Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
File: dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft (raw, json)
Hash identifier: yTJPN8dJxUuPn9ZGgpkGcEBO/35tfZaq621wCuHMDh8=
Subject key identifier: 4A:DA:FB:87:3E:01:8E:A6:76:82:10:9E:28:CC:02:6B:6F:88:EC:22
Authority key identifier: 75:79:06:A6:F6:54:F1:05:B0:C4:36:8C:CB:F8:93:95:0E:63:D3:58
Certificate issuer: /CN=757906a6f654f105b0c4368ccbf893950e63d358
Certificate serial: 01A10AA6D419632F0A67C6B48770B69A4EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
Manifest number: 5F
Signing time: Mon 05 Oct 2026 06:01:07 +0000
Manifest this update: Mon 05 Oct 2026 06:01:07 +0000
Manifest next update: Tue 06 Oct 2026 06:01:07 +0000
Files and hashes: 1: dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl (hash: 6NdQrqKV7iY+uoWtRDQlPm/5sKFS8MsVeUu12wwKgjo=)
2: tl0OBmf8MnBulWTdK9V197lEdpc.asa (hash: /XgkkQXTtxStbqhMJsiGKYRiPgEqgz/otau+qpTZwuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a6:d4:19:63:2f:0a:67:c6:b4:87:70:b6:9a:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757906a6f654f105b0c4368ccbf893950e63d358
Validity
Not Before: Oct 5 06:01:07 2026 GMT
Not After : Oct 6 06:01:07 2026 GMT
Subject: CN=4adafb873e018ea67682109e28cc026b6f88ec22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:e6:fd:37:20:bd:38:63:7a:8a:17:f8:d2:
f5:29:b3:1f:a6:43:2a:7f:ff:13:c1:4c:82:cc:d8:
38:50:4e:1f:13:e9:74:e8:8d:1e:5a:3f:85:43:35:
45:f3:42:a2:cf:ee:96:1a:c1:33:a3:00:f4:28:23:
00:9e:21:4c:97:4c:a7:e0:e2:35:e7:c6:f0:4f:07:
f7:74:a3:66:b8:aa:cc:0c:c3:04:2f:2f:e1:05:0c:
1e:08:fa:f7:91:be:cf:37:69:e5:81:d2:ba:08:e8:
f7:65:ce:f6:ff:70:27:ac:d7:68:ed:14:3e:57:cc:
98:1c:a5:67:cc:00:7a:3e:80:8a:b6:d7:6a:70:21:
78:c9:e2:6b:b4:fa:bd:1a:78:6c:da:81:d9:d3:37:
52:91:2d:1d:e1:07:2e:97:8f:ae:f5:bf:90:5d:01:
37:35:ad:49:02:57:71:d0:72:eb:d6:dd:e7:b0:47:
6a:3f:03:10:97:64:0c:0e:e2:74:80:69:a6:58:1d:
41:82:fe:92:00:09:5b:42:2a:5b:42:d5:bc:6c:4c:
e6:b3:60:72:bd:cc:5c:67:39:2b:08:61:94:9a:2b:
a6:5c:16:88:fb:d3:c9:c6:9d:20:03:9e:5b:ac:70:
fb:86:79:5d:2c:34:5b:da:de:da:11:8b:6f:fc:b6:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:FB:87:3E:01:8E:A6:76:82:10:9E:28:CC:02:6B:6F:88:EC:22
X509v3 Authority Key Identifier:
keyid:75:79:06:A6:F6:54:F1:05:B0:C4:36:8C:CB:F8:93:95:0E:63:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f7:74:79:5f:f8:6e:56:ed:41:46:66:e3:b2:f3:9f:ad:55:
e1:b3:5a:cd:db:9d:f1:be:dc:e0:57:f2:1d:c0:98:44:10:1d:
31:8e:1a:f6:60:f0:38:bb:1b:e5:27:b4:94:fd:92:50:21:ab:
b6:0d:eb:36:b5:a6:ca:e1:c1:4a:af:87:e4:95:51:35:ea:37:
ad:e8:13:e5:57:e8:ea:6c:97:2e:84:80:f8:9d:91:fd:a1:8c:
49:da:85:d5:cd:ba:2d:6b:aa:41:76:44:2d:24:80:73:61:0d:
93:2e:dd:ea:16:04:6d:02:63:3e:00:bc:a9:92:ab:e5:cb:d5:
72:6d:5e:51:ac:e4:b8:61:41:86:7b:52:74:b8:fb:55:b1:95:
85:dc:89:fe:fa:9a:d4:a4:e2:e3:2a:bc:cf:e0:d5:51:c0:e2:
de:58:38:ac:af:e0:9e:e9:e5:d0:63:09:b4:25:82:d4:fa:7c:
c5:0c:7e:e6:0e:b2:89:f8:0f:a2:34:e0:e2:0d:73:33:b1:1b:
2b:94:7f:27:01:dd:87:53:0a:91:0f:cf:b7:84:8c:ab:37:b5:
f2:6b:3c:83:de:75:00:60:f4:af:dd:aa:ad:76:d3:c7:32:64:
21:39:86:a4:b6:bb:37:36:a2:2a:a7:ba:bf:a3:29:19:b1:ae:
04:b3:cf:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEKptQZYy8KZ8a0h3C2mk7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzkwNmE2ZjY1NGYxMDViMGM0MzY4Y2NiZjg5Mzk1MGU2
M2QzNTgwHhcNMjYxMDA1MDYwMTA3WhcNMjYxMDA2MDYwMTA3WjAzMTEwLwYDVQQD
Eyg0YWRhZmI4NzNlMDE4ZWE2NzY4MjEwOWUyOGNjMDI2YjZmODhlYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA637m/TcgvThjeooX+NL1KbMfpkMq
f/8TwUyCzNg4UE4fE+l06I0eWj+FQzVF80Kiz+6WGsEzowD0KCMAniFMl0yn4OI1
58bwTwf3dKNmuKrMDMMELy/hBQweCPr3kb7PN2nlgdK6COj3Zc72/3AnrNdo7RQ+
V8yYHKVnzAB6PoCKttdqcCF4yeJrtPq9Gnhs2oHZ0zdSkS0d4Qcul4+u9b+QXQE3
Na1JAldx0HLr1t3nsEdqPwMQl2QMDuJ0gGmmWB1Bgv6SAAlbQipbQtW8bEzms2By
vcxcZzkrCGGUmiumXBaI+9PJxp0gA55brHD7hnldLDRb2t7aEYtv/LYDvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEra+4c+AY6mdoIQnijMAmtviOwiMB8GA1UdIwQY
MBaAFHV5Bqb2VPEFsMQ2jMv4k5UOY9NYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhrR3B2WlU4UVd3eERhTXlfaVRsUTVqMDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84YjI4ZTUtMWM3Yi00NjkwLTg2OTAt
NzM3MjBhOTc0ZjBkLzEvZFhrR3B2WlU4UVd3eERhTXlfaVRsUTVqMDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84YjI4ZTUtMWM3Yi00NjkwLTg2OTAtNzM3MjBhOTc0ZjBk
LzEvZFhrR3B2WlU4UVd3eERhTXlfaVRsUTVqMDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfd0eV/4
blbtQUZm47Lzn61V4bNazdud8b7c4FfyHcCYRBAdMY4a9mDwOLsb5Se0lP2SUCGr
tg3rNrWmyuHBSq+H5JVRNeo3regT5Vfo6myXLoSA+J2R/aGMSdqF1c26LWuqQXZE
LSSAc2ENky7d6hYEbQJjPgC8qZKr5cvVcm1eUazkuGFBhntSdLj7VbGVhdyJ/vqa
1KTi4yq8z+DVUcDi3lg4rK/gnunl0GMJtCWC1Pp8xQx+5g6yifgPojTg4g1zM7Eb
K5R/JwHdh1MKkQ/Pt4SMqze18ms8g951AGD0r92qrXbTxzJkITmGpLa7NzaiKqe6
v6MpGbGuBLPPaQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:54 2026 by rpki-client