Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: 86u+x6hQ6rsIypkqIvK5UTSo/RDxRRBueshPs/8ZbMc=
Subject key identifier: AD:8A:F4:B2:57:F0:72:F5:0E:FE:FB:5A:60:AA:24:56:6D:75:53:66
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 01A08C7BAF1C46CF4E5D9FDBE224EC86551D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 139F
Signing time: Thu 10 Sep 2026 18:01:50 +0000
Manifest this update: Thu 10 Sep 2026 18:01:50 +0000
Manifest next update: Fri 11 Sep 2026 18:01:50 +0000
Files and hashes: 1: 24LmoNlDA3mTST7ILFjXRoavbLc.roa (hash: ChZQ2voHnXOpu6Bgdd654y5XHIYOuPkH15v1qaYadLA=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: UfjCJSHYLbyzEdDPXX9ZLtxqsvdyBlR+y1Uusd9ZbCM=)
5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:af:1c:46:cf:4e:5d:9f:db:e2:24:ec:86:55:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Sep 10 18:01:50 2026 GMT
Not After : Sep 11 18:01:50 2026 GMT
Subject: CN=ad8af4b257f072f50efefb5a60aa24566d755366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:31:25:14:bf:e1:c7:ee:03:ee:39:5d:95:
82:50:eb:9c:8d:00:0d:50:fe:b4:a1:60:07:56:31:
cd:fa:6e:96:ba:01:82:78:b9:85:f0:1f:88:f6:46:
85:2b:7a:63:96:22:5a:80:b7:d7:27:a0:82:0a:54:
b3:9f:22:75:7a:52:f8:0f:cd:ae:c5:db:05:61:dd:
e9:89:62:37:ab:61:ef:bf:3c:f8:90:70:a2:ab:2f:
a9:80:5d:ac:7c:68:43:c0:59:92:51:66:e0:65:02:
76:2d:b7:d6:41:3e:06:cb:26:e7:11:96:13:f2:69:
c9:9f:dd:0d:83:34:fb:38:c9:09:81:1f:76:68:f1:
b7:92:dc:d5:6a:6d:de:c0:60:3b:e5:f5:2c:ac:52:
e6:e8:09:4f:6d:54:c5:d7:83:82:de:81:8c:17:c3:
52:23:9b:b0:45:78:70:d9:20:b3:22:66:20:51:60:
57:db:dd:b8:01:90:03:5f:8a:b4:38:4f:26:a5:18:
a0:b3:71:16:42:11:5b:50:a6:ce:82:9e:86:ff:3b:
aa:82:1d:2e:de:81:52:4f:1c:f4:cc:bb:27:77:ad:
a6:10:58:64:71:73:3f:0e:58:c1:ea:de:54:71:97:
04:d6:0f:c9:65:ea:9c:8a:d1:aa:73:d6:97:13:77:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8A:F4:B2:57:F0:72:F5:0E:FE:FB:5A:60:AA:24:56:6D:75:53:66
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:99:30:48:cd:e2:38:c8:70:61:e8:bb:ad:75:8d:30:fe:01:
d2:72:27:ae:b4:70:0a:81:ff:04:a9:ea:9d:46:64:2d:e8:07:
86:b4:0f:cd:3a:d1:60:1c:28:62:d4:5a:00:68:07:d2:8a:e6:
ca:64:b6:fc:96:4f:ec:b3:7d:06:64:88:50:95:7d:8d:f3:b9:
89:b8:e7:18:80:67:23:0c:ec:81:f9:97:c3:3e:fa:8a:e4:fc:
49:b8:5c:e1:45:96:11:d1:c3:ed:fe:64:ff:e5:67:a8:4a:e8:
8d:c2:d2:60:f2:b8:ce:4e:d0:59:db:5a:53:01:48:77:9b:31:
5c:22:47:4a:60:da:0c:3d:68:11:b0:2c:52:53:f7:5a:59:d0:
01:32:4d:ac:f7:b5:d7:fc:96:e1:c2:a8:38:05:e7:66:39:8f:
2c:4f:c9:db:57:ed:cf:50:a3:8f:ca:60:69:17:4b:da:75:68:
51:cd:c6:12:b4:14:18:42:ca:c4:73:ff:fd:8b:a2:0f:d0:52:
02:35:1a:1e:1c:d4:f1:1e:58:f1:3a:80:05:c1:bb:18:ed:42:
e9:22:f5:32:77:d0:83:e5:36:15:39:aa:79:c7:3d:3f:16:95:
52:1e:51:04:d0:20:1a:50:c0:67:81:b1:ed:46:cc:ac:17:36:
3d:8f:24:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe68cRs9OXZ/b4iTshlUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjYwOTEwMTgwMTUwWhcNMjYwOTExMTgwMTUwWjAzMTEwLwYDVQQD
EyhhZDhhZjRiMjU3ZjA3MmY1MGVmZWZiNWE2MGFhMjQ1NjZkNzU1MzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfExJRS/4cfuA+45XZWCUOucjQAN
UP60oWAHVjHN+m6WugGCeLmF8B+I9kaFK3pjliJagLfXJ6CCClSznyJ1elL4D82u
xdsFYd3piWI3q2Hvvzz4kHCiqy+pgF2sfGhDwFmSUWbgZQJ2LbfWQT4GyybnEZYT
8mnJn90NgzT7OMkJgR92aPG3ktzVam3ewGA75fUsrFLm6AlPbVTF14OC3oGMF8NS
I5uwRXhw2SCzImYgUWBX2924AZADX4q0OE8mpRigs3EWQhFbUKbOgp6G/zuqgh0u
3oFSTxz0zLsnd62mEFhkcXM/DljB6t5UcZcE1g/JZeqcitGqc9aXE3eQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2K9LJX8HL1Dv77WmCqJFZtdVNmMB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpkwSM3i
OMhwYei7rXWNMP4B0nInrrRwCoH/BKnqnUZkLegHhrQPzTrRYBwoYtRaAGgH0orm
ymS2/JZP7LN9BmSIUJV9jfO5ibjnGIBnIwzsgfmXwz76iuT8Sbhc4UWWEdHD7f5k
/+VnqErojcLSYPK4zk7QWdtaUwFId5sxXCJHSmDaDD1oEbAsUlP3WlnQATJNrPe1
1/yW4cKoOAXnZjmPLE/J21ftz1Cjj8pgaRdL2nVoUc3GErQUGELKxHP//YuiD9BS
AjUaHhzU8R5Y8TqABcG7GO1C6SL1MnfQg+U2FTmqecc9PxaVUh5RBNAgGlDAZ4Gx
7UbMrBc2PY8kOg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:45:17 2026 by rpki-client