Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: +Cc8hqivsSUNQr+FMrNedkZTHZ6VSrmj+KuIf+Ri/bc=
Subject key identifier: D9:7B:CD:9D:71:D6:3C:CD:99:08:10:0D:EA:98:76:3C:3A:1D:CB:14
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 01A13DB8CA27B21DF6EB159C70121B3A148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1A9F
Signing time: Thu 15 Oct 2026 04:01:22 +0000
Manifest this update: Thu 15 Oct 2026 04:01:22 +0000
Manifest next update: Fri 16 Oct 2026 04:01:22 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: sTFi/6/6+wf91+zwxemnHo/oF25CbUU5zN8gZiyxfTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:ca:27:b2:1d:f6:eb:15:9c:70:12:1b:3a:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Oct 15 04:01:22 2026 GMT
Not After : Oct 16 04:01:22 2026 GMT
Subject: CN=d97bcd9d71d63ccd9908100dea98763c3a1dcb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:a7:d9:ea:57:f6:83:60:05:c1:c5:b8:e8:
67:a7:b4:d5:3c:c4:25:f3:dd:22:00:0e:cb:5a:ad:
47:c8:c5:ef:e8:38:be:a9:09:76:d4:9d:2b:62:38:
58:e5:13:4d:3d:b6:57:6a:b0:b6:d1:83:8b:3d:25:
6d:d7:cf:46:33:2a:72:97:3e:a5:93:d4:be:0d:8d:
03:f1:9d:0f:00:90:a8:e3:c1:4c:d2:a0:1d:69:dc:
32:df:d3:5d:66:ab:85:91:72:7c:66:b1:9a:72:95:
c4:93:41:d3:b2:ee:0b:e1:f4:a0:77:ee:73:41:bc:
73:de:1f:49:16:54:48:25:60:8c:31:65:ad:e7:07:
a2:f7:3f:c3:12:f9:bf:ab:86:9d:f3:79:79:1c:58:
8d:ea:4d:2b:96:12:3a:f2:9d:b9:25:a7:91:cb:c1:
87:37:34:0c:e7:f2:08:12:fa:78:45:ce:77:61:58:
8a:8e:c2:41:df:85:fa:4b:d6:18:b3:ac:54:b0:bf:
c5:75:44:0f:4d:40:4c:6f:af:1d:e6:e9:1c:40:4c:
c8:a3:ad:14:ad:22:b4:4d:99:01:f0:e1:d7:cf:29:
0f:ae:c2:86:d7:e2:46:bb:fa:04:46:ac:e3:4c:9f:
38:94:1f:b5:51:cf:14:ab:ec:c2:f9:29:7b:a6:f3:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:CD:9D:71:D6:3C:CD:99:08:10:0D:EA:98:76:3C:3A:1D:CB:14
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:30:6d:65:67:3e:f0:aa:00:ae:73:6f:6b:b5:9f:86:55:
cd:07:61:ef:c6:e4:6e:5d:82:5e:0d:ae:9f:6b:61:a2:98:60:
97:5a:b9:22:1d:b1:5a:1b:3d:a4:e8:6c:2f:64:e2:47:53:38:
b0:08:a7:1f:1d:0b:8d:85:c8:6b:d2:69:ed:92:54:76:fb:0b:
00:29:99:1f:27:69:75:81:8a:9b:fc:d6:f0:cf:f2:59:9d:18:
bc:42:31:11:8a:c9:86:b7:b2:cc:68:fe:75:0a:d2:5a:bf:ec:
44:d4:28:1b:01:de:18:e2:fc:ad:50:a8:0f:f2:b7:8b:47:43:
ac:76:07:48:c5:b0:eb:47:df:97:07:9d:b5:6b:77:88:3d:5d:
af:ea:26:4b:c7:bf:60:27:f9:3a:9e:57:55:b8:b6:ea:8b:ab:
27:7f:94:40:03:c7:1a:49:cd:52:40:7c:d7:1b:a3:40:38:93:
d8:4e:7a:b6:8d:0b:40:19:b9:7e:57:ac:24:73:69:48:53:9f:
fd:fa:6d:c6:df:3f:e5:a1:e0:74:03:eb:2a:f9:af:9c:c2:fb:
c9:0a:82:23:42:e9:e1:df:83:0e:3b:ac:c5:5f:a5:52:4c:ab:
76:46:a6:3c:b4:73:23:b9:fb:6f:d6:7c:1a:3a:86:b3:06:6f:
06:a8:ad:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uMonsh326xWccBIbOhSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl
NWJhNzUwHhcNMjYxMDE1MDQwMTIyWhcNMjYxMDE2MDQwMTIyWjAzMTEwLwYDVQQD
EyhkOTdiY2Q5ZDcxZDYzY2NkOTkwODEwMGRlYTk4NzYzYzNhMWRjYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeOn2epX9oNgBcHFuOhnp7TVPMQl
890iAA7LWq1HyMXv6Di+qQl21J0rYjhY5RNNPbZXarC20YOLPSVt189GMypylz6l
k9S+DY0D8Z0PAJCo48FM0qAdadwy39NdZquFkXJ8ZrGacpXEk0HTsu4L4fSgd+5z
Qbxz3h9JFlRIJWCMMWWt5wei9z/DEvm/q4ad83l5HFiN6k0rlhI68p25JaeRy8GH
NzQM5/IIEvp4Rc53YViKjsJB34X6S9YYs6xUsL/FdUQPTUBMb68d5ukcQEzIo60U
rSK0TZkB8OHXzykPrsKG1+JGu/oERqzjTJ84lB+1Uc8Uq+zC+Sl7pvPaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl7zZ1x1jzNmQgQDeqYdjw6HcsUMB8GA1UdIwQY
MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt
ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1
LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdAwbWVn
PvCqAK5zb2u1n4ZVzQdh78bkbl2CXg2un2thophgl1q5Ih2xWhs9pOhsL2TiR1M4
sAinHx0LjYXIa9Jp7ZJUdvsLACmZHydpdYGKm/zW8M/yWZ0YvEIxEYrJhreyzGj+
dQrSWr/sRNQoGwHeGOL8rVCoD/K3i0dDrHYHSMWw60fflwedtWt3iD1dr+omS8e/
YCf5Op5XVbi26ourJ3+UQAPHGknNUkB81xujQDiT2E56to0LQBm5flesJHNpSFOf
/fptxt8/5aHgdAPrKvmvnML7yQqCI0Lp4d+DDjusxV+lUkyrdkamPLRzI7n7b9Z8
GjqGswZvBqitLQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:35 2026 by rpki-client