Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File: D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier: MUNM+vjYIzk3lMlKkdjA25IBlzUooFrBSV1rmyPJChM=
Subject key identifier: 69:8D:57:FC:ED:98:FD:86:86:E9:BE:DE:41:7B:09:21:29:A2:DB:DD
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial: 01A0C66AE43E9244D469C603FACFFD77E2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 00:01:29 +0000
Manifest this update: Tue 22 Sep 2026 00:01:29 +0000
Manifest next update: Wed 23 Sep 2026 00:01:29 +0000
Files and hashes: 1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: 4lpmHEcqhgnpQN9FkalkAjDNgmhAatVtK87Y0ZG372U=)
2: Lacc-4_5zErIhaLObDnS5evETUo.roa (hash: E1jD2Nnvra6sUfCdyofjtOGms4KS2srmXM/6u5x0Za4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:e4:3e:92:44:d4:69:c6:03:fa:cf:fd:77:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Validity
Not Before: Sep 22 00:01:29 2026 GMT
Not After : Sep 23 00:01:29 2026 GMT
Subject: CN=698d57fced98fd8686e9bede417b092129a2dbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:4d:97:c4:6d:23:36:5a:ac:36:93:9a:c2:
36:a2:6a:f0:09:be:db:91:59:fe:d6:13:54:76:40:
47:35:49:35:b3:b0:49:f7:ae:ff:bc:14:38:bf:76:
1c:30:78:88:7b:cf:3d:c5:f5:c8:71:b2:d1:f6:00:
93:fd:19:74:69:57:88:56:47:2e:e8:f9:a5:d8:c3:
3a:36:f8:5d:8b:6c:e3:ea:53:70:e5:72:e8:14:5b:
3e:1b:94:63:84:d7:c0:ca:9c:fc:a4:8a:81:12:4f:
0b:03:f0:68:c9:bc:fb:1e:98:df:23:65:55:12:89:
e5:c9:84:b9:84:0c:20:49:17:93:94:f4:01:ad:83:
e8:d7:1e:28:e4:ff:e9:79:7b:de:bb:fa:f8:80:aa:
46:86:e1:21:ae:cc:25:2f:80:c1:8b:07:d2:5d:e0:
08:05:a9:d8:5a:d9:5f:6f:d2:24:d7:6b:52:b3:23:
0c:93:83:18:01:bd:f0:00:8e:68:fd:0a:d9:18:fc:
cc:d4:3f:73:d1:aa:2f:bc:5e:3c:44:90:0a:09:84:
ad:45:f7:5d:1b:60:d1:81:e4:e2:eb:59:ff:79:63:
b1:2d:4e:10:77:0e:91:55:dd:db:f2:ba:0b:71:d1:
24:23:35:58:5f:48:13:63:59:15:4d:88:3d:ac:9c:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:57:FC:ED:98:FD:86:86:E9:BE:DE:41:7B:09:21:29:A2:DB:DD
X509v3 Authority Key Identifier:
keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:20:b1:39:9e:83:0f:d0:a4:e7:83:d1:fa:d4:32:07:84:
45:88:f1:16:b9:d1:de:ce:96:4d:fa:e4:0f:fc:0a:89:08:46:
5b:a2:e4:0a:0f:e2:63:87:54:f2:94:21:b5:9d:1f:d4:41:6c:
e7:92:3d:cf:5c:d1:47:64:f7:04:16:11:7b:0d:6c:3a:32:1a:
f0:4a:fe:fb:d9:f5:2e:cf:a2:1f:94:bb:22:3f:f5:5f:82:19:
68:48:fe:2a:0f:fd:d5:75:62:91:4c:d6:bf:3c:6a:04:e0:76:
01:24:60:35:af:f2:33:82:7f:64:26:b5:fd:eb:3d:aa:08:e8:
67:a0:f5:a4:d2:ff:54:a6:53:5b:91:12:e1:c6:5d:e1:c8:8b:
b2:08:0f:a2:df:1c:02:63:fe:b6:63:75:a0:49:28:b6:8d:80:
41:d0:a2:d4:02:46:7a:b0:c2:47:0a:85:fb:e4:7d:37:de:51:
86:bb:28:cf:7f:e2:2c:16:84:57:0e:1d:03:c2:ff:4b:84:f6:
7d:99:71:12:fe:ec:f3:90:a7:bf:c2:5e:c5:c9:ac:62:b4:ab:
c4:30:4b:9d:af:4e:a2:06:ae:62:d7:65:ad:22:f1:a1:de:16:
85:8b:35:5a:f2:e4:00:29:25:8e:20:24:bd:20:c8:3a:ba:99:
4e:60:49:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGauQ+kkTUacYD+s/9d+LAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1
YTE3N2QwHhcNMjYwOTIyMDAwMTI5WhcNMjYwOTIzMDAwMTI5WjAzMTEwLwYDVQQD
Eyg2OThkNTdmY2VkOThmZDg2ODZlOWJlZGU0MTdiMDkyMTI5YTJkYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3BNl8RtIzZarDaTmsI2omrwCb7b
kVn+1hNUdkBHNUk1s7BJ967/vBQ4v3YcMHiIe889xfXIcbLR9gCT/Rl0aVeIVkcu
6Pml2MM6Nvhdi2zj6lNw5XLoFFs+G5RjhNfAypz8pIqBEk8LA/Boybz7HpjfI2VV
EonlyYS5hAwgSReTlPQBrYPo1x4o5P/peXveu/r4gKpGhuEhrswlL4DBiwfSXeAI
BanYWtlfb9Ik12tSsyMMk4MYAb3wAI5o/QrZGPzM1D9z0aovvF48RJAKCYStRfdd
G2DRgeTi61n/eWOxLU4Qdw6RVd3b8roLcdEkIzVYX0gTY1kVTYg9rJxhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmNV/ztmP2Ghum+3kF7CSEpotvdMB8GA1UdIwQY
MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt
ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi
LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUacgsTme
gw/QpOeD0frUMgeERYjxFrnR3s6WTfrkD/wKiQhGW6LkCg/iY4dU8pQhtZ0f1EFs
55I9z1zRR2T3BBYRew1sOjIa8Er++9n1Ls+iH5S7Ij/1X4IZaEj+Kg/91XVikUzW
vzxqBOB2ASRgNa/yM4J/ZCa1/es9qgjoZ6D1pNL/VKZTW5ES4cZd4ciLsggPot8c
AmP+tmN1oEkoto2AQdCi1AJGerDCRwqF++R9N95Rhrsoz3/iLBaEVw4dA8L/S4T2
fZlxEv7s85Cnv8JexcmsYrSrxDBLna9OogauYtdlrSLxod4WhYs1WvLkACkljiAk
vSDIOrqZTmBJTA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:59:52 2026 by rpki-client