Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: 4vPHPfnuTb6VXIfOxUfRv/ByXrRY7aUqSyPBoGXNhEA=
Subject key identifier: 9A:3B:2E:0F:2C:58:0B:F9:B3:D0:E3:ED:49:37:5D:B9:AA:9C:3D:3B
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 01A171A5B7AD0EF7CDEBB152F2C6DA914098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 0649
Signing time: Sun 25 Oct 2026 06:00:48 +0000
Manifest this update: Sun 25 Oct 2026 06:00:48 +0000
Manifest next update: Mon 26 Oct 2026 06:00:48 +0000
Files and hashes: 1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: FAYTM0Q4q+aiGvud1cc9nj7xuEaMg1B8YExbh4LNOFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a5:b7:ad:0e:f7:cd:eb:b1:52:f2:c6:da:91:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Oct 25 06:00:48 2026 GMT
Not After : Oct 26 06:00:48 2026 GMT
Subject: CN=9a3b2e0f2c580bf9b3d0e3ed49375db9aa9c3d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:a5:9c:41:75:f6:74:6d:a6:17:74:93:cb:
17:57:59:37:de:6a:28:0f:c4:70:f8:78:5c:26:f8:
4f:5e:e1:56:e9:ec:92:a4:a1:75:14:2c:f3:52:f4:
bc:cc:0d:f1:b3:8b:8e:d9:16:05:1d:3b:0e:af:47:
e4:83:9e:11:b5:e9:4a:50:b0:ff:de:de:98:a7:b7:
18:d4:b8:4c:c9:f5:1c:c3:39:ad:5a:aa:45:24:18:
85:99:01:c3:8d:87:7c:fc:f1:e2:cf:82:6d:c1:64:
ff:84:6d:74:ae:f6:ec:bf:15:6e:8b:ec:76:bb:82:
cd:8e:d0:c4:58:3e:01:56:1d:9f:35:a8:7f:da:8e:
37:ae:33:24:1e:18:4d:a7:96:b3:69:23:57:32:1e:
9f:ba:76:cc:38:57:32:34:82:9e:46:58:65:29:56:
20:76:31:d6:d6:2d:d5:fb:56:31:f6:3b:c0:66:9a:
45:8d:59:47:51:20:57:c2:c7:0d:74:78:aa:e5:11:
02:cb:7f:0f:13:4c:7a:7b:1c:b9:13:99:71:99:77:
97:f3:68:c6:81:35:26:6b:98:9c:bd:2a:0a:7d:d3:
ff:0c:77:93:e6:34:48:5e:42:51:70:59:f7:a5:a3:
fd:5a:95:6b:12:ad:aa:62:bb:5e:80:51:08:28:37:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:2E:0F:2C:58:0B:F9:B3:D0:E3:ED:49:37:5D:B9:AA:9C:3D:3B
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:93:30:88:3b:c0:3b:48:2c:31:06:22:21:a8:0a:49:16:2d:
07:50:9f:5f:bd:76:42:76:02:6f:74:9c:67:40:d9:4c:f4:6f:
54:cb:75:9c:f4:e9:af:86:9a:03:03:ba:73:b6:33:44:2e:4c:
84:59:85:f6:d3:e9:b5:ed:c5:7d:7c:06:ff:0d:64:6a:1b:d4:
87:8a:9b:80:3e:c7:1d:0e:82:ed:05:08:6b:2a:51:aa:29:09:
b5:4a:c3:b0:92:97:31:fc:c7:78:0a:ca:11:ef:29:ee:15:41:
3d:fd:7b:61:de:f1:83:b4:01:03:0a:9d:82:cf:d1:ba:15:55:
1a:a8:39:2e:cc:3c:cf:47:c8:f4:1f:01:e5:c0:3f:56:32:7d:
61:8c:83:21:9a:81:d2:23:52:c1:b9:98:62:af:3c:5c:63:07:
dd:c7:f1:b3:c6:e4:f1:96:23:f5:bb:6a:b0:60:16:58:e9:fa:
fe:1a:78:00:cf:ca:e6:3b:3f:c6:9e:82:1c:ea:e3:df:6b:71:
b2:fc:16:85:c6:df:75:a6:4e:ab:ae:1d:e2:09:a3:c9:e7:81:
93:ba:59:38:5b:8d:ea:a2:f8:c0:53:0f:53:15:8b:fa:08:03:
c9:c3:20:7e:f8:03:aa:ae:d6:a9:0b:48:44:7b:d7:7e:9f:bd:
be:56:55:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFxpbetDvfN67FS8sbakUCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDRlMTZmMzMzZDg5NjUwYzY2MTNhYzZjOTVkMzQ4ZGM0
Yjc5NTAwHhcNMjYxMDI1MDYwMDQ4WhcNMjYxMDI2MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg5YTNiMmUwZjJjNTgwYmY5YjNkMGUzZWQ0OTM3NWRiOWFhOWMzZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ClnEF19nRtphd0k8sXV1k33moo
D8Rw+HhcJvhPXuFW6eySpKF1FCzzUvS8zA3xs4uO2RYFHTsOr0fkg54RtelKULD/
3t6Yp7cY1LhMyfUcwzmtWqpFJBiFmQHDjYd8/PHiz4JtwWT/hG10rvbsvxVui+x2
u4LNjtDEWD4BVh2fNah/2o43rjMkHhhNp5azaSNXMh6funbMOFcyNIKeRlhlKVYg
djHW1i3V+1Yx9jvAZppFjVlHUSBXwscNdHiq5RECy38PE0x6exy5E5lxmXeX82jG
gTUma5icvSoKfdP/DHeT5jRIXkJRcFn3paP9WpVrEq2qYrtegFEIKDfH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo7Lg8sWAv5s9Dj7Uk3XbmqnD07MB8GA1UdIwQY
MBaAFHQE4W8zPYllDGYTrGyV00jcS3lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzct
MThjNWViZWYyN2E4LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzctMThjNWViZWYyN2E4
LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5MwiDvA
O0gsMQYiIagKSRYtB1CfX712QnYCb3ScZ0DZTPRvVMt1nPTpr4aaAwO6c7YzRC5M
hFmF9tPpte3FfXwG/w1kahvUh4qbgD7HHQ6C7QUIaypRqikJtUrDsJKXMfzHeArK
Ee8p7hVBPf17Yd7xg7QBAwqdgs/RuhVVGqg5Lsw8z0fI9B8B5cA/VjJ9YYyDIZqB
0iNSwbmYYq88XGMH3cfxs8bk8ZYj9btqsGAWWOn6/hp4AM/K5js/xp6CHOrj32tx
svwWhcbfdaZOq64d4gmjyeeBk7pZOFuN6qL4wFMPUxWL+ggDycMgfvgDqq7WqQtI
RHvXfp+9vlZVJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:04:12 2026 by rpki-client