Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: 7moTLt6rOJla3M+7CG6nf4NtlXkjhZ+1lltyBCn/Meg=
Subject key identifier: 81:F1:67:65:42:54:7C:B9:3A:3D:E5:7F:40:AE:16:AF:A7:F1:47:0B
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 01A18F42FD4D2EC1003DDAC8167034E2AD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 1425
Signing time: Sat 31 Oct 2026 00:01:34 +0000
Manifest this update: Sat 31 Oct 2026 00:01:34 +0000
Manifest next update: Sun 01 Nov 2026 00:01:34 +0000
Files and hashes: 1: 24LmoNlDA3mTST7ILFjXRoavbLc.roa (hash: ChZQ2voHnXOpu6Bgdd654y5XHIYOuPkH15v1qaYadLA=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: B99Y3Bp42K+aSgfBsE6ZFg4l0zLMExA49krrQqQtmpY=)
5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:fd:4d:2e:c1:00:3d:da:c8:16:70:34:e2:ad:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Oct 31 00:01:34 2026 GMT
Not After : Nov 1 00:01:34 2026 GMT
Subject: CN=81f1676542547cb93a3de57f40ae16afa7f1470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:26:cc:8e:22:23:6f:3d:0b:a4:50:33:bf:
2d:6e:ae:54:2d:15:cf:a2:5a:c1:77:0a:10:9d:3e:
45:9a:66:c3:08:27:13:98:2f:eb:67:e4:f5:51:57:
9a:9e:22:45:d8:a8:f1:ff:ae:31:48:ca:ae:33:4f:
54:fd:16:f8:68:c9:01:10:5d:6b:96:8b:5d:a3:5f:
bc:d8:ae:6a:5a:35:c6:c2:19:e3:ba:c6:11:fb:8f:
c8:a9:de:3d:c1:90:55:7f:91:3e:98:7f:26:70:13:
d3:25:40:ef:1f:64:a3:d8:d4:1d:4e:75:93:ec:7e:
b6:19:10:8e:49:64:e4:b9:e6:68:19:a9:b5:27:7a:
a5:5f:7e:5d:ee:d6:4a:e4:43:63:2d:82:77:72:4c:
1f:12:0a:9d:be:cb:74:aa:06:39:d0:da:2b:78:0a:
8d:b8:ad:fb:eb:1a:ef:84:8c:df:e7:9e:02:72:c5:
39:9d:1f:db:37:a2:61:75:22:fe:9e:02:72:2f:83:
d5:c4:44:85:3c:6c:5a:15:a7:a3:9a:9e:55:2b:d1:
0f:d2:df:4a:ff:1b:24:b7:fa:8e:eb:9e:88:ae:60:
c9:80:d5:b1:74:64:f0:11:1b:71:12:17:f9:40:85:
4e:3d:7e:3d:ee:3a:2d:82:92:f6:8f:63:96:28:a3:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:67:65:42:54:7C:B9:3A:3D:E5:7F:40:AE:16:AF:A7:F1:47:0B
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:cb:12:4f:8e:38:e3:c7:ce:47:66:f1:73:93:4f:15:e4:
d1:65:69:cd:fb:07:6e:d7:a0:61:77:7f:22:a0:f8:01:c7:30:
e6:6a:c7:ef:6c:99:8e:6a:92:0d:55:e4:9c:5c:e9:24:88:1a:
d5:78:5e:bf:86:a6:f1:7a:d7:5a:a3:7b:cd:48:63:b7:8c:8c:
bd:0a:3c:3c:f3:da:1b:82:31:90:29:fc:01:2d:f8:0a:2b:8e:
fa:b5:be:33:12:6b:d2:d3:88:a7:33:9c:88:76:03:bf:5c:6d:
14:a8:1b:e5:f2:8f:6d:a2:30:74:c3:0d:aa:93:d2:21:53:f4:
2e:e8:64:85:92:e2:81:4f:e7:41:df:74:84:9a:ec:80:1b:95:
80:2a:de:58:ee:f0:cb:ea:b6:ee:38:67:e0:c3:5f:97:ec:f6:
92:63:82:dc:d2:c7:9c:39:b6:6d:be:ba:fb:b2:51:d3:f8:96:
93:52:f9:2d:50:62:d4:d5:03:11:44:74:66:08:a6:d3:2c:ab:
51:64:4b:49:b1:f6:ce:95:22:7c:49:78:1e:ae:01:da:e4:6d:
4e:84:ce:7e:d2:e1:34:e6:e2:aa:6b:62:14:fd:49:45:20:66:
d2:1c:7a:16:93:22:bd:53:76:d3:52:e9:41:5a:c3:86:03:1a:
8f:79:2c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPQv1NLsEAPdrIFnA04q1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjYxMDMxMDAwMTM0WhcNMjYxMTAxMDAwMTM0WjAzMTEwLwYDVQQD
Eyg4MWYxNjc2NTQyNTQ3Y2I5M2EzZGU1N2Y0MGFlMTZhZmE3ZjE0NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb4mzI4iI289C6RQM78tbq5ULRXP
olrBdwoQnT5FmmbDCCcTmC/rZ+T1UVeaniJF2Kjx/64xSMquM09U/Rb4aMkBEF1r
lotdo1+82K5qWjXGwhnjusYR+4/Iqd49wZBVf5E+mH8mcBPTJUDvH2Sj2NQdTnWT
7H62GRCOSWTkueZoGam1J3qlX35d7tZK5ENjLYJ3ckwfEgqdvst0qgY50NoreAqN
uK376xrvhIzf554CcsU5nR/bN6JhdSL+ngJyL4PVxESFPGxaFaejmp5VK9EP0t9K
/xskt/qO656IrmDJgNWxdGTwERtxEhf5QIVOPX497jotgpL2j2OWKKO0HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHxZ2VCVHy5Oj3lf0CuFq+n8UcLMB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHjLEk+O
OOPHzkdm8XOTTxXk0WVpzfsHbtegYXd/IqD4Accw5mrH72yZjmqSDVXknFzpJIga
1Xhev4am8XrXWqN7zUhjt4yMvQo8PPPaG4IxkCn8AS34CiuO+rW+MxJr0tOIpzOc
iHYDv1xtFKgb5fKPbaIwdMMNqpPSIVP0LuhkhZLigU/nQd90hJrsgBuVgCreWO7w
y+q27jhn4MNfl+z2kmOC3NLHnDm2bb66+7JR0/iWk1L5LVBi1NUDEUR0Zgim0yyr
UWRLSbH2zpUifEl4Hq4B2uRtToTOftLhNObiqmtiFP1JRSBm0hx6FpMivVN201Lp
QVrDhgMaj3ks1A==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:41 2026 by rpki-client