Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: CFA3JRoY6CTxSUJhslOUkFMi5vN8kAps/tsAQ+RTTfQ=
Subject key identifier: A7:C4:55:49:EB:27:5E:18:2E:40:86:FC:89:FC:FD:7C:43:CC:F5:37
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 01A13E942E854D92C01140F08AB92F44C36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 0743
Signing time: Thu 15 Oct 2026 08:01:00 +0000
Manifest this update: Thu 15 Oct 2026 08:01:00 +0000
Manifest next update: Fri 16 Oct 2026 08:01:00 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: ss7TSg4xC7Tl0Yf78C7zTEKmvZSEJsAWoQeYHDiP7+s=)
2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:2e:85:4d:92:c0:11:40:f0:8a:b9:2f:44:c3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Oct 15 08:01:00 2026 GMT
Not After : Oct 16 08:01:00 2026 GMT
Subject: CN=a7c45549eb275e182e4086fc89fcfd7c43ccf537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:0d:d2:08:c9:66:fd:78:5d:09:36:f4:27:
de:1f:15:c7:e0:08:99:6b:e4:82:cd:37:58:94:2e:
e8:a9:97:85:31:91:06:4a:79:de:fe:b9:82:1b:0e:
d1:c5:82:04:97:ff:31:7e:77:6f:50:36:a2:b2:29:
a7:5d:91:1c:83:be:f0:70:84:e0:1d:ef:ed:36:cc:
38:42:b3:7e:d7:f0:b9:77:02:7b:e7:31:3a:61:73:
e8:19:13:f2:3e:43:e8:ee:b4:c1:63:73:56:2c:0b:
c1:bd:2d:41:cf:ae:b4:75:7d:27:8f:0c:e8:1a:6f:
d5:4b:ba:1b:cf:0d:f3:bb:37:c0:37:58:37:a0:04:
89:65:3d:1c:f6:69:3b:81:4d:f0:7c:c7:5c:45:f0:
ab:0b:af:f4:02:6a:47:64:10:dc:5a:bf:3b:6e:b6:
c4:71:e4:de:08:bc:0f:5e:59:31:11:33:c4:4d:12:
b9:79:a1:a5:36:ad:ad:16:4f:1f:52:6d:cd:2c:70:
fb:5c:83:67:36:df:93:eb:9b:be:cc:5f:f9:bd:42:
f3:43:ef:ae:b5:c2:46:50:74:00:16:bd:aa:70:37:
dd:16:b2:ae:2d:0f:82:81:25:52:2f:1c:bd:2b:cf:
39:0e:69:47:e9:e3:e2:2c:9d:a7:ea:e7:69:8f:54:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:55:49:EB:27:5E:18:2E:40:86:FC:89:FC:FD:7C:43:CC:F5:37
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d6:cb:1a:fb:a7:21:a6:b7:3b:27:4f:0f:ff:12:a4:1a:f8:
ae:31:bd:f0:fb:3f:34:53:fb:8d:09:09:1d:83:ba:d5:fc:f3:
4e:1a:6d:c2:31:33:73:64:ff:cb:79:cc:9a:67:37:e0:df:17:
1f:ae:2d:67:a3:bb:c7:3a:73:98:33:67:d5:c5:40:b2:44:dc:
2a:6a:a6:94:c4:a5:24:6f:07:8d:0d:29:cf:b8:d7:01:ef:c7:
f2:08:3a:e0:83:49:11:35:77:50:2d:b2:46:f2:5e:a1:47:6b:
68:11:11:70:39:fd:ac:9f:f2:82:ee:5e:d2:90:cc:06:7d:28:
91:1f:83:ab:6c:60:68:07:60:f3:11:98:ed:01:71:f4:91:19:
53:c7:a1:73:69:0f:26:a1:c7:a8:f4:34:89:78:3c:54:a2:a7:
96:ed:15:94:74:5f:9f:be:f4:bf:f3:dd:d8:4c:26:12:55:1b:
04:e0:c5:df:e8:7d:72:16:6c:e3:3f:db:db:ce:55:c8:91:8e:
34:1b:39:b6:94:5a:5a:7b:b6:e5:48:e6:9a:3d:0a:51:84:27:
ef:79:45:99:56:cf:2d:0b:4d:52:50:b7:04:12:6f:f5:a6:89:
b8:d6:b5:33:99:35:fc:64:1e:96:a3:b0:a7:e1:d0:4d:dd:ad:
fc:bc:a2:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lC6FTZLAEUDwirkvRMNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz
MzFiN2YwHhcNMjYxMDE1MDgwMTAwWhcNMjYxMDE2MDgwMTAwWjAzMTEwLwYDVQQD
EyhhN2M0NTU0OWViMjc1ZTE4MmU0MDg2ZmM4OWZjZmQ3YzQzY2NmNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokgN0gjJZv14XQk29CfeHxXH4AiZ
a+SCzTdYlC7oqZeFMZEGSnne/rmCGw7RxYIEl/8xfndvUDaisimnXZEcg77wcITg
He/tNsw4QrN+1/C5dwJ75zE6YXPoGRPyPkPo7rTBY3NWLAvBvS1Bz660dX0njwzo
Gm/VS7obzw3zuzfAN1g3oASJZT0c9mk7gU3wfMdcRfCrC6/0AmpHZBDcWr87brbE
ceTeCLwPXlkxETPETRK5eaGlNq2tFk8fUm3NLHD7XINnNt+T65u+zF/5vULzQ++u
tcJGUHQAFr2qcDfdFrKuLQ+CgSVSLxy9K885DmlH6ePiLJ2n6udpj1RmqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfEVUnrJ14YLkCG/In8/XxDzPU3MB8GA1UdIwQY
MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt
ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2
LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9bLGvun
Iaa3OydPD/8SpBr4rjG98Ps/NFP7jQkJHYO61fzzThptwjEzc2T/y3nMmmc34N8X
H64tZ6O7xzpzmDNn1cVAskTcKmqmlMSlJG8HjQ0pz7jXAe/H8gg64INJETV3UC2y
RvJeoUdraBERcDn9rJ/ygu5e0pDMBn0okR+Dq2xgaAdg8xGY7QFx9JEZU8ehc2kP
JqHHqPQ0iXg8VKKnlu0VlHRfn770v/Pd2EwmElUbBODF3+h9chZs4z/b285VyJGO
NBs5tpRaWnu25Ujmmj0KUYQn73lFmVbPLQtNUlC3BBJv9aaJuNa1M5k1/GQelqOw
p+HQTd2t/LyiPg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:05 2026 by rpki-client