Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: OtaTFZ7hzdRCedGc1WfZ0O7ulYdokRj15xto7DwCD7Y=
Subject key identifier: 64:13:AB:6E:66:FA:78:15:DC:4F:EA:B1:F3:F1:F3:C3:E0:E3:B2:2B
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 01A0DE050E8DAEFFBAC6E61F7D034E67054A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 153C
Signing time: Sat 26 Sep 2026 14:01:08 +0000
Manifest this update: Sat 26 Sep 2026 14:01:08 +0000
Manifest next update: Sun 27 Sep 2026 14:01:08 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: WPATCC8oPCnUAJcrZ/HexnTNZkix91ds9nZ2kPEMJT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:0e:8d:ae:ff:ba:c6:e6:1f:7d:03:4e:67:05:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Sep 26 14:01:08 2026 GMT
Not After : Sep 27 14:01:08 2026 GMT
Subject: CN=6413ab6e66fa7815dc4feab1f3f1f3c3e0e3b22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:a3:95:f0:81:8d:dc:b3:57:0e:29:d5:c6:
47:99:5c:f5:b5:3f:ed:ef:e9:da:2d:76:60:6a:eb:
fd:19:59:b1:7a:c7:d4:06:54:ab:da:82:3e:6b:97:
8d:b0:57:41:40:3f:c9:f4:8c:5f:6a:76:bd:b5:12:
f1:94:78:23:19:5a:6d:04:af:d6:82:a4:81:bf:60:
07:d2:37:c5:6c:01:d2:ff:47:9e:4b:17:ec:41:cd:
05:4f:38:54:0f:55:81:43:c7:c9:80:a0:1f:83:2b:
8d:bd:13:c7:09:dd:d1:48:57:13:ed:2e:cc:b8:75:
cb:bf:62:a6:ac:37:c9:f8:a2:d9:48:5f:df:70:51:
60:05:3d:a4:11:87:c6:49:e5:5a:dc:82:d3:d7:54:
6b:e9:88:f6:62:5b:d2:5f:3b:b3:67:d0:fd:4e:99:
1a:05:1b:a6:43:ab:6c:b1:dc:83:db:55:eb:59:6c:
98:9e:ab:5e:1e:75:f9:0f:d6:db:67:2f:45:0f:de:
21:a9:d5:26:a2:83:3f:f1:6c:03:8e:71:41:37:56:
cc:15:de:66:ca:b4:aa:7c:8f:8b:c2:35:11:21:39:
c7:0c:ff:5a:77:0f:cf:d2:95:62:fe:1a:f8:12:c4:
8f:07:f6:a1:55:9f:ae:b5:9a:99:c8:64:31:20:60:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:AB:6E:66:FA:78:15:DC:4F:EA:B1:F3:F1:F3:C3:E0:E3:B2:2B
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:7f:a9:51:24:05:87:b9:a7:12:60:3f:df:78:5e:5d:a2:
ed:55:14:ec:64:4c:c3:7f:e6:5a:17:49:db:c2:79:3b:6b:ce:
d4:ce:ca:e0:75:c2:b5:84:82:30:1e:32:d5:c0:ca:c2:8d:fc:
df:2a:ea:76:ca:f5:ff:8b:94:3c:6e:60:1f:b6:a6:83:06:47:
ce:9c:e3:dc:ac:ad:1b:9d:28:91:3c:f7:13:b6:f4:3e:01:ea:
3b:c3:03:3b:fa:f7:78:75:90:52:38:04:19:3c:e5:31:96:cb:
00:8e:7d:4c:57:a1:66:4c:f2:b3:28:49:0b:5d:cd:ba:ad:2f:
0f:61:37:17:12:68:00:dd:61:95:5b:d8:9a:e6:54:b6:ef:c4:
ea:20:11:95:6d:b1:76:ed:61:ce:f3:93:f8:50:37:d2:e7:83:
d8:c9:43:61:71:c7:9a:f8:00:ae:2d:13:bf:d7:fa:9a:f7:c0:
db:3e:bc:d5:5e:c3:d9:e9:26:60:a2:cd:e6:a3:8f:1d:90:93:
dc:7e:68:a2:81:81:b1:74:08:0a:8f:b1:90:2d:a4:46:19:c3:
01:be:34:61:69:a0:48:24:d8:00:82:0f:18:6a:a1:3f:af:3f:
5e:d4:3d:c9:82:75:ea:35:e8:cd:bb:2f:1c:96:39:56:0e:b9:
a9:93:c9:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBQ6Nrv+6xuYffQNOZwVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwOTI2MTQwMTA4WhcNMjYwOTI3MTQwMTA4WjAzMTEwLwYDVQQD
Eyg2NDEzYWI2ZTY2ZmE3ODE1ZGM0ZmVhYjFmM2YxZjNjM2UwZTNiMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC2jlfCBjdyzVw4p1cZHmVz1tT/t
7+naLXZgauv9GVmxesfUBlSr2oI+a5eNsFdBQD/J9Ixfana9tRLxlHgjGVptBK/W
gqSBv2AH0jfFbAHS/0eeSxfsQc0FTzhUD1WBQ8fJgKAfgyuNvRPHCd3RSFcT7S7M
uHXLv2KmrDfJ+KLZSF/fcFFgBT2kEYfGSeVa3ILT11Rr6Yj2YlvSXzuzZ9D9Tpka
BRumQ6tssdyD21XrWWyYnqteHnX5D9bbZy9FD94hqdUmooM/8WwDjnFBN1bMFd5m
yrSqfI+LwjURITnHDP9adw/P0pVi/hr4EsSPB/ahVZ+utZqZyGQxIGCJAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQTq25m+ngV3E/qsfPx88Pg47IrMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmB/qVEk
BYe5pxJgP994Xl2i7VUU7GRMw3/mWhdJ28J5O2vO1M7K4HXCtYSCMB4y1cDKwo38
3yrqdsr1/4uUPG5gH7amgwZHzpzj3KytG50okTz3E7b0PgHqO8MDO/r3eHWQUjgE
GTzlMZbLAI59TFehZkzysyhJC13Nuq0vD2E3FxJoAN1hlVvYmuZUtu/E6iARlW2x
du1hzvOT+FA30ueD2MlDYXHHmvgAri0Tv9f6mvfA2z681V7D2ekmYKLN5qOPHZCT
3H5oooGBsXQICo+xkC2kRhnDAb40YWmgSCTYAIIPGGqhP68/XtQ9yYJ16jXozbsv
HJY5Vg65qZPJCA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:52:27 2026 by rpki-client