Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: rNGzFBbd8yCuaBYaCrob+smY/xgQ+FNoz80zl5l/gjc=
Subject key identifier: 75:08:20:00:D3:94:81:E5:4B:78:B2:25:8F:1B:A1:17:0E:FF:98:2F
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 01A13E944A5ADFD4FD24D2CC1429174F5EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 130C
Signing time: Thu 15 Oct 2026 08:01:08 +0000
Manifest this update: Thu 15 Oct 2026 08:01:08 +0000
Manifest next update: Fri 16 Oct 2026 08:01:08 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: S0c5vl+4K2TUQDvhKrpcDOQBKxVfUYGUZHxUpIlMQcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:4a:5a:df:d4:fd:24:d2:cc:14:29:17:4f:5e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Oct 15 08:01:08 2026 GMT
Not After : Oct 16 08:01:08 2026 GMT
Subject: CN=75082000d39481e54b78b2258f1ba1170eff982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:cd:9b:fd:7c:c9:6b:08:d7:c5:86:cd:66:
71:51:ce:cc:fe:24:00:cc:8d:f5:44:df:f5:48:38:
c9:e7:49:bb:0d:86:71:d6:0d:9a:9e:b5:a4:14:b6:
59:61:5e:5d:0f:c7:ee:38:78:ef:48:52:38:ab:f0:
4a:de:dd:49:70:8d:ad:0c:a6:bb:5e:c9:07:ec:18:
f1:55:0e:d8:bc:03:4e:5c:2e:94:52:38:e1:83:c9:
a7:8c:2d:4b:20:59:6a:d6:6c:1d:3f:5c:0d:a0:27:
a7:4b:9d:4d:5c:eb:ff:49:70:05:36:d0:db:52:8a:
71:0f:2b:98:8a:99:08:47:ea:f7:ae:33:13:be:1a:
78:b9:12:dc:0f:a4:73:dd:bb:62:35:64:dd:ed:5e:
e3:40:06:1a:c7:68:13:0a:9a:3a:1b:c8:d6:e7:cc:
40:85:ce:7f:d9:b8:6a:e8:d5:bf:c2:22:50:a1:fd:
25:47:07:f8:93:cd:9d:25:28:5c:5c:3c:1d:f3:7a:
f5:f3:74:84:b6:d5:a1:31:81:e2:dc:cc:aa:ee:5c:
3f:04:2e:68:0a:77:03:e6:70:26:e9:44:bc:07:09:
4c:c5:5f:e3:8d:58:22:94:ab:53:12:2b:b2:4b:3f:
09:5f:8d:0c:a5:0b:d0:4f:f8:84:ea:4d:ab:19:36:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:20:00:D3:94:81:E5:4B:78:B2:25:8F:1B:A1:17:0E:FF:98:2F
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:96:90:98:66:d6:de:b8:2b:b3:15:45:ca:be:cd:62:37:0a:
fa:88:59:82:5c:b7:63:07:c9:f2:5f:07:48:60:f5:85:ce:47:
10:64:26:41:c2:81:ad:ae:f3:1c:51:43:c9:fd:66:5f:87:11:
be:2b:ed:ed:32:9a:a6:c3:cb:8d:1b:0f:f3:c5:4f:cb:bb:37:
e2:e2:21:48:30:78:60:80:96:57:0a:ad:86:52:65:91:6b:63:
02:7e:cb:b8:eb:0d:d5:1d:18:56:43:6e:ed:87:92:e8:ef:10:
03:d9:01:f5:e9:4c:e4:72:d8:88:ab:5b:8d:76:6f:04:30:6c:
2f:e2:06:6d:b1:50:cf:9c:03:e9:54:af:78:bb:54:47:ba:e5:
c8:5a:96:5d:36:1a:3f:28:a8:a4:f4:4b:d6:44:b8:23:57:1d:
4a:38:ea:d1:e1:c0:77:f3:ae:aa:4a:d1:31:34:bf:19:9a:69:
51:d2:fd:27:45:be:13:14:6a:8a:2c:58:93:ce:ff:40:41:fe:
52:a9:eb:e6:ab:8b:17:3c:97:df:a5:65:d8:54:fc:a7:75:c6:
52:d4:b8:7e:a1:76:23:03:df:dc:4e:45:e6:25:c6:12:a2:85:
fe:44:04:49:25:1c:8d:62:18:31:37:e9:75:4f:cf:28:ca:b7:
58:bf:e3:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lEpa39T9JNLMFCkXT17qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm
ZDFkOTEwHhcNMjYxMDE1MDgwMTA4WhcNMjYxMDE2MDgwMTA4WjAzMTEwLwYDVQQD
Eyg3NTA4MjAwMGQzOTQ4MWU1NGI3OGIyMjU4ZjFiYTExNzBlZmY5ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e7Nm/18yWsI18WGzWZxUc7M/iQA
zI31RN/1SDjJ50m7DYZx1g2anrWkFLZZYV5dD8fuOHjvSFI4q/BK3t1JcI2tDKa7
XskH7BjxVQ7YvANOXC6UUjjhg8mnjC1LIFlq1mwdP1wNoCenS51NXOv/SXAFNtDb
UopxDyuYipkIR+r3rjMTvhp4uRLcD6Rz3btiNWTd7V7jQAYax2gTCpo6G8jW58xA
hc5/2bhq6NW/wiJQof0lRwf4k82dJShcXDwd83r183SEttWhMYHi3Myq7lw/BC5o
CncD5nAm6US8BwlMxV/jjVgilKtTEiuySz8JX40MpQvQT/iE6k2rGTZq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUIIADTlIHlS3iyJY8boRcO/5gvMB8GA1UdIwQY
MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct
OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5
LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZaQmGbW
3rgrsxVFyr7NYjcK+ohZgly3YwfJ8l8HSGD1hc5HEGQmQcKBra7zHFFDyf1mX4cR
vivt7TKapsPLjRsP88VPy7s34uIhSDB4YICWVwqthlJlkWtjAn7LuOsN1R0YVkNu
7YeS6O8QA9kB9elM5HLYiKtbjXZvBDBsL+IGbbFQz5wD6VSveLtUR7rlyFqWXTYa
PyiopPRL1kS4I1cdSjjq0eHAd/OuqkrRMTS/GZppUdL9J0W+ExRqiixYk87/QEH+
Uqnr5quLFzyX36Vl2FT8p3XGUtS4fqF2IwPf3E5F5iXGEqKF/kQESSUcjWIYMTfp
dU/PKMq3WL/jlg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:58 2026 by rpki-client