Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft (raw, json)
Hash identifier: i6QW+lXf4tw/hLL3jsrYSeTunUFzmYJo78pZOTabZ3I=
Subject key identifier: C1:F9:D0:58:5E:6D:07:C3:DB:58:81:FC:CF:B7:2E:2D:BF:82:DF:5F
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 01A1329089AD7C0A1A173D00B6EC8DF85EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
Manifest number: 0118
Signing time: Tue 13 Oct 2026 00:01:35 +0000
Manifest this update: Tue 13 Oct 2026 00:01:35 +0000
Manifest next update: Wed 14 Oct 2026 00:01:35 +0000
Files and hashes: 1: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl (hash: V8ObXzR3ertmO7N2oBHSZg9l+aBOIMY/gdtXmJW6UUU=)
2: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (hash: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:89:ad:7c:0a:1a:17:3d:00:b6:ec:8d:f8:5e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Oct 13 00:01:35 2026 GMT
Not After : Oct 14 00:01:35 2026 GMT
Subject: CN=c1f9d0585e6d07c3db5881fccfb72e2dbf82df5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:45:ed:44:5c:dc:a8:4b:03:64:8d:4a:bc:
c1:e9:30:a5:f8:f7:71:69:d5:a0:e6:e7:8e:f4:c1:
41:98:dd:c4:bb:59:9b:71:46:77:3a:7a:e4:cd:32:
c3:67:81:e6:6f:20:36:92:6f:6e:92:2b:a1:08:53:
b3:dd:a9:f8:84:82:43:c1:19:af:a7:9d:45:2d:f1:
c3:f9:33:d8:06:73:a8:96:fb:76:e7:5b:68:92:e4:
fe:ee:e3:11:f4:1c:eb:90:39:bf:11:26:ae:7b:a9:
cb:12:66:33:f6:0d:bf:3e:bb:4d:e9:5a:0e:a2:96:
ef:8e:d9:65:21:74:81:73:35:20:50:45:a3:fa:65:
19:2f:05:83:a0:8a:72:39:de:1d:c9:53:a9:de:ad:
10:bb:f9:9b:ab:60:ad:e5:20:c4:db:63:ae:b0:d4:
56:c5:f7:00:eb:28:b2:c9:04:37:64:23:0c:fe:dc:
fb:8c:c6:57:c0:8a:09:e6:c3:e1:0b:cf:74:5e:8a:
1a:27:15:d9:26:2e:9c:8c:ea:b5:78:23:00:8f:14:
5f:68:88:25:b5:43:be:51:88:67:00:59:cf:19:21:
68:ee:55:57:8f:16:51:9d:49:a6:dc:e1:19:08:31:
f9:09:ad:32:88:00:69:2b:ae:c6:b8:3c:4f:4f:c3:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:D0:58:5E:6D:07:C3:DB:58:81:FC:CF:B7:2E:2D:BF:82:DF:5F
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:fa:0d:a8:04:9e:45:09:b5:c6:75:e1:84:fe:c6:f5:ad:
10:b9:89:ee:ff:67:2f:c7:d8:ad:f4:49:bd:c4:76:74:8d:e4:
04:dd:1c:0a:16:e4:e6:01:e8:03:5c:e4:55:0b:85:49:77:c7:
29:5d:4e:0e:cd:1e:e3:89:4f:9a:73:c4:67:1c:73:88:5b:ab:
a2:e0:9a:ec:d1:a2:a3:87:12:3d:47:10:ea:7a:04:91:63:7b:
2a:25:fe:c0:42:44:7b:16:6d:2e:1d:f5:7f:30:c5:4f:2b:c0:
4e:c8:67:1f:83:ee:21:79:b0:10:b3:e0:0d:80:ee:10:9a:1b:
9b:36:ec:88:31:10:80:47:80:fd:2b:61:56:a2:22:76:1f:4f:
06:6a:8e:57:cc:0e:2d:b8:19:e4:a6:78:ce:53:4d:f8:6a:70:
a4:55:2c:02:2b:53:7d:55:45:5b:fd:0e:af:90:80:53:3c:7f:
e4:3e:9d:8e:b0:93:fb:38:ca:3b:24:7d:f9:2a:10:06:2d:89:
1e:44:7f:c8:e3:2e:85:a7:73:44:1e:fe:64:60:ac:3f:61:3a:
b8:86:f0:10:98:d7:7c:21:5f:0b:5b:15:c3:ab:3f:0a:be:bc:
30:68:c5:8e:f1:6c:a2:c5:38:60:42:88:99:5b:34:2e:42:9d:
0f:e5:ea:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEykImtfAoaFz0AtuyN+F7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTdlMmVkMWU5MjdkYmZkOGRlMGQ1ZTk0YTc3ZDU0YzJk
ZDAwNDIwHhcNMjYxMDEzMDAwMTM1WhcNMjYxMDE0MDAwMTM1WjAzMTEwLwYDVQQD
EyhjMWY5ZDA1ODVlNmQwN2MzZGI1ODgxZmNjZmI3MmUyZGJmODJkZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DBF7URc3KhLA2SNSrzB6TCl+Pdx
adWg5ueO9MFBmN3Eu1mbcUZ3OnrkzTLDZ4HmbyA2km9ukiuhCFOz3an4hIJDwRmv
p51FLfHD+TPYBnOolvt251tokuT+7uMR9BzrkDm/ESaue6nLEmYz9g2/PrtN6VoO
opbvjtllIXSBczUgUEWj+mUZLwWDoIpyOd4dyVOp3q0Qu/mbq2Ct5SDE22OusNRW
xfcA6yiyyQQ3ZCMM/tz7jMZXwIoJ5sPhC890XooaJxXZJi6cjOq1eCMAjxRfaIgl
tUO+UYhnAFnPGSFo7lVXjxZRnUmm3OEZCDH5Ca0yiABpK67GuDxPT8OgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH50FhebQfD21iB/M+3Li2/gt9fMB8GA1UdIwQY
MBaAFA+X4u0ekn2/2N4NXpSnfVTC3QBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVmaTdSNlNmYl9ZM2cxZWxLZDlWTUxkQUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wOTBjN2ItMjkzZS00OWRiLWFmYjUt
MjkwNWQyMWUzNjcxLzEvRDVmaTdSNlNmYl9ZM2cxZWxLZDlWTUxkQUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wOTBjN2ItMjkzZS00OWRiLWFmYjUtMjkwNWQyMWUzNjcx
LzEvRDVmaTdSNlNmYl9ZM2cxZWxLZDlWTUxkQUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj36DagE
nkUJtcZ14YT+xvWtELmJ7v9nL8fYrfRJvcR2dI3kBN0cChbk5gHoA1zkVQuFSXfH
KV1ODs0e44lPmnPEZxxziFurouCa7NGio4cSPUcQ6noEkWN7KiX+wEJEexZtLh31
fzDFTyvATshnH4PuIXmwELPgDYDuEJobmzbsiDEQgEeA/SthVqIidh9PBmqOV8wO
LbgZ5KZ4zlNN+GpwpFUsAitTfVVFW/0Or5CAUzx/5D6djrCT+zjKOyR9+SoQBi2J
HkR/yOMuhadzRB7+ZGCsP2E6uIbwEJjXfCFfC1sVw6s/Cr68MGjFjvFsosU4YEKI
mVs0LkKdD+Xqqg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:57:04 2026 by rpki-client