Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: 6V8Omu+GPQI/C+kSF19/n5aeaW0S0f1twj6Cgh/4B0g=
Subject key identifier: 20:A8:95:22:A8:2B:7A:BD:46:A5:9E:CE:14:21:B0:6C:05:AA:2B:1E
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 01A1476056DF995369ECABF1E16FD66B8065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1AAC
Signing time: Sat 17 Oct 2026 01:00:58 +0000
Manifest this update: Sat 17 Oct 2026 01:00:58 +0000
Manifest next update: Sun 18 Oct 2026 01:00:58 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: Jrz68Vg8sQo/LbttbQY5FkiNBkwFodHlS9+MfP29ctk=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:56:df:99:53:69:ec:ab:f1:e1:6f:d6:6b:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Oct 17 01:00:58 2026 GMT
Not After : Oct 18 01:00:58 2026 GMT
Subject: CN=20a89522a82b7abd46a59ece1421b06c05aa2b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:93:62:a0:15:41:7c:37:b2:e8:5d:72:01:
63:75:44:79:ac:93:96:20:2f:46:73:b5:dd:f3:de:
82:e9:ca:2f:7b:a5:99:0e:7a:57:c8:ac:83:aa:84:
8b:3b:ee:8b:5e:32:28:db:c7:bc:66:bf:d6:27:de:
19:c1:4b:56:f8:e0:9b:3d:38:ec:4d:2d:ba:8a:b1:
2a:10:08:3e:ce:0c:cc:8c:a0:4f:9a:ed:98:51:cd:
42:99:79:6b:ac:5c:49:62:d3:fb:b5:43:0c:e7:f8:
bf:7c:25:0f:3f:97:7f:df:0f:80:39:88:89:f9:30:
38:08:22:2d:80:aa:17:4b:24:07:c0:01:b0:b6:aa:
38:c7:97:bf:87:0a:b4:5e:e2:ca:95:2c:11:72:81:
22:fa:82:03:8d:9f:dc:8b:48:a3:c5:50:9d:16:79:
a2:74:00:c5:eb:e3:cb:0a:d5:79:e1:19:7d:5d:3a:
9d:07:68:a2:27:ef:40:b9:43:96:b6:46:d8:1f:b9:
3a:3e:13:a0:b1:d0:fe:65:72:63:f5:ec:ce:86:47:
6b:c9:e9:d2:69:c6:ba:db:81:b3:cc:02:4d:7a:19:
60:82:90:6f:17:1a:c9:9f:c7:ed:88:68:78:ca:ee:
03:e7:64:21:3b:aa:62:0c:e8:c2:ea:26:e4:62:b5:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:95:22:A8:2B:7A:BD:46:A5:9E:CE:14:21:B0:6C:05:AA:2B:1E
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:f2:6f:83:18:06:c1:8a:5b:1e:70:a2:dd:2b:a4:d1:6e:
f0:1e:e6:19:35:0a:1b:e0:17:7c:86:be:83:af:52:84:11:2c:
30:77:67:9f:ba:f9:29:4f:5f:9c:4d:94:12:d7:39:46:e0:1e:
ab:dd:ef:58:4b:f1:96:64:9a:9d:e6:91:db:08:31:e0:74:37:
b1:a3:b0:86:c5:47:e3:74:b0:f4:fa:5b:51:74:52:7d:21:52:
80:c6:17:d7:c1:cd:c4:0c:e2:ff:d3:fe:da:16:70:71:d6:ec:
0a:fa:b3:61:20:9c:43:ef:b0:77:ac:c1:43:76:8f:be:a3:82:
b6:d2:4f:e9:a7:a2:48:2b:8f:84:52:53:f0:ff:c8:e5:3d:8f:
db:ca:f4:2d:75:e5:3c:48:14:68:f9:74:ed:04:f0:fa:ea:d6:
1c:84:7b:a7:a4:dc:ba:81:b1:21:19:91:f6:88:93:31:9c:ca:
e2:62:7f:9a:71:91:2d:07:b4:6f:fe:a9:12:a6:fd:14:aa:be:
d9:ba:6b:94:24:d3:a9:c9:86:30:21:c6:0d:cb:ad:a7:2c:35:
73:fe:d0:bb:4e:70:45:1d:80:18:88:20:7e:fa:29:89:32:f3:
cc:f2:14:b5:3b:5f:54:8c:e8:15:5f:49:52:36:c2:8b:a4:0d:
39:36:a5:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHYFbfmVNp7Kvx4W/Wa4BlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0
YTQ0OTYwHhcNMjYxMDE3MDEwMDU4WhcNMjYxMDE4MDEwMDU4WjAzMTEwLwYDVQQD
EygyMGE4OTUyMmE4MmI3YWJkNDZhNTllY2UxNDIxYjA2YzA1YWEyYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeyTYqAVQXw3suhdcgFjdUR5rJOW
IC9Gc7Xd896C6cove6WZDnpXyKyDqoSLO+6LXjIo28e8Zr/WJ94ZwUtW+OCbPTjs
TS26irEqEAg+zgzMjKBPmu2YUc1CmXlrrFxJYtP7tUMM5/i/fCUPP5d/3w+AOYiJ
+TA4CCItgKoXSyQHwAGwtqo4x5e/hwq0XuLKlSwRcoEi+oIDjZ/ci0ijxVCdFnmi
dADF6+PLCtV54Rl9XTqdB2iiJ+9AuUOWtkbYH7k6PhOgsdD+ZXJj9ezOhkdryenS
aca624GzzAJNehlggpBvFxrJn8ftiGh4yu4D52QhO6piDOjC6ibkYrUBAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCColSKoK3q9RqWezhQhsGwFqiseMB8GA1UdIwQY
MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt
N2Y1ZTE3NTlmODRlLzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl
LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbm/yb4MY
BsGKWx5wot0rpNFu8B7mGTUKG+AXfIa+g69ShBEsMHdnn7r5KU9fnE2UEtc5RuAe
q93vWEvxlmSaneaR2wgx4HQ3saOwhsVH43Sw9PpbUXRSfSFSgMYX18HNxAzi/9P+
2hZwcdbsCvqzYSCcQ++wd6zBQ3aPvqOCttJP6aeiSCuPhFJT8P/I5T2P28r0LXXl
PEgUaPl07QTw+urWHIR7p6TcuoGxIRmR9oiTMZzK4mJ/mnGRLQe0b/6pEqb9FKq+
2bprlCTTqcmGMCHGDcutpyw1c/7Qu05wRR2AGIggfvopiTLzzPIUtTtfVIzoFV9J
UjbCi6QNOTalsQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:13:22 2026 by rpki-client