Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: C7fpWpATUiV491tL3pnxwqK9r7t/22Uy4uXRtV3mtVg=
Subject key identifier: D9:87:A6:AD:B6:A8:26:29:FD:5A:67:27:AB:63:88:B6:F4:7E:EF:4C
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01A1284354B2AC815ABD6D98F79348A46DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 00:01:03 +0000
Manifest this update: Sun 11 Oct 2026 00:01:03 +0000
Manifest next update: Mon 12 Oct 2026 00:01:03 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: bvclM7n+KEJNrKoL7x6Nod19/aqimWYjVqLaIuUkXMI=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:54:b2:ac:81:5a:bd:6d:98:f7:93:48:a4:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Oct 11 00:01:03 2026 GMT
Not After : Oct 12 00:01:03 2026 GMT
Subject: CN=d987a6adb6a82629fd5a6727ab6388b6f47eef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:0f:67:a0:14:10:eb:59:77:e3:45:79:62:
bb:24:32:c5:29:37:4c:af:67:1d:e5:8b:88:ce:4d:
78:8b:36:8b:1e:15:38:f1:e2:e7:76:aa:7a:93:6a:
57:97:a0:b5:e3:4f:58:b5:03:d0:5e:f9:72:f8:eb:
b4:70:6a:13:11:e0:ad:42:b6:62:80:ea:15:03:d0:
6b:35:06:e2:cb:f9:83:f3:ea:d6:c3:21:c4:3c:57:
79:f2:b9:ea:1c:df:2c:83:fe:63:82:44:8f:5f:71:
b0:ce:3a:99:6c:b0:f4:c5:cf:89:50:c8:88:de:e0:
1c:ab:4f:82:7b:47:c1:1e:22:b6:19:a2:9d:33:b7:
b4:6e:e8:04:0c:8e:cb:f4:fb:87:96:53:15:81:cd:
6e:ae:61:9c:da:75:fa:96:3c:1d:06:6a:b8:15:17:
1b:04:cd:6e:95:8c:a6:85:a5:9f:ad:02:3f:b1:b1:
03:b6:69:17:da:3b:c0:93:70:b2:b7:9b:69:e2:a7:
8b:07:57:90:ee:b3:d7:69:d6:e5:5f:53:7f:64:00:
39:83:88:c0:b4:6c:8c:55:0a:38:43:dd:a1:e5:ec:
72:5e:0a:50:f4:c3:2b:38:f8:8d:96:66:1e:ee:c5:
63:d9:03:45:91:e2:95:1c:73:8a:0d:59:20:0a:87:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:A6:AD:B6:A8:26:29:FD:5A:67:27:AB:63:88:B6:F4:7E:EF:4C
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:d7:fe:56:0c:e8:6c:bb:8d:56:df:25:94:a7:f5:b7:7c:
86:5f:56:87:30:4b:f4:ce:76:f9:25:1f:84:16:10:33:c1:d5:
fa:22:04:c5:fd:09:21:7a:53:e1:5a:5d:c4:c4:e7:10:10:ac:
2c:60:48:6a:bb:86:88:ad:14:0b:34:67:37:b4:db:1a:7d:59:
00:65:31:59:df:99:e0:70:c7:55:2d:92:21:1b:54:e2:8d:27:
f7:6c:0e:85:74:5a:c8:1d:b5:68:b5:78:67:ee:67:5c:a9:45:
e6:75:f2:7f:21:d9:f8:91:c4:19:f1:2b:52:34:c0:59:1b:bb:
4c:64:d2:92:b0:11:1f:6b:cc:22:a6:97:40:b7:9e:2a:16:11:
cb:8b:15:22:e8:ab:c8:78:96:2b:4b:02:09:e2:a4:2f:e1:a8:
3a:ae:9a:28:3d:5a:8d:fc:59:94:34:ef:7f:87:2f:60:6b:2f:
ca:d3:cf:a7:58:4c:6a:08:0f:a7:1b:40:d5:4e:d8:f2:ec:0f:
77:25:cb:f0:d5:f8:66:fe:85:c8:cd:86:58:a2:4c:f2:eb:4a:
ae:e5:e3:7c:a9:ae:29:86:7e:64:83:7c:9c:67:f2:04:45:b8:
9d:e6:82:fb:bd:45:90:79:1d:c7:ca:61:79:8d:44:06:21:9e:
ef:f4:cf:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoQ1SyrIFavW2Y95NIpG3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl
YzgyYjMwHhcNMjYxMDExMDAwMTAzWhcNMjYxMDEyMDAwMTAzWjAzMTEwLwYDVQQD
EyhkOTg3YTZhZGI2YTgyNjI5ZmQ1YTY3MjdhYjYzODhiNmY0N2VlZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU8PZ6AUEOtZd+NFeWK7JDLFKTdM
r2cd5YuIzk14izaLHhU48eLndqp6k2pXl6C1409YtQPQXvly+Ou0cGoTEeCtQrZi
gOoVA9BrNQbiy/mD8+rWwyHEPFd58rnqHN8sg/5jgkSPX3GwzjqZbLD0xc+JUMiI
3uAcq0+Ce0fBHiK2GaKdM7e0bugEDI7L9PuHllMVgc1urmGc2nX6ljwdBmq4FRcb
BM1ulYymhaWfrQI/sbEDtmkX2jvAk3Cyt5tp4qeLB1eQ7rPXadblX1N/ZAA5g4jA
tGyMVQo4Q92h5exyXgpQ9MMrOPiNlmYe7sVj2QNFkeKVHHOKDVkgCocN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmHpq22qCYp/VpnJ6tjiLb0fu9MMB8GA1UdIwQY
MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt
ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj
LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNHX/lYM
6Gy7jVbfJZSn9bd8hl9WhzBL9M52+SUfhBYQM8HV+iIExf0JIXpT4VpdxMTnEBCs
LGBIaruGiK0UCzRnN7TbGn1ZAGUxWd+Z4HDHVS2SIRtU4o0n92wOhXRayB21aLV4
Z+5nXKlF5nXyfyHZ+JHEGfErUjTAWRu7TGTSkrARH2vMIqaXQLeeKhYRy4sVIuir
yHiWK0sCCeKkL+GoOq6aKD1ajfxZlDTvf4cvYGsvytPPp1hMaggPpxtA1U7Y8uwP
dyXL8NX4Zv6FyM2GWKJM8utKruXjfKmuKYZ+ZIN8nGfyBEW4neaC+71FkHkdx8ph
eY1EBiGe7/TPjg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:19:49 2026 by rpki-client