Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
File: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft (raw, json)
Hash identifier: ABYiOAA4OK0qXg061jRm9I6E7AEp/13P/o7QS+9IkFQ=
Subject key identifier: 7B:6F:08:5E:3E:8C:95:7C:56:47:4D:8E:44:A6:7F:AD:34:A1:D1:EB
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 01A132224E167FADA15DF296D73823F4E975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
Manifest number: D1
Signing time: Mon 12 Oct 2026 22:01:11 +0000
Manifest this update: Mon 12 Oct 2026 22:01:11 +0000
Manifest next update: Tue 13 Oct 2026 22:01:11 +0000
Files and hashes: 1: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl (hash: HaETYpyO2tpmi45EPyVxtVX4XqG25FX4lh8+Jk3vQKM=)
2: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (hash: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=)
3: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (hash: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:4e:16:7f:ad:a1:5d:f2:96:d7:38:23:f4:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Oct 12 22:01:11 2026 GMT
Not After : Oct 13 22:01:11 2026 GMT
Subject: CN=7b6f085e3e8c957c56474d8e44a67fad34a1d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:11:94:9c:d6:0e:bf:5c:76:f2:08:21:cb:
b3:16:f6:26:8c:da:87:48:45:51:b6:32:41:d2:d7:
43:3e:ec:db:cb:3f:88:3b:ae:d0:ee:38:fc:c6:51:
21:6a:6d:4b:b4:ec:c5:0c:2b:9a:00:6f:79:d8:bc:
07:89:3d:7b:cc:13:34:53:82:d5:b9:ec:f9:d5:97:
da:5a:04:ef:6f:4d:6d:4c:79:e2:a7:29:72:be:26:
86:96:66:1d:53:71:51:6b:8f:d8:63:02:2d:96:b7:
cc:03:1a:2b:9a:b8:ed:63:99:21:e4:70:32:6e:3f:
9e:52:ec:63:ab:02:b7:2e:98:45:42:1c:07:26:f1:
81:b7:17:13:2c:d6:c6:49:1a:50:e5:04:57:b1:bd:
0b:8e:c8:c4:cf:6d:31:5c:6a:3d:e7:64:b5:9f:c1:
3f:58:5f:c2:33:58:61:83:99:1f:87:0d:09:34:68:
22:ef:22:cd:74:ba:6e:ee:d1:96:9f:08:3b:37:e2:
9a:87:64:d5:cd:98:22:51:0e:9c:40:fc:c5:67:d6:
7a:19:b2:cd:1f:56:5d:5e:27:31:d7:ea:6a:25:25:
ee:53:9f:30:39:20:4e:0a:fa:51:00:31:02:bd:81:
b7:8d:ac:0c:e1:be:d7:5c:6e:c9:20:da:4f:16:74:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6F:08:5E:3E:8C:95:7C:56:47:4D:8E:44:A6:7F:AD:34:A1:D1:EB
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f5:ab:ee:a4:68:18:1e:2e:c7:65:0b:b6:01:a6:62:af:7d:
16:c8:b0:ff:26:7e:06:d2:14:70:4e:dc:dd:51:0d:02:2d:30:
22:4c:69:6d:a8:f3:32:f4:32:d3:41:91:69:0b:d6:ac:18:08:
fa:14:95:91:af:c0:8c:b6:a7:55:36:a0:9a:e2:2d:4f:84:a9:
0a:8d:91:0f:10:12:38:f4:5d:5f:ca:35:ac:e9:3d:ad:f7:3c:
91:77:35:94:50:6e:9b:b7:03:d9:db:24:c1:0d:8d:3b:f8:7c:
c6:5f:ae:0a:6b:fe:24:bd:60:b6:ce:af:75:c1:bb:98:d4:cb:
d4:11:be:6c:54:ef:7b:8d:92:cc:0e:e0:6f:37:44:b5:1d:ca:
93:64:79:69:0e:29:d2:9f:9e:0b:9a:cb:95:e6:8b:d8:7a:87:
da:fc:66:ed:0c:1e:de:f5:88:0e:92:69:a7:46:9f:f2:c7:53:
ac:10:cb:02:62:bb:2d:f9:69:69:0c:93:19:07:9e:cb:66:02:
3c:01:87:82:58:52:89:17:24:f3:77:60:1b:c2:a1:4e:9d:29:
4e:c8:30:23:56:de:f8:68:37:13:28:d5:25:c7:37:1d:9e:6d:
c9:f1:d3:1a:6d:38:06:68:33:ed:f5:0e:dc:1e:98:4d:4d:7f:
47:04:1b:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyIk4Wf62hXfKW1zgj9Ol1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkYzMwYzU5ZWFiMTUzMDVlYzNjOGJlNGU1MmNiNDQw
NmE5MmIwHhcNMjYxMDEyMjIwMTExWhcNMjYxMDEzMjIwMTExWjAzMTEwLwYDVQQD
Eyg3YjZmMDg1ZTNlOGM5NTdjNTY0NzRkOGU0NGE2N2ZhZDM0YTFkMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh8RlJzWDr9cdvIIIcuzFvYmjNqH
SEVRtjJB0tdDPuzbyz+IO67Q7jj8xlEham1LtOzFDCuaAG952LwHiT17zBM0U4LV
uez51ZfaWgTvb01tTHnipylyviaGlmYdU3FRa4/YYwItlrfMAxormrjtY5kh5HAy
bj+eUuxjqwK3LphFQhwHJvGBtxcTLNbGSRpQ5QRXsb0LjsjEz20xXGo952S1n8E/
WF/CM1hhg5kfhw0JNGgi7yLNdLpu7tGWnwg7N+Kah2TVzZgiUQ6cQPzFZ9Z6GbLN
H1ZdXicx1+pqJSXuU58wOSBOCvpRADECvYG3jawM4b7XXG7JINpPFnQ4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtvCF4+jJV8VkdNjkSmf600odHrMB8GA1UdIwQY
MBaAFA2R3DDFnqsVMF7DyL5OUstEBqkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85ZTA5NDAtYTQ3Zi00NTVmLWJiOGIt
YTgyOTMwNWNjMWExLzEvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS85ZTA5NDAtYTQ3Zi00NTVmLWJiOGItYTgyOTMwNWNjMWEx
LzEvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvWr7qRo
GB4ux2ULtgGmYq99Fsiw/yZ+BtIUcE7c3VENAi0wIkxpbajzMvQy00GRaQvWrBgI
+hSVka/AjLanVTagmuItT4SpCo2RDxASOPRdX8o1rOk9rfc8kXc1lFBum7cD2dsk
wQ2NO/h8xl+uCmv+JL1gts6vdcG7mNTL1BG+bFTve42SzA7gbzdEtR3Kk2R5aQ4p
0p+eC5rLleaL2HqH2vxm7Qwe3vWIDpJpp0af8sdTrBDLAmK7LflpaQyTGQeey2YC
PAGHglhSiRck83dgG8KhTp0pTsgwI1be+Gg3EyjVJcc3HZ5tyfHTGm04Bmgz7fUO
3B6YTU1/RwQbqg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:12 2026 by rpki-client