Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: xha6pebke/m3XbWodN9ZZECDC1bPt1kRdjNbim+gAyE=
Subject key identifier: DD:15:F4:EC:E5:19:D6:E6:42:79:47:D1:54:93:CC:80:CE:A4:BE:C2
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 01A0C93408D7C79BE95A9E3136B4248D9699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 11DF
Signing time: Tue 22 Sep 2026 13:00:25 +0000
Manifest this update: Tue 22 Sep 2026 13:00:25 +0000
Manifest next update: Wed 23 Sep 2026 13:00:25 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: F421kDTPMgqd8qzQDW2jI35+hA5ffOABUCIj+PGZF60=)
2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:08:d7:c7:9b:e9:5a:9e:31:36:b4:24:8d:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Sep 22 13:00:25 2026 GMT
Not After : Sep 23 13:00:25 2026 GMT
Subject: CN=dd15f4ece519d6e6427947d15493cc80cea4bec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:1d:22:af:71:94:98:1a:1d:1d:10:27:fc:
68:12:af:da:24:ee:9d:ab:1f:f6:a0:35:f7:9a:2f:
fe:55:36:a7:13:f0:6a:21:5b:e0:54:f8:89:4d:fc:
38:ec:f4:32:0b:7d:bf:64:02:21:84:08:f2:13:6b:
9f:47:b9:8d:2b:3d:c5:8f:94:44:8f:d5:b1:c7:14:
ea:86:84:83:83:ac:e3:61:52:a9:2f:94:3e:10:d9:
86:cb:b0:d7:44:3a:c3:df:bc:25:75:f4:2f:21:85:
03:b8:f0:a7:5c:2d:91:de:32:bf:9a:4e:4f:dd:3c:
b1:d6:6a:65:6a:3e:f6:79:90:fd:d0:2d:b0:e3:c2:
1b:c8:b8:e2:0e:e6:7c:19:19:67:7b:ca:fa:32:1e:
87:5b:05:07:0f:8f:21:9f:99:cb:45:dc:d3:3d:e0:
d6:54:7b:ed:ce:da:43:dc:d5:3b:75:62:22:77:fd:
73:c6:6f:7d:22:fe:c8:f8:ca:39:43:ab:f0:24:b5:
9e:d9:7c:27:45:4b:92:94:09:90:4b:59:d0:f8:6d:
b6:ab:15:53:a3:ad:e4:27:01:6e:c7:9c:bd:30:6e:
87:bd:84:27:91:89:2f:d5:49:cf:ff:f7:e2:27:58:
83:25:aa:bc:a5:8f:d0:b2:d2:a2:b0:7f:31:d5:56:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:F4:EC:E5:19:D6:E6:42:79:47:D1:54:93:CC:80:CE:A4:BE:C2
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d4:94:4c:da:5f:9a:80:65:11:6d:33:c8:3f:ac:c4:97:30:
2a:0a:f6:a7:5f:f3:ac:62:16:09:33:01:93:7f:7a:c3:56:76:
27:4b:7c:13:3e:95:e6:4d:a3:a2:b9:41:5f:db:62:2f:08:e6:
04:82:fd:00:0a:e1:8a:60:6b:92:51:4b:de:e7:fd:a7:86:fc:
ba:c5:9d:86:3c:91:b2:24:de:b7:36:bd:4a:6e:ee:0d:a5:11:
89:48:21:7c:90:77:a2:c5:92:cf:1d:e8:5a:ee:2c:f4:a9:6d:
95:03:eb:53:26:5b:a3:29:68:2b:ad:9a:3b:95:7d:9a:61:6b:
be:30:1a:f8:09:af:6e:69:53:95:7b:a0:cd:76:20:e4:d3:7c:
e3:de:fd:5b:91:6b:d4:12:27:61:4a:e9:11:ed:13:6f:5f:d4:
f3:69:cd:41:51:22:b1:e2:46:76:cd:e8:fa:9e:72:2e:3a:ca:
62:4a:56:ff:ef:f1:3d:86:bf:fc:e4:e3:c2:76:f1:46:82:5c:
fd:33:e0:18:06:81:08:42:41:b1:1f:cf:92:49:63:81:0f:79:
ba:d5:0a:3b:a2:87:3e:67:fa:37:0e:05:aa:9d:1d:4c:13:ff:
dd:4f:0c:8a:a4:c9:4e:17:b4:82:c4:f7:04:62:58:fd:c8:42:
0e:88:07:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNAjXx5vpWp4xNrQkjZaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx
NjYwMDgwHhcNMjYwOTIyMTMwMDI1WhcNMjYwOTIzMTMwMDI1WjAzMTEwLwYDVQQD
EyhkZDE1ZjRlY2U1MTlkNmU2NDI3OTQ3ZDE1NDkzY2M4MGNlYTRiZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKwdIq9xlJgaHR0QJ/xoEq/aJO6d
qx/2oDX3mi/+VTanE/BqIVvgVPiJTfw47PQyC32/ZAIhhAjyE2ufR7mNKz3Fj5RE
j9WxxxTqhoSDg6zjYVKpL5Q+ENmGy7DXRDrD37wldfQvIYUDuPCnXC2R3jK/mk5P
3Tyx1mplaj72eZD90C2w48IbyLjiDuZ8GRlne8r6Mh6HWwUHD48hn5nLRdzTPeDW
VHvtztpD3NU7dWIid/1zxm99Iv7I+Mo5Q6vwJLWe2XwnRUuSlAmQS1nQ+G22qxVT
o63kJwFux5y9MG6HvYQnkYkv1UnP//fiJ1iDJaq8pY/QstKisH8x1VZN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0V9OzlGdbmQnlH0VSTzIDOpL7CMB8GA1UdIwQY
MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt
NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh
LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9SUTNpf
moBlEW0zyD+sxJcwKgr2p1/zrGIWCTMBk396w1Z2J0t8Ez6V5k2jorlBX9tiLwjm
BIL9AArhimBrklFL3uf9p4b8usWdhjyRsiTetza9Sm7uDaURiUghfJB3osWSzx3o
Wu4s9KltlQPrUyZboyloK62aO5V9mmFrvjAa+AmvbmlTlXugzXYg5NN84979W5Fr
1BInYUrpEe0Tb1/U82nNQVEiseJGds3o+p5yLjrKYkpW/+/xPYa//OTjwnbxRoJc
/TPgGAaBCEJBsR/PkkljgQ95utUKO6KHPmf6Nw4Fqp0dTBP/3U8MiqTJThe0gsT3
BGJY/chCDogHKA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:08:32 2026 by rpki-client