Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: vgS24BHlJV34O7bH9Oi9rUBQywnOJbOqSiWJ2nUpY80=
Subject key identifier: 68:03:56:BD:9F:54:98:F1:67:19:7C:89:ED:F9:6F:B7:34:8F:88:46
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01A1DF4CBCAAD5224A90FD0B6C8DE9B31251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0C8E
Signing time: Sun 15 Nov 2026 13:01:50 +0000
Manifest this update: Sun 15 Nov 2026 13:01:50 +0000
Manifest next update: Mon 16 Nov 2026 13:01:50 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: tRokL1gjgFY2g1iGG7+6szl73KDEbK54ARtnm666Bck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:bc:aa:d5:22:4a:90:fd:0b:6c:8d:e9:b3:12:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Nov 15 13:01:50 2026 GMT
Not After : Nov 16 13:01:50 2026 GMT
Subject: CN=680356bd9f5498f167197c89edf96fb7348f8846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:31:ba:b2:65:fd:81:14:d7:cc:ab:12:c9:
4d:a4:ae:ee:de:3c:a1:e7:9e:43:7e:8c:70:92:d0:
c2:46:3f:b1:d5:70:05:28:ff:49:b8:ca:d3:45:99:
c8:8a:3a:d8:b6:fb:18:19:df:a0:ae:63:f1:3a:09:
cf:7a:7b:82:93:05:02:8b:d9:e5:d5:1f:9e:5f:ae:
8e:b4:3a:f1:ce:8b:28:75:5f:64:a0:2b:bc:0b:64:
57:74:a5:5a:66:f2:c8:07:00:51:56:15:6c:bc:19:
0f:b1:95:01:24:72:c0:d8:d7:c8:b1:f2:f0:c8:cc:
8d:6f:0b:a9:e8:ae:61:36:2f:76:30:4d:9a:45:6a:
1f:08:9c:ed:b7:56:6e:c0:0e:37:84:f9:bc:ba:96:
cb:4b:07:0c:e5:f2:e5:48:03:3e:4d:73:3e:63:7e:
c5:40:f1:25:eb:f0:64:d1:55:92:4b:b7:00:28:38:
90:ad:ce:2f:ef:a4:f3:02:03:7a:98:b2:c0:ed:15:
73:a7:c1:c7:80:55:37:c1:b5:e9:b1:b9:fe:26:6c:
ca:2e:a1:0b:d5:e5:4b:e3:c3:3d:c0:e7:d5:25:b8:
8f:e5:a0:d1:59:0d:21:2c:20:b5:27:00:45:b6:91:
17:8d:13:cd:c2:43:0b:7b:8a:2a:13:6b:57:9a:e9:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:56:BD:9F:54:98:F1:67:19:7C:89:ED:F9:6F:B7:34:8F:88:46
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e6:f7:fb:13:6b:fa:07:b8:c3:fe:61:72:3b:d0:59:44:41:
36:7d:5f:c2:2b:ac:eb:1f:52:50:6b:c8:88:ae:ed:08:c3:6f:
e9:e6:af:42:55:fa:3c:e8:e5:c0:04:40:45:ef:b7:c3:91:12:
51:c6:65:02:d5:fd:de:91:57:f4:57:7d:22:b7:2f:0f:a9:f0:
12:c5:01:70:f2:f6:f0:de:22:1e:2a:6c:fa:ac:0d:3e:d5:d6:
6c:e6:c1:7c:0f:8e:84:d1:3d:bb:1e:d6:e8:bf:83:7e:71:89:
81:ad:25:c3:be:15:48:3b:7f:e2:fa:2f:a3:70:0e:1f:f5:dd:
ce:5b:71:a4:dd:09:80:7d:70:45:73:95:d1:db:47:ad:52:66:
41:7d:18:2b:5a:39:45:2e:d5:75:47:e1:d8:81:1c:6c:bd:0c:
ca:36:f4:44:cb:31:22:ae:f5:95:b0:49:39:f5:74:06:8a:5f:
43:90:b8:75:b6:4c:83:0b:ec:6c:73:af:32:a6:84:e0:86:1e:
ef:a2:cd:a4:ae:64:ca:80:75:5f:24:9b:33:71:f9:30:5e:a3:
07:48:3a:43:e6:c1:f9:08:43:9c:90:0b:d8:bd:6b:1e:da:cb:
da:23:7d:39:42:55:4c:e8:09:b6:73:87:a7:09:ae:17:fa:04:
be:06:50:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTLyq1SJKkP0LbI3psxJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi
YmQ4MzgwHhcNMjYxMTE1MTMwMTUwWhcNMjYxMTE2MTMwMTUwWjAzMTEwLwYDVQQD
Eyg2ODAzNTZiZDlmNTQ5OGYxNjcxOTdjODllZGY5NmZiNzM0OGY4ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQxurJl/YEU18yrEslNpK7u3jyh
555DfoxwktDCRj+x1XAFKP9JuMrTRZnIijrYtvsYGd+grmPxOgnPenuCkwUCi9nl
1R+eX66OtDrxzosodV9koCu8C2RXdKVaZvLIBwBRVhVsvBkPsZUBJHLA2NfIsfLw
yMyNbwup6K5hNi92ME2aRWofCJztt1ZuwA43hPm8upbLSwcM5fLlSAM+TXM+Y37F
QPEl6/Bk0VWSS7cAKDiQrc4v76TzAgN6mLLA7RVzp8HHgFU3wbXpsbn+JmzKLqEL
1eVL48M9wOfVJbiP5aDRWQ0hLCC1JwBFtpEXjRPNwkMLe4oqE2tXmunzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgDVr2fVJjxZxl8ie35b7c0j4hGMB8GA1UdIwQY
MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt
NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx
LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOb3+xNr
+ge4w/5hcjvQWURBNn1fwius6x9SUGvIiK7tCMNv6eavQlX6POjlwARARe+3w5ES
UcZlAtX93pFX9Fd9IrcvD6nwEsUBcPL28N4iHips+qwNPtXWbObBfA+OhNE9ux7W
6L+DfnGJga0lw74VSDt/4vovo3AOH/XdzltxpN0JgH1wRXOV0dtHrVJmQX0YK1o5
RS7VdUfh2IEcbL0Myjb0RMsxIq71lbBJOfV0BopfQ5C4dbZMgwvsbHOvMqaE4IYe
76LNpK5kyoB1XySbM3H5MF6jB0g6Q+bB+QhDnJAL2L1rHtrL2iN9OUJVTOgJtnOH
pwmuF/oEvgZQRQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:10 2026 by rpki-client