Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: Ufsv/9ZAQ/mIv27Vak0dD95GAoJoV49SMhp/NYRhK9g=
Subject key identifier: BB:1D:45:B7:0F:04:AD:5E:1B:DF:56:C0:53:D1:42:DD:5A:EA:3E:AA
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 01A000CA039543FA75E35FFF6844E46B241A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 0918
Signing time: Fri 14 Aug 2026 15:00:34 +0000
Manifest this update: Fri 14 Aug 2026 15:00:34 +0000
Manifest next update: Sat 15 Aug 2026 15:00:34 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: dcrhQFZLpuVYydjOLmNGL11bLeJOpglayWmmk/FeTys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:03:95:43:fa:75:e3:5f:ff:68:44:e4:6b:24:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Aug 14 15:00:34 2026 GMT
Not After : Aug 15 15:00:34 2026 GMT
Subject: CN=bb1d45b70f04ad5e1bdf56c053d142dd5aea3eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:0e:ed:e3:e5:c6:ff:8b:d6:41:42:8b:0b:
a2:bb:71:92:dd:d0:b6:45:58:4a:36:2e:2a:2e:7a:
c3:9a:56:8e:0d:fe:2d:f5:71:08:ba:c7:6d:fc:9e:
fb:68:ee:23:91:74:6c:e3:3d:6d:53:84:da:bf:2d:
78:e8:1f:04:b6:b8:eb:0d:df:5f:0a:c9:cd:65:78:
e3:17:1b:4e:55:45:37:af:8a:07:07:d4:67:c4:8c:
37:17:05:3a:52:e2:7c:be:cb:13:85:1f:00:aa:2a:
d4:2b:9e:fa:82:27:2b:5e:84:eb:07:81:49:d6:78:
7f:56:dc:12:67:26:c9:89:71:b8:56:4f:8c:42:b6:
fa:ed:a6:84:91:af:a9:72:44:71:20:50:ed:a9:85:
cd:af:b2:4e:dd:7c:7d:6c:15:ad:e3:19:6f:d8:44:
e0:04:19:a9:2f:4d:65:3e:e0:b7:3b:6e:f4:54:1f:
c4:1a:61:1d:75:2f:11:5b:61:26:5e:50:4e:5a:a3:
cb:52:25:35:06:62:8a:7b:f5:cf:22:fb:8b:31:c5:
eb:16:e9:9e:c3:49:12:52:07:5a:3a:35:e7:83:57:
08:79:29:40:27:d5:2e:08:4e:1b:53:e0:64:16:89:
51:76:32:e5:7d:a1:74:06:b9:a4:56:b5:69:19:a2:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:45:B7:0F:04:AD:5E:1B:DF:56:C0:53:D1:42:DD:5A:EA:3E:AA
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:18:eb:b0:1c:2f:5d:e2:9b:e7:5a:c1:08:96:ff:8a:47:80:
fc:02:1e:9b:b8:ad:8e:7d:d7:01:82:28:b6:d0:c1:03:e3:08:
5d:5e:b5:1b:8e:38:5c:5f:b3:f8:c6:99:bd:5f:dc:9a:9b:1e:
c9:ec:6b:9b:dc:e0:22:4d:09:bf:42:57:40:13:ba:1e:08:bb:
c6:ef:f1:4c:7e:71:f8:ea:30:ee:15:15:6f:b1:62:60:39:7d:
e0:4d:4f:c9:68:8d:3b:a9:be:48:ae:78:89:b4:b9:b0:7d:4c:
8a:e7:7c:29:99:49:26:5c:52:8e:2a:04:3f:fd:c3:61:79:81:
77:a4:7d:43:37:f5:e1:28:fa:f7:41:f0:27:e9:ff:f6:24:4f:
d4:fb:8c:1d:9b:fc:c1:5b:82:33:b6:95:a9:d9:68:aa:56:c9:
0d:7e:cc:af:ed:21:57:15:34:f7:31:2d:ae:e6:98:ad:d0:f6:
23:e7:91:0a:c1:da:f5:20:a8:91:cb:77:4a:9b:82:e3:68:07:
6a:02:65:7d:8c:9f:19:7c:82:58:8f:db:e4:ed:0c:4c:7a:25:
ea:a5:22:60:ae:cb:86:6a:ef:4f:d1:53:14:96:17:0e:02:18:
6c:36:48:b0:ba:c5:94:b4:cb:98:c1:42:76:60:a0:10:61:d9:
ae:a7:ec:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAygOVQ/p141//aETkayQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjYwODE0MTUwMDM0WhcNMjYwODE1MTUwMDM0WjAzMTEwLwYDVQQD
EyhiYjFkNDViNzBmMDRhZDVlMWJkZjU2YzA1M2QxNDJkZDVhZWEzZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs60O7ePlxv+L1kFCiwuiu3GS3dC2
RVhKNi4qLnrDmlaODf4t9XEIusdt/J77aO4jkXRs4z1tU4Tavy146B8EtrjrDd9f
CsnNZXjjFxtOVUU3r4oHB9RnxIw3FwU6UuJ8vssThR8AqirUK576gicrXoTrB4FJ
1nh/VtwSZybJiXG4Vk+MQrb67aaEka+pckRxIFDtqYXNr7JO3Xx9bBWt4xlv2ETg
BBmpL01lPuC3O270VB/EGmEddS8RW2EmXlBOWqPLUiU1BmKKe/XPIvuLMcXrFume
w0kSUgdaOjXng1cIeSlAJ9UuCE4bU+BkFolRdjLlfaF0BrmkVrVpGaLyfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsdRbcPBK1eG99WwFPRQt1a6j6qMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxjrsBwv
XeKb51rBCJb/ikeA/AIem7itjn3XAYIottDBA+MIXV61G444XF+z+MaZvV/cmpse
yexrm9zgIk0Jv0JXQBO6Hgi7xu/xTH5x+Oow7hUVb7FiYDl94E1PyWiNO6m+SK54
ibS5sH1Miud8KZlJJlxSjioEP/3DYXmBd6R9Qzf14Sj690HwJ+n/9iRP1PuMHZv8
wVuCM7aVqdloqlbJDX7Mr+0hVxU09zEtruaYrdD2I+eRCsHa9SCokct3SpuC42gH
agJlfYyfGXyCWI/b5O0MTHol6qUiYK7LhmrvT9FTFJYXDgIYbDZIsLrFlLTLmMFC
dmCgEGHZrqfs7g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:26 2026 by rpki-client