Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: kg1OJVcaWFqFmSO1jRcHNyURgh//wSFkjEngKE2HODY=
Subject key identifier: 6C:66:D3:69:17:86:98:D2:ED:EA:31:79:7B:D0:F6:BE:5D:63:69:DE
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01A0CE243C7A9123059FFCC5F007FE8734AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1721
Signing time: Wed 23 Sep 2026 12:01:16 +0000
Manifest this update: Wed 23 Sep 2026 12:01:16 +0000
Manifest next update: Thu 24 Sep 2026 12:01:16 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: UGHEa+mW9LwIUJofh2qJ6lXPd5rOHENN04UPeXUZlOQ=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:3c:7a:91:23:05:9f:fc:c5:f0:07:fe:87:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Sep 23 12:01:16 2026 GMT
Not After : Sep 24 12:01:16 2026 GMT
Subject: CN=6c66d369178698d2edea31797bd0f6be5d6369de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:f2:77:3d:cb:ca:c5:b3:d5:79:e6:88:fc:
62:89:25:66:1e:28:d2:f3:5e:4e:8c:41:37:80:e7:
b0:0c:9f:18:f3:83:56:5d:3d:58:ae:9f:df:4d:d7:
12:8e:58:eb:54:97:ef:8e:3c:8b:66:f3:0f:2c:5e:
bc:9b:28:b3:5b:34:cc:e1:7b:ec:ab:a4:26:09:57:
35:78:4e:86:7c:b2:c8:21:b1:38:f2:8d:33:4d:e7:
3c:00:d8:96:f5:3b:ba:99:7d:4f:d4:26:45:02:52:
45:9e:08:f7:d1:bc:1d:89:8c:38:dc:f5:58:90:64:
9b:19:29:9c:c1:44:23:19:ad:58:81:07:0c:99:01:
97:91:c1:dc:4b:38:35:d3:b3:97:9b:84:5d:08:b8:
4f:bf:92:6b:89:6d:b8:41:61:de:c4:34:05:25:69:
a9:79:8a:51:c3:4d:29:4c:58:ca:47:6e:b2:05:07:
76:73:49:77:9b:3d:d5:8a:be:fe:cd:e6:96:c0:0d:
90:36:bd:83:8e:33:0e:a2:4c:01:cf:de:a0:9b:1a:
db:e2:e9:0e:0d:85:ea:e1:ba:19:c1:6f:0e:67:3a:
bc:fe:a3:41:c6:e3:1c:47:2e:94:9d:b2:8e:2e:fc:
55:70:0f:3e:c0:bb:08:64:46:68:b9:8e:59:ff:a8:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:D3:69:17:86:98:D2:ED:EA:31:79:7B:D0:F6:BE:5D:63:69:DE
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:04:c3:81:c3:56:ce:ae:db:cb:4a:63:46:5f:dd:93:de:
97:eb:ef:c8:d4:93:af:1b:0d:e9:95:e2:ec:29:4d:00:4b:a8:
b4:cc:5f:1e:8b:30:ba:87:73:b8:8d:cc:02:9b:c7:1b:a7:f0:
dd:87:1f:6e:16:f3:e3:b3:d6:0b:bb:20:48:ac:bd:15:75:69:
97:32:a4:0f:a7:e5:fe:91:61:3e:dd:96:49:21:ac:7d:c2:7f:
c8:6c:06:3a:8a:fa:8e:c2:90:ee:88:14:fa:80:72:ac:65:c6:
8c:52:bb:22:d8:da:df:8e:86:02:ca:37:fa:f2:f8:a1:22:28:
e8:51:0a:81:d7:21:da:6c:be:7f:0a:7a:21:bd:77:5f:f6:9d:
03:ec:58:24:25:74:fa:f4:c9:72:c1:8f:ec:eb:3d:2f:48:29:
21:ff:67:70:dd:dd:f0:0b:7b:0a:63:3d:0a:37:83:11:5b:38:
a7:81:51:ba:42:fe:41:5c:33:13:24:82:27:f6:da:39:f5:07:
96:aa:2f:dd:97:98:84:5e:3d:b5:a0:6b:75:60:ca:87:86:ea:
72:5a:01:1a:94:b3:4c:54:d3:2f:05:ac:75:38:0b:4f:cd:a2:
fb:6a:57:64:b1:27:ac:07:eb:61:21:60:26:59:dc:6b:02:58:
b7:dd:0b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJDx6kSMFn/zF8Af+hzSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3
Mjg4NjUwHhcNMjYwOTIzMTIwMTE2WhcNMjYwOTI0MTIwMTE2WjAzMTEwLwYDVQQD
Eyg2YzY2ZDM2OTE3ODY5OGQyZWRlYTMxNzk3YmQwZjZiZTVkNjM2OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgjydz3LysWz1XnmiPxiiSVmHijS
815OjEE3gOewDJ8Y84NWXT1Yrp/fTdcSjljrVJfvjjyLZvMPLF68myizWzTM4Xvs
q6QmCVc1eE6GfLLIIbE48o0zTec8ANiW9Tu6mX1P1CZFAlJFngj30bwdiYw43PVY
kGSbGSmcwUQjGa1YgQcMmQGXkcHcSzg107OXm4RdCLhPv5JriW24QWHexDQFJWmp
eYpRw00pTFjKR26yBQd2c0l3mz3Vir7+zeaWwA2QNr2DjjMOokwBz96gmxrb4ukO
DYXq4boZwW8OZzq8/qNBxuMcRy6UnbKOLvxVcA8+wLsIZEZouY5Z/6hVfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxm02kXhpjS7eoxeXvQ9r5dY2neMB8GA1UdIwQY
MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt
ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj
LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfesEw4HD
Vs6u28tKY0Zf3ZPel+vvyNSTrxsN6ZXi7ClNAEuotMxfHoswuodzuI3MApvHG6fw
3Ycfbhbz47PWC7sgSKy9FXVplzKkD6fl/pFhPt2WSSGsfcJ/yGwGOor6jsKQ7ogU
+oByrGXGjFK7Itja346GAso3+vL4oSIo6FEKgdch2my+fwp6Ib13X/adA+xYJCV0
+vTJcsGP7Os9L0gpIf9ncN3d8At7CmM9CjeDEVs4p4FRukL+QVwzEySCJ/baOfUH
lqov3ZeYhF49taBrdWDKh4bqcloBGpSzTFTTLwWsdTgLT82i+2pXZLEnrAfrYSFg
JlncawJYt90L+g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:42:11 2026 by rpki-client