Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: vNrMX07KQNVTQz/ISpUkyaw/WSjXgj/XWOK4zIr5OXw=
Subject key identifier: 06:7D:3F:A4:87:C7:F3:A2:2F:49:63:47:48:B4:3D:35:08:E0:6E:4E
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 01A18074545EEE5F734551FBC61266C78DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1AC5
Signing time: Wed 28 Oct 2026 03:01:09 +0000
Manifest this update: Wed 28 Oct 2026 03:01:09 +0000
Manifest next update: Thu 29 Oct 2026 03:01:09 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: m0m+061KAj8pYX6Z11cgBRidGMSOftpyGEwVdwN9uKA=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:54:5e:ee:5f:73:45:51:fb:c6:12:66:c7:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Oct 28 03:01:09 2026 GMT
Not After : Oct 29 03:01:09 2026 GMT
Subject: CN=067d3fa487c7f3a22f49634748b43d3508e06e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:8e:3b:93:f7:59:36:54:8f:95:35:29:b9:
d5:10:da:14:c7:2a:b2:ef:ea:1e:37:96:ca:ef:12:
1c:61:28:f7:5a:2f:88:8e:05:ff:33:27:61:86:40:
81:e2:7b:bb:3b:01:35:92:95:0d:75:b5:35:5b:51:
da:33:ec:dd:74:52:8c:d8:b3:b9:ca:d4:02:bd:e0:
4c:b8:c2:73:24:35:f8:11:1f:bc:96:2a:73:1a:25:
cf:8e:b8:72:8b:1b:d6:5d:39:39:44:29:54:6f:ca:
17:48:0b:cb:25:cc:ef:67:8c:7b:0a:3b:4b:56:ba:
55:15:58:ec:80:a3:ab:1a:f1:32:6b:ae:a6:65:ff:
6e:0d:f6:94:67:44:3d:17:34:fe:55:50:d2:09:09:
22:68:87:96:97:d5:2c:f3:d8:76:8a:84:9a:6b:5a:
1b:66:1b:14:b0:02:11:89:db:d3:cb:30:c2:83:a2:
59:08:7a:33:f2:a4:1f:62:8f:f2:53:df:fe:cf:8a:
ea:47:0a:63:8b:ee:6c:fd:25:2c:89:80:2d:1e:b6:
5c:dc:64:d8:00:1c:15:25:c9:dd:4d:fd:c1:b7:74:
1d:3c:22:f7:c7:5d:d6:c9:0b:a9:43:94:c3:c0:1e:
47:db:de:43:b0:cf:85:d2:eb:dd:0e:ea:b0:46:f2:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7D:3F:A4:87:C7:F3:A2:2F:49:63:47:48:B4:3D:35:08:E0:6E:4E
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:33:7a:f6:03:e2:67:04:95:49:15:35:56:93:e2:07:b9:07:
da:df:bb:10:f4:26:a2:d1:ad:81:67:01:e1:39:22:fd:f4:5b:
3e:ec:40:55:e3:c3:c8:65:c2:28:16:f4:3e:e3:64:ca:dd:a8:
4c:86:9b:f5:57:f6:7b:ef:c9:c3:e1:8c:c7:fe:ed:c9:ea:2b:
87:1d:5e:a1:8d:be:6f:b8:8e:a0:15:77:96:5a:31:4f:bf:3b:
94:7e:50:fc:37:a7:58:ea:a6:a7:61:8e:01:33:52:ea:8c:20:
ca:84:c2:8d:b6:ad:0e:54:78:68:74:9e:df:16:4d:49:d0:75:
8d:de:34:b6:93:09:69:bb:99:38:39:6a:55:19:02:a4:e3:0f:
89:d4:54:54:d8:be:57:81:98:ec:86:8c:80:d6:96:69:47:75:
5f:d4:bd:8c:20:a1:ef:f8:bd:c2:7f:31:d6:8b:d0:31:6d:b7:
e8:21:e0:41:4f:7a:64:a0:81:1f:bb:ce:e5:ae:60:1b:4a:8a:
34:a9:44:eb:db:59:91:88:5f:d0:b9:92:3a:f3:75:53:46:03:
a6:4a:d3:53:0d:1b:bd:2d:ef:29:0f:b8:d9:78:2e:3c:8b:8d:
56:54:84:b9:7f:d3:52:bb:49:21:b4:38:cf:63:ea:ce:95:20:
86:cb:18:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdFRe7l9zRVH7xhJmx43CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5
MWRiYTIwHhcNMjYxMDI4MDMwMTA5WhcNMjYxMDI5MDMwMTA5WjAzMTEwLwYDVQQD
EygwNjdkM2ZhNDg3YzdmM2EyMmY0OTYzNDc0OGI0M2QzNTA4ZTA2ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm2OO5P3WTZUj5U1KbnVENoUxyqy
7+oeN5bK7xIcYSj3Wi+IjgX/MydhhkCB4nu7OwE1kpUNdbU1W1HaM+zddFKM2LO5
ytQCveBMuMJzJDX4ER+8lipzGiXPjrhyixvWXTk5RClUb8oXSAvLJczvZ4x7CjtL
VrpVFVjsgKOrGvEya66mZf9uDfaUZ0Q9FzT+VVDSCQkiaIeWl9Us89h2ioSaa1ob
ZhsUsAIRidvTyzDCg6JZCHoz8qQfYo/yU9/+z4rqRwpji+5s/SUsiYAtHrZc3GTY
ABwVJcndTf3Bt3QdPCL3x13WyQupQ5TDwB5H295DsM+F0uvdDuqwRvIHqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ9P6SHx/OiL0ljR0i0PTUI4G5OMB8GA1UdIwQY
MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt
M2VhODE5NGZiNDQ2LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2
LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjN69gPi
ZwSVSRU1VpPiB7kH2t+7EPQmotGtgWcB4Tki/fRbPuxAVePDyGXCKBb0PuNkyt2o
TIab9Vf2e+/Jw+GMx/7tyeorhx1eoY2+b7iOoBV3lloxT787lH5Q/DenWOqmp2GO
ATNS6owgyoTCjbatDlR4aHSe3xZNSdB1jd40tpMJabuZODlqVRkCpOMPidRUVNi+
V4GY7IaMgNaWaUd1X9S9jCCh7/i9wn8x1ovQMW236CHgQU96ZKCBH7vO5a5gG0qK
NKlE69tZkYhf0LmSOvN1U0YDpkrTUw0bvS3vKQ+42XguPIuNVlSEuX/TUrtJIbQ4
z2PqzpUghssYCg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:49:41 2026 by rpki-client