Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: idjzMU40GCVz3m0+5ijy8/R9PDHJi0WH0xcn+mRveO0=
Subject key identifier: 65:65:25:FD:FD:2D:5E:AB:34:F3:BE:D9:75:DB:A5:FA:CC:43:F9:46
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01A0C369429A242CA0B9B5A5C3F217CB83D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0BFB
Signing time: Mon 21 Sep 2026 10:00:50 +0000
Manifest this update: Mon 21 Sep 2026 10:00:50 +0000
Manifest next update: Tue 22 Sep 2026 10:00:50 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: Pza0brc3dokyxMfhaph0NIDkiLkllutBnzXEEBD9SRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:42:9a:24:2c:a0:b9:b5:a5:c3:f2:17:cb:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Sep 21 10:00:50 2026 GMT
Not After : Sep 22 10:00:50 2026 GMT
Subject: CN=656525fdfd2d5eab34f3bed975dba5facc43f946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:b8:d2:87:fb:2f:54:15:d1:f8:7d:d4:d1:
fd:70:d3:ed:23:ea:2a:0a:05:4b:f8:08:ec:73:70:
10:7b:fd:23:a9:53:45:5f:48:6d:82:d6:e1:b1:b2:
cf:25:67:21:fe:c6:0d:f9:ea:09:7c:26:5c:45:5c:
b5:4d:e7:c7:ff:30:cf:31:da:be:83:9c:d5:58:41:
ae:76:7e:44:d5:ad:64:35:b2:a6:1d:12:05:2b:7c:
c2:05:fe:ff:96:6a:64:7d:66:02:a9:46:fe:55:d6:
e4:d7:2b:a4:c2:39:36:e3:87:c8:a7:27:1c:3f:b7:
fa:1e:06:31:15:87:de:e8:9d:50:19:f1:63:1e:4b:
e9:8d:12:ea:10:9c:2a:5b:f6:27:a1:40:37:61:a3:
c4:ab:de:d3:0a:07:49:b8:88:fe:14:f9:08:5b:5b:
74:35:df:95:d7:28:8c:c4:1c:75:55:b5:9f:68:42:
3a:3d:8d:05:68:c9:86:a9:2f:2a:ee:9e:eb:16:71:
96:00:d5:30:1f:80:a9:e1:b7:7e:06:db:29:cd:28:
07:e0:63:c1:11:a8:7c:00:3a:46:bb:41:cc:f9:34:
c7:f4:8d:50:59:15:27:d1:a7:4c:e0:66:25:97:77:
08:86:3b:19:b4:38:dc:aa:64:32:e1:ce:8d:d9:fc:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:65:25:FD:FD:2D:5E:AB:34:F3:BE:D9:75:DB:A5:FA:CC:43:F9:46
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:95:a8:87:ff:95:5b:40:1c:f5:a4:0a:a0:10:7a:57:b7:4c:
d0:a1:34:a1:9c:44:92:6b:63:c9:61:9b:ac:dd:6d:af:d3:96:
35:e5:13:71:41:6d:f7:60:d4:5b:18:17:dc:f3:bf:89:80:16:
95:e0:ff:b7:b2:48:14:a1:fa:20:38:44:99:82:ba:31:63:88:
fd:1f:b6:ee:76:20:44:11:7e:c8:d7:9c:a1:ef:b1:10:24:e9:
28:58:d9:a6:0e:e3:e9:e8:e6:d9:25:9b:c2:b0:15:8b:53:2c:
d8:55:f8:04:f1:4d:82:07:03:a6:b9:2d:b2:10:49:fa:0f:11:
79:59:9c:5a:a8:fe:43:88:ba:1a:1a:36:10:b4:94:40:86:06:
44:16:41:01:f6:63:64:d6:e1:f0:3e:9e:44:46:48:e7:0c:7d:
69:ec:0a:02:96:c5:f7:63:c2:c6:29:f7:3c:a9:73:37:ec:27:
1d:cd:68:c3:2c:e4:03:3b:72:5b:77:63:05:8d:5f:d5:a4:c3:
61:35:32:22:67:11:2a:dc:9a:64:3b:04:77:d1:61:61:0b:78:
43:35:0a:61:e4:96:3b:bc:3b:ef:84:75:a6:1f:7d:eb:90:0a:
43:a5:bd:6f:f7:16:f3:e4:a9:d0:49:b3:3d:ca:22:4f:f4:c6:
b5:0a:e5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaUKaJCygubWlw/IXy4PRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi
YmQ4MzgwHhcNMjYwOTIxMTAwMDUwWhcNMjYwOTIyMTAwMDUwWjAzMTEwLwYDVQQD
Eyg2NTY1MjVmZGZkMmQ1ZWFiMzRmM2JlZDk3NWRiYTVmYWNjNDNmOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsC40of7L1QV0fh91NH9cNPtI+oq
CgVL+Ajsc3AQe/0jqVNFX0htgtbhsbLPJWch/sYN+eoJfCZcRVy1TefH/zDPMdq+
g5zVWEGudn5E1a1kNbKmHRIFK3zCBf7/lmpkfWYCqUb+Vdbk1yukwjk244fIpycc
P7f6HgYxFYfe6J1QGfFjHkvpjRLqEJwqW/YnoUA3YaPEq97TCgdJuIj+FPkIW1t0
Nd+V1yiMxBx1VbWfaEI6PY0FaMmGqS8q7p7rFnGWANUwH4Cp4bd+BtspzSgH4GPB
Eah8ADpGu0HM+TTH9I1QWRUn0adM4GYll3cIhjsZtDjcqmQy4c6N2fz5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVlJf39LV6rNPO+2XXbpfrMQ/lGMB8GA1UdIwQY
MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt
NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx
LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5Woh/+V
W0Ac9aQKoBB6V7dM0KE0oZxEkmtjyWGbrN1tr9OWNeUTcUFt92DUWxgX3PO/iYAW
leD/t7JIFKH6IDhEmYK6MWOI/R+27nYgRBF+yNecoe+xECTpKFjZpg7j6ejm2SWb
wrAVi1Ms2FX4BPFNggcDprktshBJ+g8ReVmcWqj+Q4i6Gho2ELSUQIYGRBZBAfZj
ZNbh8D6eREZI5wx9aewKApbF92PCxin3PKlzN+wnHc1owyzkAztyW3djBY1f1aTD
YTUyImcRKtyaZDsEd9FhYQt4QzUKYeSWO7w774R1ph9965AKQ6W9b/cW8+Sp0Emz
PcoiT/TGtQrlWg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:42:01 2026 by rpki-client