Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: 180E1bw24eZ3+n1ispXpmlMyAml1yi38l/ZWmtibE14=
Subject key identifier: 67:E5:C8:D3:3C:2C:30:AF:4C:9E:9E:28:EF:0E:07:AB:E6:27:A1:96
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 01A0C8C642E31CFC1019D3AF6E73F07A8817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 11:00:31 +0000
Manifest this update: Tue 22 Sep 2026 11:00:31 +0000
Manifest next update: Wed 23 Sep 2026 11:00:31 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: lSld49cjJSHEEzzQGkdKLRTMuLSjML3CqwFjoPF1u1Q=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:42:e3:1c:fc:10:19:d3:af:6e:73:f0:7a:88:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Sep 22 11:00:31 2026 GMT
Not After : Sep 23 11:00:31 2026 GMT
Subject: CN=67e5c8d33c2c30af4c9e9e28ef0e07abe627a196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:f6:98:56:18:96:84:0d:2c:38:e1:d8:67:
b4:d5:90:ff:33:ef:29:7e:89:60:55:b3:07:0e:cb:
92:42:d5:00:82:17:4b:a9:24:bc:43:3d:2f:34:ee:
55:84:54:27:3b:5e:e4:8b:e1:03:4f:e2:7b:0b:ec:
41:78:9c:c8:1f:d7:b0:85:85:2b:8c:60:3d:44:c0:
c0:4a:31:80:d7:e1:0e:63:bd:5f:31:01:74:99:a3:
d5:5e:37:44:c7:4f:1a:c2:16:99:7a:b0:9f:d9:88:
fa:05:3a:0e:87:49:e5:2e:4b:88:1d:05:7d:8a:1a:
ad:f6:64:5c:2b:74:de:e3:d8:91:d3:97:35:ea:f1:
01:aa:35:89:a6:8b:ba:94:22:26:79:57:12:b3:5b:
50:89:22:7d:7c:58:18:cf:8e:40:f4:1b:3d:bb:83:
67:17:79:ba:38:82:ab:52:55:65:70:20:19:6e:8f:
e2:12:1c:d0:9e:40:0a:a5:f2:7e:f0:24:65:a3:a1:
f2:60:6d:b4:46:d3:74:77:77:b7:d2:00:ff:4b:b6:
57:50:9a:7e:6e:15:b2:78:c8:83:b1:9d:ef:24:54:
c4:e6:fd:2b:34:9c:4d:37:38:13:d3:7a:02:3f:40:
24:51:9b:de:ff:e3:da:7e:91:b6:de:de:45:fa:22:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:C8:D3:3C:2C:30:AF:4C:9E:9E:28:EF:0E:07:AB:E6:27:A1:96
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:09:d9:96:93:ca:4e:1d:58:42:fc:e6:97:43:62:52:22:
c0:fd:c2:d3:8d:53:f8:20:62:f4:50:d2:17:3a:c8:96:be:dd:
31:6b:e6:be:46:2c:ff:35:be:d6:81:74:3e:28:c9:8a:ca:e8:
f2:53:9e:35:6d:15:65:6c:b8:44:e4:20:20:42:c6:bc:2d:54:
fc:d2:2b:38:5a:34:5d:b4:0a:a6:da:07:28:2f:42:c8:e0:f1:
2b:d5:ce:32:24:c3:20:6a:9e:5b:1f:ea:51:5f:14:a9:6b:de:
ac:76:30:f3:4a:75:17:21:69:bd:e6:cc:8a:7c:cb:f9:78:6d:
2b:de:09:68:36:f0:ef:04:8e:f5:26:bb:a3:83:05:66:e9:4f:
2e:5a:3a:49:d0:b9:81:56:08:ea:25:c0:5a:b2:a2:7e:d6:66:
8b:c4:59:1e:43:4b:bb:ed:f5:c8:36:a0:a3:4b:78:28:18:0e:
49:5f:09:42:21:d7:f7:9a:c3:3e:ef:9c:62:ed:7f:dc:b5:a8:
43:42:5e:88:f2:42:7e:c7:78:9b:20:e2:d7:b9:b6:dd:96:8d:
62:c1:27:01:88:49:37:c4:d1:14:75:e7:de:0f:60:27:30:04:
79:17:9f:0e:03:52:aa:34:58:2b:d3:2c:c6:08:28:ff:04:94:
f6:16:2e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxkLjHPwQGdOvbnPweogXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh
YzYzY2MwHhcNMjYwOTIyMTEwMDMxWhcNMjYwOTIzMTEwMDMxWjAzMTEwLwYDVQQD
Eyg2N2U1YzhkMzNjMmMzMGFmNGM5ZTllMjhlZjBlMDdhYmU2MjdhMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4v2mFYYloQNLDjh2Ge01ZD/M+8p
folgVbMHDsuSQtUAghdLqSS8Qz0vNO5VhFQnO17ki+EDT+J7C+xBeJzIH9ewhYUr
jGA9RMDASjGA1+EOY71fMQF0maPVXjdEx08awhaZerCf2Yj6BToOh0nlLkuIHQV9
ihqt9mRcK3Te49iR05c16vEBqjWJpou6lCImeVcSs1tQiSJ9fFgYz45A9Bs9u4Nn
F3m6OIKrUlVlcCAZbo/iEhzQnkAKpfJ+8CRlo6HyYG20RtN0d3e30gD/S7ZXUJp+
bhWyeMiDsZ3vJFTE5v0rNJxNNzgT03oCP0AkUZve/+PafpG23t5F+iL8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGflyNM8LDCvTJ6eKO8OB6vmJ6GWMB8GA1UdIwQY
MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt
MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm
LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+0J2ZaT
yk4dWEL85pdDYlIiwP3C041T+CBi9FDSFzrIlr7dMWvmvkYs/zW+1oF0PijJisro
8lOeNW0VZWy4ROQgIELGvC1U/NIrOFo0XbQKptoHKC9CyODxK9XOMiTDIGqeWx/q
UV8UqWverHYw80p1FyFpvebMinzL+XhtK94JaDbw7wSO9Sa7o4MFZulPLlo6SdC5
gVYI6iXAWrKiftZmi8RZHkNLu+31yDago0t4KBgOSV8JQiHX95rDPu+cYu1/3LWo
Q0JeiPJCfsd4myDi17m23ZaNYsEnAYhJN8TRFHXn3g9gJzAEeRefDgNSqjRYK9Ms
xggo/wSU9hYusw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:23:03 2026 by rpki-client