Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
File: DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft (raw, json)
Hash identifier: 90O/HAdklToxJO/LM3g5jE3JFzWsCbU3CQiDQAROUhA=
Subject key identifier: BD:13:5B:63:C4:9A:DA:EB:23:A3:42:85:95:16:2A:49:41:97:2A:53
Authority key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Certificate issuer: /CN=0c56234bc73d0cac819611cade29874822ff5d54
Certificate serial: 01A0CC359D50BD9CBE347BF4E51C103AE288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:00 +0000
Manifest this update: Wed 23 Sep 2026 03:01:00 +0000
Manifest next update: Thu 24 Sep 2026 03:01:00 +0000
Files and hashes: 1: 2zJJEln3aMuBWTTX2Wghm64WL1c.roa (hash: 5hVuyCxLA7+9VBEWVzzqiucZv/QNutyUowFs04GW0IQ=)
2: DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl (hash: oV2yL5npZgcVf2trWi9JVR7FXJJIm3Z5BrCWlitLciY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:9d:50:bd:9c:be:34:7b:f4:e5:1c:10:3a:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c56234bc73d0cac819611cade29874822ff5d54
Validity
Not Before: Sep 23 03:01:00 2026 GMT
Not After : Sep 24 03:01:00 2026 GMT
Subject: CN=bd135b63c49adaeb23a3428595162a4941972a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:23:23:35:cb:c0:5a:67:c0:4b:80:c5:f7:
84:ed:d3:db:ca:7a:73:d5:df:89:cf:fb:ab:7a:ba:
e9:18:d8:8f:88:b2:b3:7e:15:cd:10:aa:2d:e6:5c:
5f:71:ba:9a:7a:32:8d:87:87:87:1e:80:12:b7:95:
bb:e6:77:b8:34:21:fe:b5:0d:01:eb:82:e3:c7:1a:
27:47:66:46:4c:ef:38:1c:74:9e:b0:39:43:eb:3c:
87:94:87:10:60:90:24:4f:86:41:25:bb:dd:96:27:
1d:cc:e7:47:f4:f4:ab:04:a3:91:0c:e0:42:81:b3:
be:61:4a:40:7b:59:ab:19:18:df:d7:52:d7:87:3f:
8a:a0:9e:64:d2:64:42:4f:51:15:cf:01:ee:a1:13:
6e:9e:17:d6:9c:e1:4e:93:74:df:ea:00:4d:db:36:
1b:99:a2:de:72:e5:67:35:b6:ac:29:55:65:2b:ad:
1d:59:a7:31:f2:cc:35:c1:90:0c:c0:ac:e5:18:2c:
0d:c8:e9:c9:5d:09:09:cc:19:97:93:49:c3:32:53:
31:ee:86:c9:bf:59:d5:fb:af:69:eb:44:b4:d7:ac:
e7:89:dc:56:50:db:8e:56:6d:28:42:9a:41:b9:63:
da:b1:86:2f:b3:81:e6:4c:75:7f:30:18:7b:db:3f:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:5B:63:C4:9A:DA:EB:23:A3:42:85:95:16:2A:49:41:97:2A:53
X509v3 Authority Key Identifier:
keyid:0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:7c:c4:8b:1f:26:a6:ba:29:9b:0a:b6:fe:de:ab:7e:98:
8c:fb:5e:ad:56:b0:a3:10:20:be:57:a2:2f:a1:47:e3:fa:70:
3e:6b:b0:08:5a:c2:5b:a2:88:7b:19:98:40:52:a9:53:72:a0:
fe:1a:4c:bb:30:78:08:4d:95:05:0a:7e:78:2b:09:c3:98:39:
14:64:b7:df:90:ae:e2:e3:d4:5b:86:2d:1e:f0:d0:db:5b:9e:
ed:8b:15:22:8e:5f:a6:74:a9:97:82:71:bd:92:19:0a:c6:e1:
7f:89:23:04:c2:4e:64:08:64:d9:e5:86:81:eb:fe:ee:4a:b9:
8e:f8:e0:19:83:8e:f6:01:4b:c4:58:a5:24:0a:04:f7:b0:15:
f3:dc:6f:37:00:d6:3b:09:12:8c:ec:e8:42:91:39:bf:72:40:
e3:a8:99:65:fc:24:05:e9:21:0d:54:8f:7d:c5:3a:08:d3:1f:
b5:62:74:81:57:d7:06:d0:f0:19:fa:cd:83:1b:cc:72:c8:84:
23:29:2e:e2:57:57:b5:84:ca:72:61:42:28:34:0c:ec:7c:19:
c2:02:21:20:2e:1f:a3:af:cf:b6:97:f4:51:b5:22:db:a8:81:
d6:94:e9:1d:ad:e5:95:5d:ca:ef:bc:31:92:8f:4d:ca:38:f3:
10:13:0e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNZ1QvZy+NHv05RwQOuKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTYyMzRiYzczZDBjYWM4MTk2MTFjYWRlMjk4NzQ4MjJm
ZjVkNTQwHhcNMjYwOTIzMDMwMTAwWhcNMjYwOTI0MDMwMTAwWjAzMTEwLwYDVQQD
EyhiZDEzNWI2M2M0OWFkYWViMjNhMzQyODU5NTE2MmE0OTQxOTcyYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+kjIzXLwFpnwEuAxfeE7dPbynpz
1d+Jz/urerrpGNiPiLKzfhXNEKot5lxfcbqaejKNh4eHHoASt5W75ne4NCH+tQ0B
64LjxxonR2ZGTO84HHSesDlD6zyHlIcQYJAkT4ZBJbvdlicdzOdH9PSrBKORDOBC
gbO+YUpAe1mrGRjf11LXhz+KoJ5k0mRCT1EVzwHuoRNunhfWnOFOk3Tf6gBN2zYb
maLecuVnNbasKVVlK60dWacx8sw1wZAMwKzlGCwNyOnJXQkJzBmXk0nDMlMx7obJ
v1nV+69p60S016znidxWUNuOVm0oQppBuWPasYYvs4HmTHV/MBh72z/uyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0TW2PEmtrrI6NChZUWKklBlypTMB8GA1UdIwQY
MBaAFAxWI0vHPQysgZYRyt4ph0gi/11UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZZalM4YzlES3lCbGhISzNpbUhTQ0xfWFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt
MjY2YWMxMDRmN2I0LzEvREZZalM4YzlES3lCbGhISzNpbUhTQ0xfWFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0
LzEvREZZalM4YzlES3lCbGhISzNpbUhTQ0xfWFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3p8xIsf
Jqa6KZsKtv7eq36YjPterVawoxAgvleiL6FH4/pwPmuwCFrCW6KIexmYQFKpU3Kg
/hpMuzB4CE2VBQp+eCsJw5g5FGS335Cu4uPUW4YtHvDQ21ue7YsVIo5fpnSpl4Jx
vZIZCsbhf4kjBMJOZAhk2eWGgev+7kq5jvjgGYOO9gFLxFilJAoE97AV89xvNwDW
OwkSjOzoQpE5v3JA46iZZfwkBekhDVSPfcU6CNMftWJ0gVfXBtDwGfrNgxvMcsiE
Iyku4ldXtYTKcmFCKDQM7HwZwgIhIC4fo6/Ptpf0UbUi26iB1pTpHa3llV3K77wx
ko9NyjjzEBMOng==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:34:25 2026 by rpki-client