Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: Z8D+2zbCkNcbfG+fNqk69jFdU/eaGaeo980xpEKc64w=
Subject key identifier: 8B:7E:26:EB:01:51:25:C0:D9:5C:71:C9:D5:B3:81:6F:EE:1C:AB:B9
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 01A13CDC6EDF59BEC452B0F41315D174F682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 00:00:41 +0000
Manifest this update: Thu 15 Oct 2026 00:00:41 +0000
Manifest next update: Fri 16 Oct 2026 00:00:41 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: eJLnSh3dnaODTEWYPZexD5FE903k0hYXFiRcA8RArk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:6e:df:59:be:c4:52:b0:f4:13:15:d1:74:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Oct 15 00:00:41 2026 GMT
Not After : Oct 16 00:00:41 2026 GMT
Subject: CN=8b7e26eb015125c0d95c71c9d5b3816fee1cabb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:bd:ac:ef:0b:45:1b:f1:46:68:92:81:aa:
c2:c8:df:d8:48:b4:bf:cb:fc:ea:81:6e:0a:7b:6e:
0e:ae:47:46:7e:5f:1e:7a:dd:be:61:a4:66:2e:04:
35:a2:cb:66:62:dc:aa:e2:4f:16:3f:fa:f2:08:b2:
7d:68:ce:82:2e:d7:8b:26:f1:f9:74:c3:23:6e:c7:
99:41:fe:fc:53:be:00:d9:9a:28:e2:a2:ac:21:4f:
33:80:7e:5b:78:b2:e0:be:1c:0d:3c:cc:04:56:ca:
02:35:b8:78:d9:b2:ce:5f:01:19:a0:6d:f2:58:a0:
d2:87:53:00:aa:a2:5f:3b:05:e9:2d:29:ea:69:79:
0f:f2:89:e5:8f:ea:a4:d3:2c:46:77:ef:aa:69:70:
81:ed:02:83:78:0e:a6:0e:e9:ce:65:4e:0a:0e:00:
fa:14:eb:1f:4f:d3:5b:f7:07:e3:35:31:0b:3f:27:
54:8b:87:83:53:40:37:09:57:e2:b3:2d:ea:88:8a:
41:8a:1a:ce:8d:bb:69:7c:29:5b:e9:2e:a7:ec:dc:
d3:8f:79:93:44:2b:af:6d:02:f9:68:b3:ac:f5:16:
5c:1b:3a:9b:e8:16:c0:17:af:60:c3:83:7f:0f:48:
57:2d:50:e8:05:02:9d:91:80:2d:6f:5b:9e:ee:91:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:26:EB:01:51:25:C0:D9:5C:71:C9:D5:B3:81:6F:EE:1C:AB:B9
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:60:e5:4a:91:e7:94:d8:4b:18:ca:30:30:e7:97:5a:4b:dc:
d9:d5:27:bf:82:6a:20:d3:c3:2c:72:7a:b6:37:d4:0a:ed:3c:
35:89:44:96:24:0a:b5:a6:a2:86:cd:4c:7b:10:29:09:2b:ca:
e2:33:1b:eb:74:aa:4b:d0:f6:a1:2f:c6:66:51:f5:2e:da:05:
95:53:e7:df:8e:a4:be:fa:21:a4:c6:ff:86:7c:8f:b5:d8:de:
f2:53:a2:9f:a7:c4:c4:75:2b:4e:e0:33:11:82:d9:c4:e3:5d:
fd:45:5b:d1:a3:0a:95:c9:7e:8c:76:69:4a:61:09:da:67:81:
3c:a4:c1:83:fc:bb:60:39:64:4b:5a:6e:a7:12:6d:7a:7f:d9:
44:90:7b:82:f1:2f:0b:b2:d9:9f:77:60:b4:27:be:80:8e:c9:
3f:6f:e5:7d:83:5a:55:0c:2f:ac:f0:63:e4:33:b8:41:c4:22:
29:96:fa:c7:ab:7f:22:fb:a7:6f:dd:46:06:04:15:47:45:69:
21:c9:87:d1:b6:d1:2e:f2:f3:7b:8b:ad:1a:20:8e:59:8b:c8:
11:29:45:e0:e8:5a:eb:53:7a:37:78:c0:83:17:4b:2b:3a:28:
33:53:6b:bb:a2:78:0c:65:ab:52:69:3b:5f:30:7f:89:a3:1e:
c8:32:e3:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83G7fWb7EUrD0ExXRdPaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjYxMDE1MDAwMDQxWhcNMjYxMDE2MDAwMDQxWjAzMTEwLwYDVQQD
Eyg4YjdlMjZlYjAxNTEyNWMwZDk1YzcxYzlkNWIzODE2ZmVlMWNhYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubO9rO8LRRvxRmiSgarCyN/YSLS/
y/zqgW4Ke24OrkdGfl8eet2+YaRmLgQ1ostmYtyq4k8WP/ryCLJ9aM6CLteLJvH5
dMMjbseZQf78U74A2Zoo4qKsIU8zgH5beLLgvhwNPMwEVsoCNbh42bLOXwEZoG3y
WKDSh1MAqqJfOwXpLSnqaXkP8onlj+qk0yxGd++qaXCB7QKDeA6mDunOZU4KDgD6
FOsfT9Nb9wfjNTELPydUi4eDU0A3CVfisy3qiIpBihrOjbtpfClb6S6n7NzTj3mT
RCuvbQL5aLOs9RZcGzqb6BbAF69gw4N/D0hXLVDoBQKdkYAtb1ue7pEdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt+JusBUSXA2VxxydWzgW/uHKu5MB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWDlSpHn
lNhLGMowMOeXWkvc2dUnv4JqINPDLHJ6tjfUCu08NYlEliQKtaaihs1MexApCSvK
4jMb63SqS9D2oS/GZlH1LtoFlVPn346kvvohpMb/hnyPtdje8lOin6fExHUrTuAz
EYLZxONd/UVb0aMKlcl+jHZpSmEJ2meBPKTBg/y7YDlkS1pupxJten/ZRJB7gvEv
C7LZn3dgtCe+gI7JP2/lfYNaVQwvrPBj5DO4QcQiKZb6x6t/Ivunb91GBgQVR0Vp
IcmH0bbRLvLze4utGiCOWYvIESlF4Oha61N6N3jAgxdLKzooM1Nru6J4DGWrUmk7
XzB/iaMeyDLjAQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:17 2026 by rpki-client