
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File: dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier: VPOioH0mrw7UFGLJPTa5IBZC7G4wTe/jqxIiM3LSS7c=
Subject key identifier: 1E:00:DF:E8:14:1A:9E:C1:F2:AE:D1:02:73:61:68:22:29:74:B8:C0
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 01A0C632CAD16F716CDA29145F6D26F8935B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number: 0D13
Signing time: Mon 21 Sep 2026 23:00:12 +0000
Manifest this update: Mon 21 Sep 2026 23:00:12 +0000
Manifest next update: Tue 22 Sep 2026 23:00:12 +0000
Files and hashes: 1: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (hash: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=)
2: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: cWNhyj8NUsCT+LVWZfyXBEkmCTcfyb1GHrXRL9x0X8c=)
4: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
5: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:ca:d1:6f:71:6c:da:29:14:5f:6d:26:f8:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Sep 21 23:00:12 2026 GMT
Not After : Sep 22 23:00:12 2026 GMT
Subject: CN=1e00dfe8141a9ec1f2aed102736168222974b8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:75:55:86:ce:12:aa:df:85:05:1e:36:0d:
cb:de:97:85:7e:73:14:a9:b3:6e:13:a0:ab:b2:8f:
4a:5b:a6:f5:97:df:36:2a:ae:75:fd:d0:c0:c8:7d:
0c:bc:cd:2b:40:b3:6e:f0:51:7a:d6:f6:ac:a9:bd:
8a:98:10:56:99:d7:67:78:f9:6e:1e:33:2f:c8:36:
34:73:7b:c0:b2:7d:81:80:26:b7:93:ff:9a:ae:42:
77:9c:4c:c8:a3:b1:df:73:b8:ee:33:c4:dc:02:1a:
6e:b9:02:05:ec:e0:53:9b:4c:5d:6d:92:90:5e:0e:
b8:1d:27:47:47:0e:85:fb:99:a9:5f:e5:69:e5:78:
f0:5b:5f:f7:34:3a:1c:26:08:64:94:eb:6b:26:b5:
62:c4:fa:3e:b9:d7:9a:5e:e7:3f:6d:5d:53:39:98:
78:48:94:a7:65:d0:45:25:de:e6:cb:a4:ad:65:7a:
ad:37:84:c9:70:2e:f5:7f:01:fa:5d:16:4c:28:9b:
14:36:23:01:82:31:a1:2c:81:f8:c2:89:77:e5:e9:
a6:a7:1f:bc:d9:d2:86:f6:c7:33:ff:46:1a:34:7a:
03:66:86:76:6c:37:11:4a:c0:a2:5e:c5:20:a5:21:
db:63:ef:34:c0:86:42:0c:56:49:3e:6b:71:df:91:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:DF:E8:14:1A:9E:C1:F2:AE:D1:02:73:61:68:22:29:74:B8:C0
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:ba:ee:cc:f5:6e:2b:5a:a1:48:b8:e8:14:3b:e6:ed:14:
04:af:75:70:68:bd:93:b1:dd:ea:8a:11:66:03:49:ac:a2:b5:
57:1b:01:6b:03:a8:7c:c6:e2:98:2e:56:82:93:bd:43:3f:e2:
d7:d8:ca:54:2e:19:4e:a0:e8:51:c1:16:bd:cb:49:8d:ba:a0:
0f:0e:fe:80:08:41:8e:18:d9:58:65:f9:f3:0b:b1:0f:72:1b:
14:14:68:42:75:f2:f7:c2:03:bc:a1:15:e2:b8:e6:6e:26:6f:
76:68:4d:e1:91:20:96:ef:6f:06:31:61:ee:44:74:dd:c4:47:
38:78:48:4b:18:ca:a7:0e:a4:9e:ee:63:03:9b:6f:d5:c9:f6:
0e:17:c2:90:2f:32:9e:cc:a9:57:6a:78:d5:7f:53:13:a1:23:
fd:9d:a3:2c:fc:69:f9:9c:34:3a:7e:76:f4:ab:b4:12:ad:d2:
91:65:1a:30:21:c4:dd:3c:7b:02:e9:b2:9a:25:75:e4:9b:45:
c7:7e:bd:44:20:c0:e0:eb:3c:d3:0e:7a:ef:f3:c3:36:93:54:
00:46:95:54:bc:2c:56:51:3f:fb:d5:80:59:8f:45:0f:72:c7:
1a:2d:e6:44:62:bb:96:8a:8c:1e:d0:df:fc:e9:52:f8:cb:b0:
a8:36:cd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMsrRb3Fs2ikUX20m+JNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2
YzQ2NTMwHhcNMjYwOTIxMjMwMDEyWhcNMjYwOTIyMjMwMDEyWjAzMTEwLwYDVQQD
EygxZTAwZGZlODE0MWE5ZWMxZjJhZWQxMDI3MzYxNjgyMjI5NzRiOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y51VYbOEqrfhQUeNg3L3peFfnMU
qbNuE6Crso9KW6b1l982Kq51/dDAyH0MvM0rQLNu8FF61vasqb2KmBBWmddnePlu
HjMvyDY0c3vAsn2BgCa3k/+arkJ3nEzIo7Hfc7juM8TcAhpuuQIF7OBTm0xdbZKQ
Xg64HSdHRw6F+5mpX+Vp5XjwW1/3NDocJghklOtrJrVixPo+udeaXuc/bV1TOZh4
SJSnZdBFJd7my6StZXqtN4TJcC71fwH6XRZMKJsUNiMBgjGhLIH4wol35emmpx+8
2dKG9scz/0YaNHoDZoZ2bDcRSsCiXsUgpSHbY+80wIZCDFZJPmtx35G0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4A3+gUGp7B8q7RAnNhaCIpdLjAMB8GA1UdIwQY
MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt
Zjg3OTJmNTc3YjlhLzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh
LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7C67sz1
bitaoUi46BQ75u0UBK91cGi9k7Hd6ooRZgNJrKK1VxsBawOofMbimC5WgpO9Qz/i
19jKVC4ZTqDoUcEWvctJjbqgDw7+gAhBjhjZWGX58wuxD3IbFBRoQnXy98IDvKEV
4rjmbiZvdmhN4ZEglu9vBjFh7kR03cRHOHhISxjKpw6knu5jA5tv1cn2DhfCkC8y
nsypV2p41X9TE6Ej/Z2jLPxp+Zw0On529Ku0Eq3SkWUaMCHE3Tx7AumymiV15JtF
x369RCDA4Os80w567/PDNpNUAEaVVLwsVlE/+9WAWY9FD3LHGi3mRGK7loqMHtDf
/OlS+MuwqDbNog==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:13 2026 by rpki-client