7wz9kqUTKyHXulV0CxsZQzm3Id4oVBw3FSD2gPT224joFvz/qzEynbqnqt/t/Jz
Cgn98K4YWWjKUbXe7Sr2mZJGZmNd3nhB+xReHPkY9XyMHqBUsuXoGvBSLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACIkljSaAewhx6TcOSK+vyMRNn/MB8GA1UdIwQY
MBaAFA35Vmti3oQEuFbFYATMSb5iE1ToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAt
ODgzZTRjODVlNGVlLzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAtODgzZTRjODVlNGVl
LzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnvvCs4I
skgwTAxhKhkEMOssT9gnM3QUIu5rdrHvJcseMiFz46NLvZE/tY2NV3HNws7DSDXZ
8rF/GAlX8muOJa622I9zyB0/WJkg+d1+47WpolKXdO5WB4tR2kOOrlSQZ52mNqbw
kH1tEBNRObJqM+Al+/HJpJu7IJXp4Hs+GnQII29PCIgH/sH8OoVC+dlptKGVM34+
n+i8pghHDsV1dpKLQG+1LKiT+4SRGTHTw2WyP/SSTHGoWMn6c7mp0Us2g4w8bk9+
ZVOJ6gmgBjgMQ3ic5UCHx2kwqq/f68dW66y7zzJ52LI6zZY4LF46fMnfvewn+ay5
rVTZSbEn7yXTag==
-----END CERTIFICATE-----
Generated at Wed Nov 4 21:13:33 2026 by rpki-client