Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
File: 1-dhnzCTQvonwX8hyWOCHemAVgLk.mft (raw, json)
Hash identifier: gBw3Qksm4tNBFYV0o9KHPXkzthsu8yQPIldXmVwXeHk=
Subject key identifier: 7F:BF:C7:38:F4:8C:38:FD:32:E0:FF:26:9C:60:86:E3:95:7C:CD:1D
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A129FAE8809604FA46F1ED0B40612212AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
Manifest number: B9
Signing time: Sun 11 Oct 2026 08:01:11 +0000
Manifest this update: Sun 11 Oct 2026 08:01:11 +0000
Manifest next update: Mon 12 Oct 2026 08:01:11 +0000
Files and hashes: 1: 1-dhnzCTQvonwX8hyWOCHemAVgLk.crl (hash: MdFdEx/8DfOscXuR2UVBHUhFfQKKv9LHWKMAanaVPBo=)
2: eI9NerJ1c6tinDx9yJcsboAQaCc.roa (hash: /4R9eBzzDT2s1cbNz4Ys3Jws6eQW6QelhjomMlmRAmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:e8:80:96:04:fa:46:f1:ed:0b:40:61:22:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Oct 11 08:01:11 2026 GMT
Not After : Oct 12 08:01:11 2026 GMT
Subject: CN=7fbfc738f48c38fd32e0ff269c6086e3957ccd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:02:82:33:d1:8b:69:ec:39:62:5e:c5:69:ac:
c1:2a:f0:94:82:51:84:30:b3:b4:e9:30:cf:42:05:
1a:9a:94:cb:60:ae:1a:73:32:20:12:2b:b9:15:bc:
1a:20:16:68:f0:27:55:91:f6:60:51:63:5a:ea:04:
1b:a8:cc:d4:27:1f:cf:0d:98:61:96:ac:7f:6d:b9:
d8:ea:0b:63:67:4f:72:21:1a:e8:4f:c0:19:bd:ef:
61:d6:d7:64:97:33:ab:4e:57:f8:3f:db:0f:9b:11:
4a:2b:15:3a:83:4a:88:96:11:38:fa:7a:5b:d7:44:
a4:65:51:82:f8:0b:6b:c5:0d:85:4c:ad:8d:89:52:
61:da:c6:16:f2:c8:2a:08:9d:a6:4a:a2:ad:f9:a1:
3e:64:d6:02:d7:c0:03:76:d9:15:41:ca:42:cf:be:
5d:a8:a4:20:04:b1:df:fc:2f:af:93:45:bd:79:80:
19:09:ad:9d:1c:2f:9e:5c:0b:94:d7:8f:fc:72:98:
75:e1:41:ec:e1:0c:b9:2d:ad:54:56:4d:fa:f2:35:
db:b0:bf:c7:79:81:39:fa:f2:8b:ab:8d:f5:ba:92:
28:d4:9b:36:de:c4:5e:2c:e9:9f:2b:ce:09:bf:fa:
d4:82:5b:4b:06:fb:16:99:b7:29:da:ba:52:fa:4e:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:C7:38:F4:8C:38:FD:32:E0:FF:26:9C:60:86:E3:95:7C:CD:1D
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:90:ff:76:69:8a:d5:b3:76:33:ff:92:41:b2:7f:79:69:96:
8b:e9:77:70:2f:9e:bb:e0:4f:f9:ef:4c:c2:80:cf:5c:d6:9a:
a5:17:ba:ae:67:02:74:b4:d0:6f:ff:df:24:55:f4:70:f7:4d:
cf:60:db:d7:08:84:1b:92:4b:2d:08:df:39:8d:30:10:b7:eb:
e7:f9:2c:46:cd:7a:cb:73:3a:e1:dd:58:27:d7:c6:36:f5:5f:
1b:2c:7b:92:2a:40:fc:8a:89:22:48:d0:e3:ef:60:8d:d7:29:
24:ab:64:eb:0c:52:67:60:a3:53:a8:b0:4c:49:28:c9:d8:04:
5a:89:32:d2:b8:67:49:2a:39:98:93:0a:16:1f:ae:63:b9:26:
5e:fa:fc:0d:11:7c:20:31:87:04:04:a1:7a:45:14:0a:65:e1:
e8:a7:14:8b:de:d1:c5:f2:07:c5:93:ff:13:e6:45:11:07:1e:
71:ee:bc:da:23:e7:87:8c:ae:fc:7c:31:14:23:59:37:d2:ae:
8d:f9:89:f1:50:56:0f:02:a3:02:ec:cd:f9:ec:de:88:06:f2:
3b:a3:ab:d4:47:40:d2:9b:20:22:d0:5b:03:85:b6:5e:e7:cf:
22:56:d1:9e:46:30:f9:29:d2:9e:59:db:33:0c:fe:bf:0b:4f:
72:b5:93:c2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEp+uiAlgT6RvHtC0BhIhKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDg2N2NjMjRkMGJlODlmMDVmYzg3MjU4ZTA4NzdhNjAx
NTgwYjkwHhcNMjYxMDExMDgwMTExWhcNMjYxMDEyMDgwMTExWjAzMTEwLwYDVQQD
Eyg3ZmJmYzczOGY0OGMzOGZkMzJlMGZmMjY5YzYwODZlMzk1N2NjZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwKCM9GLaew5Yl7FaazBKvCUglGE
MLO06TDPQgUampTLYK4aczIgEiu5FbwaIBZo8CdVkfZgUWNa6gQbqMzUJx/PDZhh
lqx/bbnY6gtjZ09yIRroT8AZve9h1tdklzOrTlf4P9sPmxFKKxU6g0qIlhE4+npb
10SkZVGC+AtrxQ2FTK2NiVJh2sYW8sgqCJ2mSqKt+aE+ZNYC18ADdtkVQcpCz75d
qKQgBLHf/C+vk0W9eYAZCa2dHC+eXAuU14/8cph14UHs4Qy5La1UVk368jXbsL/H
eYE5+vKLq431upIo1Js23sReLOmfK84Jv/rUgltLBvsWmbcp2rpS+k5vdwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH+/xzj0jDj9MuD/JpxghuOVfM0dMB8GA1UdIwQY
MBaAFPnYZ8wk0L6J8F/Icljgh3pgFYC5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kaG56Q1RRdm9ud1g4aHlXT0NIZW1BVmdMay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvODA1MzJkLTAyOTItNDI3Ny04ZGU2
LTBmNmU3ODYxYTg3NS8xLzEtZGhuekNUUXZvbndYOGh5V09DSGVtQVZnTGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QxLzgwNTMyZC0wMjkyLTQyNzctOGRlNi0wZjZlNzg2MWE4
NzUvMS8xLWRobnpDVFF2b253WDhoeVdPQ0hlbUFWZ0xrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJD/
dmmK1bN2M/+SQbJ/eWmWi+l3cC+eu+BP+e9MwoDPXNaapRe6rmcCdLTQb//fJFX0
cPdNz2Db1wiEG5JLLQjfOY0wELfr5/ksRs16y3M64d1YJ9fGNvVfGyx7kipA/IqJ
IkjQ4+9gjdcpJKtk6wxSZ2CjU6iwTEkoydgEWoky0rhnSSo5mJMKFh+uY7kmXvr8
DRF8IDGHBAShekUUCmXh6KcUi97RxfIHxZP/E+ZFEQcece682iPnh4yu/HwxFCNZ
N9KujfmJ8VBWDwKjAuzN+ezeiAbyO6Or1EdA0psgItBbA4W2XufPIlbRnkYw+SnS
nlnbMwz+vwtPcrWTwg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:23:47 2026 by rpki-client