Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
File: D2Kgc3giOs5WqEzv0weCKMsL5S4.mft (raw, json)
Hash identifier: qgMeV6l5/jTg7bLN/8NqAREVeNmKjeMzs1cweK4FSxw=
Subject key identifier: CD:4B:4A:12:DF:F4:86:A3:CB:BD:7C:E4:8D:4D:51:BE:D1:D5:C6:31
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Certificate issuer: /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial: 01A155C0C6ED9DAAFBFDE2C3A6EE465D5650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
Manifest number: 0115
Signing time: Mon 19 Oct 2026 20:00:59 +0000
Manifest this update: Mon 19 Oct 2026 20:00:59 +0000
Manifest next update: Tue 20 Oct 2026 20:00:59 +0000
Files and hashes: 1: D2Kgc3giOs5WqEzv0weCKMsL5S4.crl (hash: qcdQSbGefmVlZk7H/7CV1bx86pQiW0CLKC/S+Xao870=)
2: gqNmtUdf580qEHDGPMO8uXNf-94.roa (hash: TMnDxy4wqlNlKPOnHn9qZ+VG+0+ZivW3PzYjlXvUSu4=)
3: hcfkZ1canYcqBaE9iPzQiK47YkU.asa (hash: WYngWTyXnFZ7BPoBYe6DykacViEk1I9J2lH7LeX7hgc=)
4: ytpxWALMMzMXxSAcFbBovYCQkDw.roa (hash: tuj/U5H6ku6EtzVDyrVdq4eCW3Pp8DR50mZnV0/ryY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c0:c6:ed:9d:aa:fb:fd:e2:c3:a6:ee:46:5d:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Validity
Not Before: Oct 19 20:00:59 2026 GMT
Not After : Oct 20 20:00:59 2026 GMT
Subject: CN=cd4b4a12dff486a3cbbd7ce48d4d51bed1d5c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:3e:a3:f3:60:00:5c:4f:4f:24:80:67:16:
d6:f5:b2:c2:fd:9f:11:dd:c0:71:50:7b:85:35:82:
5b:a9:37:9f:56:7d:49:78:a3:16:0e:69:77:0b:21:
6e:3b:4e:57:f3:3c:66:64:c6:75:75:e8:a7:57:5f:
90:de:20:07:22:99:c4:95:31:5b:b4:f7:12:77:9b:
d9:f9:35:87:8c:ce:84:ec:46:81:c1:d7:8e:22:f7:
37:0f:00:1a:25:91:5f:75:ac:6b:28:cb:d5:d2:e5:
bb:84:3c:f7:e4:72:b6:d2:24:76:60:3f:75:1f:dd:
23:85:65:1c:d0:86:e3:12:3e:59:e1:92:b9:17:c7:
68:9c:a9:15:ff:f8:5e:b2:90:a0:35:a8:80:4b:3d:
e6:a6:bc:2e:68:ce:69:fd:32:d4:a1:cb:00:2e:73:
7a:c8:b1:76:cd:92:c6:d2:f2:66:15:88:68:9b:9a:
83:b1:7b:85:58:ee:3b:b6:a0:57:43:58:80:52:18:
44:fa:a4:65:ef:3c:78:95:70:a6:f8:96:03:59:a4:
22:1b:88:a6:b6:fa:71:fa:bf:0c:17:51:f6:cb:d8:
70:dd:fe:3e:75:12:e0:39:ac:7f:1d:67:65:a3:a8:
5c:6b:c5:82:5b:78:7a:b1:7d:bd:47:f7:63:3f:d6:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4B:4A:12:DF:F4:86:A3:CB:BD:7C:E4:8D:4D:51:BE:D1:D5:C6:31
X509v3 Authority Key Identifier:
keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:79:1b:f5:4b:66:aa:76:5b:79:95:c9:7f:09:50:42:06:0a:
23:4c:dc:2a:8b:34:59:cc:f9:00:d5:6b:6c:c2:26:17:5a:a2:
93:83:32:90:b6:4b:18:e6:b8:37:e2:9b:aa:35:78:f9:65:37:
4c:19:1d:47:53:e4:c8:cb:e2:dd:ed:5d:38:0a:4c:53:e5:71:
3c:be:ee:3d:f8:23:e9:fd:45:8d:a5:46:0c:70:92:19:01:b9:
6d:3a:33:fc:08:ac:aa:0c:d7:92:5e:3e:71:54:12:24:c1:2a:
fa:65:58:6b:73:15:a7:3f:b3:f1:8c:90:af:5b:89:c6:b9:13:
fa:87:fb:07:a1:2d:7c:03:3c:96:a0:84:f1:04:15:5b:a2:35:
fe:9d:62:a7:2d:11:b5:80:91:34:0a:1b:63:2c:67:16:35:4f:
18:46:bb:75:92:88:e8:2a:d5:d2:8e:4a:fb:a1:a1:cb:70:26:
42:f3:fd:c9:7f:39:31:62:d9:25:37:22:29:6b:14:e1:90:2f:
3d:7b:87:69:09:0f:43:03:29:95:73:51:a3:4b:2e:b0:6b:f3:
4b:61:8b:22:d6:28:9a:1a:2e:2f:83:a1:b1:f3:16:03:5c:00:
47:73:ed:99:9f:c1:76:73:a5:f9:50:a2:4d:4a:22:6e:24:9b:
5d:0e:ce:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFVwMbtnar7/eLDpu5GXVZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjJhMDczNzgyMjNhY2U1NmE4NGNlZmQzMDc4MjI4Y2Iw
YmU1MmUwHhcNMjYxMDE5MjAwMDU5WhcNMjYxMDIwMjAwMDU5WjAzMTEwLwYDVQQD
EyhjZDRiNGExMmRmZjQ4NmEzY2JiZDdjZTQ4ZDRkNTFiZWQxZDVjNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH8+o/NgAFxPTySAZxbW9bLC/Z8R
3cBxUHuFNYJbqTefVn1JeKMWDml3CyFuO05X8zxmZMZ1deinV1+Q3iAHIpnElTFb
tPcSd5vZ+TWHjM6E7EaBwdeOIvc3DwAaJZFfdaxrKMvV0uW7hDz35HK20iR2YD91
H90jhWUc0IbjEj5Z4ZK5F8donKkV//hespCgNaiASz3mprwuaM5p/TLUocsALnN6
yLF2zZLG0vJmFYhom5qDsXuFWO47tqBXQ1iAUhhE+qRl7zx4lXCm+JYDWaQiG4im
tvpx+r8MF1H2y9hw3f4+dRLgOax/HWdlo6hca8WCW3h6sX29R/djP9ZrzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1LShLf9Iajy7185I1NUb7R1cYxMB8GA1UdIwQY
MBaAFA9ioHN4IjrOVqhM79MHgijLC+UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJLZ2MzZ2lPczVXcUV6djB3ZUNLTXNMNVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xMTk5YTctN2I4YS00YzlkLTk0MmUt
OGIwNjJmMGVkNTFiLzEvRDJLZ2MzZ2lPczVXcUV6djB3ZUNLTXNMNVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xMTk5YTctN2I4YS00YzlkLTk0MmUtOGIwNjJmMGVkNTFi
LzEvRDJLZ2MzZ2lPczVXcUV6djB3ZUNLTXNMNVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHkb9Utm
qnZbeZXJfwlQQgYKI0zcKos0Wcz5ANVrbMImF1qik4MykLZLGOa4N+KbqjV4+WU3
TBkdR1PkyMvi3e1dOApMU+VxPL7uPfgj6f1FjaVGDHCSGQG5bToz/AisqgzXkl4+
cVQSJMEq+mVYa3MVpz+z8YyQr1uJxrkT+of7B6EtfAM8lqCE8QQVW6I1/p1ipy0R
tYCRNAobYyxnFjVPGEa7dZKI6CrV0o5K+6Ghy3AmQvP9yX85MWLZJTciKWsU4ZAv
PXuHaQkPQwMplXNRo0susGvzS2GLItYomhouL4OhsfMWA1wAR3PtmZ/BdnOl+VCi
TUoibiSbXQ7OBQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:43:29 2026 by rpki-client