Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: EpODMpQBn9IvwDwS8JtxIj5RYBwyds4OqiL3XoZPwAg=
Subject key identifier: CE:CE:82:D8:29:44:09:B3:37:8E:33:24:B7:1C:04:F5:87:B1:37:2D
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 01A1C10A824C207322E38D4314BD02422ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1AEC
Signing time: Mon 09 Nov 2026 16:00:53 +0000
Manifest this update: Mon 09 Nov 2026 16:00:53 +0000
Manifest next update: Tue 10 Nov 2026 16:00:53 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: wp/y/tv3869d5/VBXJqDaL7ZNxxaiKHyd3s/RqDzzLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:82:4c:20:73:22:e3:8d:43:14:bd:02:42:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Nov 9 16:00:53 2026 GMT
Not After : Nov 10 16:00:53 2026 GMT
Subject: CN=cece82d8294409b3378e3324b71c04f587b1372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:13:96:a2:92:8d:7a:09:1e:9e:4c:00:69:
9f:4d:ef:08:f6:7a:e0:fe:02:61:bd:2b:c1:af:6a:
ae:d6:de:72:d2:15:f1:f7:b6:c9:7c:7c:ca:5f:15:
7b:ec:1f:6b:b3:37:8a:f4:f5:0c:5d:2b:00:0f:95:
ee:8b:d0:7d:04:0b:9c:8e:a0:c4:94:be:78:80:48:
d6:5f:e8:13:60:67:e6:cb:d5:d3:09:e8:db:0d:e7:
a0:b5:a9:1b:52:90:49:9f:65:01:75:e6:97:fc:03:
83:3c:32:58:66:60:eb:82:3c:fe:01:d9:ce:e5:74:
5c:79:a1:2d:e5:f9:66:87:8d:2b:4b:ac:00:94:48:
23:f5:fd:bc:b8:5b:0e:ab:39:6d:8a:b3:c0:21:ad:
24:5e:0d:97:b7:54:7a:e8:f7:28:5f:94:8f:89:ef:
64:b3:99:b0:54:41:6b:b0:0a:8b:89:5b:b1:6c:83:
88:1f:78:fc:5e:2b:5e:b5:9f:34:75:f2:f5:f1:c7:
b6:d0:bd:9f:ce:4d:97:84:15:71:f3:a2:e9:e4:fd:
68:39:74:00:bc:93:c5:1e:f3:0b:b2:47:64:4d:14:
68:03:69:0d:aa:fa:3f:20:09:cd:72:fa:35:bd:5a:
41:e5:9f:08:ec:9d:3a:28:96:b2:45:5d:1d:5e:8a:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:82:D8:29:44:09:B3:37:8E:33:24:B7:1C:04:F5:87:B1:37:2D
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:59:b4:26:aa:68:52:8c:d3:a7:ab:38:3f:d8:ec:e5:6d:be:
13:6f:67:18:d2:4d:2e:6c:ee:67:b0:6e:11:ec:49:e3:22:3c:
0a:e4:8d:70:0a:bd:46:2c:c8:44:34:50:05:bb:7f:c2:fd:18:
ce:45:08:70:65:bd:53:df:d2:86:13:b0:26:12:c3:79:70:d4:
a8:d7:80:f8:a3:3c:61:ee:af:d5:ef:9c:62:ff:1d:39:d3:04:
50:5d:5e:85:18:05:ba:63:12:59:74:60:51:5b:c6:84:2f:9c:
4a:e0:9a:e1:f2:0d:2d:10:fb:ae:cf:4e:cf:e1:37:ae:ee:9e:
e4:d9:65:eb:97:c4:23:70:ab:eb:b7:a4:7e:85:8b:eb:6c:55:
49:3f:7a:42:c2:40:0b:1d:1e:50:bf:25:93:31:74:40:60:b6:
d1:05:20:3a:62:a9:de:06:d4:35:a9:79:7e:af:ed:cf:0c:3f:
62:68:bd:8c:7f:a8:02:64:a8:a0:b6:c3:28:50:4d:05:62:bc:
8a:d6:da:78:a3:53:5a:f5:50:0f:e7:b0:89:5b:a5:6e:bc:06:
69:d7:79:26:99:3e:8a:1b:ee:33:13:a4:2c:5a:78:bd:18:b4:
26:e1:28:12:e7:28:40:87:be:22:48:f2:3c:f3:ec:cd:10:10:
e8:5a:07:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBCoJMIHMi441DFL0CQiraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWU4NzBkMzFjYTcwMTk5NTEzNzBjYjIyMWYxOGYxZjA5
ZmE1OGEwHhcNMjYxMTA5MTYwMDUzWhcNMjYxMTEwMTYwMDUzWjAzMTEwLwYDVQQD
EyhjZWNlODJkODI5NDQwOWIzMzc4ZTMzMjRiNzFjMDRmNTg3YjEzNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA084TlqKSjXoJHp5MAGmfTe8I9nrg
/gJhvSvBr2qu1t5y0hXx97bJfHzKXxV77B9rszeK9PUMXSsAD5Xui9B9BAucjqDE
lL54gEjWX+gTYGfmy9XTCejbDeegtakbUpBJn2UBdeaX/AODPDJYZmDrgjz+AdnO
5XRceaEt5flmh40rS6wAlEgj9f28uFsOqzltirPAIa0kXg2Xt1R66PcoX5SPie9k
s5mwVEFrsAqLiVuxbIOIH3j8XitetZ80dfL18ce20L2fzk2XhBVx86Lp5P1oOXQA
vJPFHvMLskdkTRRoA2kNqvo/IAnNcvo1vVpB5Z8I7J06KJayRV0dXoo/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7OgtgpRAmzN44zJLccBPWHsTctMB8GA1UdIwQY
MBaAFAxehw0xynAZlRNwyyIfGPHwn6WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQt
MzVjZjc3MGRjOGI5LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQtMzVjZjc3MGRjOGI5
LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1m0Jqpo
UozTp6s4P9js5W2+E29nGNJNLmzuZ7BuEexJ4yI8CuSNcAq9RizIRDRQBbt/wv0Y
zkUIcGW9U9/ShhOwJhLDeXDUqNeA+KM8Ye6v1e+cYv8dOdMEUF1ehRgFumMSWXRg
UVvGhC+cSuCa4fINLRD7rs9Oz+E3ru6e5Nll65fEI3Cr67ekfoWL62xVST96QsJA
Cx0eUL8lkzF0QGC20QUgOmKp3gbUNal5fq/tzww/Ymi9jH+oAmSooLbDKFBNBWK8
itbaeKNTWvVQD+ewiVulbrwGadd5Jpk+ihvuMxOkLFp4vRi0JuEoEucoQIe+Ikjy
PPPszRAQ6FoHeg==
-----END CERTIFICATE-----
Generated at Mon Nov 9 23:56:26 2026 by rpki-client