Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: V/4ly5WTeoMcg9TZmOVQsYk6+jS9kh03+4oY6xUfNxk=
Subject key identifier: AF:08:A6:59:50:FF:FC:16:AF:62:EE:1F:45:7F:4F:9D:3F:C8:57:7F
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01A17BF22496FA1D96C36C5BE3E5E21A6803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 06:00:28 +0000
Manifest this update: Tue 27 Oct 2026 06:00:28 +0000
Manifest next update: Wed 28 Oct 2026 06:00:28 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: HD1qf+XB6UC+x0Ty5OXxMvLr5Y0lRZCgBk+I+YXf+sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:24:96:fa:1d:96:c3:6c:5b:e3:e5:e2:1a:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Oct 27 06:00:28 2026 GMT
Not After : Oct 28 06:00:28 2026 GMT
Subject: CN=af08a65950fffc16af62ee1f457f4f9d3fc8577f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:d0:95:96:ce:6d:87:86:de:ec:8f:8e:79:
9a:4c:eb:bc:b1:63:a0:e2:d9:cd:da:ab:0c:c3:2d:
31:98:45:74:fb:c5:70:aa:5a:bc:7f:c0:43:f0:d5:
a0:e3:01:64:6d:d9:44:d4:bf:77:5b:ae:37:e1:5b:
07:cc:93:6b:73:c8:5d:9c:75:10:72:89:6b:d1:48:
f5:c4:79:21:0c:17:5e:2f:48:41:55:8a:3e:24:c1:
3c:40:4e:ff:47:05:ae:d7:3e:52:53:fb:5a:4a:ef:
37:fb:80:9a:1b:c3:3c:a7:52:8b:0e:02:c1:62:20:
ef:6c:6e:1e:81:30:73:21:f3:7e:1d:47:44:ea:76:
9c:42:f6:31:f5:98:3e:a4:9d:66:5a:ef:83:7c:94:
fe:89:7a:3d:ed:83:7a:45:90:35:e0:d1:25:be:cc:
55:9e:9a:3d:72:f0:c0:7b:86:3e:35:16:aa:ff:d9:
ce:11:83:46:82:58:86:39:c5:78:ee:31:8d:2f:57:
84:93:8d:89:50:ed:53:22:e9:44:0b:e8:5e:44:25:
f8:16:d7:1f:e3:70:0f:b6:3f:5d:de:5f:56:d6:71:
71:d7:05:61:50:55:02:98:70:56:aa:68:91:d2:40:
52:d2:95:79:e0:b6:82:1a:c3:fc:70:0b:ad:4d:7d:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:A6:59:50:FF:FC:16:AF:62:EE:1F:45:7F:4F:9D:3F:C8:57:7F
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:71:fd:47:9a:d2:fe:6a:d6:03:29:2d:74:42:c9:06:69:cd:
d3:02:ec:ec:c5:f9:02:b1:1d:28:94:d6:c0:d6:ea:18:7d:7a:
9f:5b:83:ab:a4:2b:21:16:0b:ef:fe:db:70:5c:ba:ee:c5:51:
51:8b:5f:d9:f4:c9:72:e5:82:9f:ea:1f:4c:e1:32:ed:b4:80:
cd:de:82:9c:70:0c:a2:80:33:e5:bc:6b:6c:7f:3e:20:bb:c4:
de:13:a1:f6:62:a8:ac:75:03:9f:ec:8f:74:10:2d:69:ef:2c:
6d:dc:02:31:53:b1:80:46:fd:98:98:6e:00:d5:31:ec:13:d1:
2f:ce:9b:66:41:74:7b:a6:92:2b:dd:33:61:d2:05:2c:88:f1:
15:c1:64:b7:62:4a:a9:b3:cf:3b:c0:4f:24:9e:05:76:f1:d5:
28:b1:51:cc:c1:31:10:19:db:c2:b6:9e:87:cd:98:fe:f0:e8:
ba:d7:a2:f2:b6:62:fd:5f:e2:1b:bb:6e:eb:1d:e1:26:48:93:
55:a0:b9:c2:2e:30:80:81:38:2a:c1:99:ef:ae:e6:83:4f:12:
9f:44:3b:39:83:dd:5d:ee:d6:d9:50:ba:c5:19:f7:df:38:d4:
a8:83:b3:68:47:cb:2e:48:70:b5:2a:a3:13:e3:bb:f9:9a:97:
4e:43:5d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78iSW+h2Ww2xb4+XiGmgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjYxMDI3MDYwMDI4WhcNMjYxMDI4MDYwMDI4WjAzMTEwLwYDVQQD
EyhhZjA4YTY1OTUwZmZmYzE2YWY2MmVlMWY0NTdmNGY5ZDNmYzg1NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cLQlZbObYeG3uyPjnmaTOu8sWOg
4tnN2qsMwy0xmEV0+8Vwqlq8f8BD8NWg4wFkbdlE1L93W6434VsHzJNrc8hdnHUQ
colr0Uj1xHkhDBdeL0hBVYo+JME8QE7/RwWu1z5SU/taSu83+4CaG8M8p1KLDgLB
YiDvbG4egTBzIfN+HUdE6nacQvYx9Zg+pJ1mWu+DfJT+iXo97YN6RZA14NElvsxV
npo9cvDAe4Y+NRaq/9nOEYNGgliGOcV47jGNL1eEk42JUO1TIulEC+heRCX4Ftcf
43APtj9d3l9W1nFx1wVhUFUCmHBWqmiR0kBS0pV54LaCGsP8cAutTX2XBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8IpllQ//wWr2LuH0V/T50/yFd/MB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnH9R5rS
/mrWAyktdELJBmnN0wLs7MX5ArEdKJTWwNbqGH16n1uDq6QrIRYL7/7bcFy67sVR
UYtf2fTJcuWCn+ofTOEy7bSAzd6CnHAMooAz5bxrbH8+ILvE3hOh9mKorHUDn+yP
dBAtae8sbdwCMVOxgEb9mJhuANUx7BPRL86bZkF0e6aSK90zYdIFLIjxFcFkt2JK
qbPPO8BPJJ4FdvHVKLFRzMExEBnbwraeh82Y/vDoutei8rZi/V/iG7tu6x3hJkiT
VaC5wi4wgIE4KsGZ767mg08Sn0Q7OYPdXe7W2VC6xRn33zjUqIOzaEfLLkhwtSqj
E+O7+ZqXTkNdag==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:00:38 2026 by rpki-client