Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: dsydDy0rvyB4hTpHrt/Zyi/dUwfo3wJDhKd9F+Ci4Wg=
Subject key identifier: FB:F5:B5:E7:10:B8:3D:EB:79:B8:64:7D:F7:AB:08:38:88:01:CF:23
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 01A0C28CF903F1C5374548811D38ED277EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: 0576
Signing time: Mon 21 Sep 2026 06:00:13 +0000
Manifest this update: Mon 21 Sep 2026 06:00:13 +0000
Manifest next update: Tue 22 Sep 2026 06:00:13 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: f6o2OrV2BqclrMDgE9x3GSWE5ApxHJ2tfcS16I32MFg=)
2: LOtYNSOIJLqn8y7bAA6r24saOkk.asa (hash: jnFWZlKsQlmviLgHTcWDoVumAZhReG7QINLCGxqwiGo=)
3: ZHi1ZhCdWfH9BoGN5VcU78t29bk.roa (hash: SRJcc4sRWkIGgmHfVj6UPyJviHaRkjxeQWqok2u9PGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8c:f9:03:f1:c5:37:45:48:81:1d:38:ed:27:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Sep 21 06:00:13 2026 GMT
Not After : Sep 22 06:00:13 2026 GMT
Subject: CN=fbf5b5e710b83deb79b8647df7ab08388801cf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:d0:15:2b:84:8a:93:e0:f7:d8:0a:ec:6d:
82:c0:7e:24:86:dd:cf:5d:e0:e5:b4:5c:0c:55:72:
8d:aa:1c:54:2c:f6:af:2c:f1:77:99:51:a8:0f:71:
18:28:4f:25:ad:9c:21:5f:71:16:0a:ef:3d:65:97:
76:bf:9a:29:e9:e5:92:51:1b:1a:d8:d6:1c:82:a2:
2f:fc:9c:68:89:4e:1b:b4:19:03:d2:e1:94:70:d0:
9f:12:fe:c9:3d:98:de:3e:69:f9:c7:30:d7:39:73:
32:8e:f1:ee:5c:f0:51:63:72:f5:08:60:72:d9:f6:
55:ca:e4:ec:cf:0b:7d:66:4a:b5:80:4f:05:20:71:
5a:d8:ec:3b:3a:39:7d:75:11:40:c0:85:43:69:4b:
2b:3d:d5:02:c0:e6:74:42:97:98:f4:65:73:d0:d1:
74:33:1f:73:32:8f:5d:65:1c:af:fd:b6:df:79:1f:
83:89:1c:5f:12:e2:93:44:5a:f3:0e:b5:3f:e3:ed:
de:22:70:4f:23:5e:10:1d:5c:bd:e5:46:61:21:c4:
e9:0e:99:88:cf:bf:61:ef:e0:4c:7c:46:ac:e3:44:
2e:70:eb:25:a4:37:d0:4c:f3:b7:13:7d:a2:09:c3:
bc:01:8e:72:cb:13:57:cd:18:34:58:af:0d:34:4e:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:B5:E7:10:B8:3D:EB:79:B8:64:7D:F7:AB:08:38:88:01:CF:23
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:01:a4:30:72:0a:5c:d5:53:41:7b:63:66:83:d0:43:b7:
59:95:bb:8c:3c:ff:24:0a:24:1b:16:f9:01:61:5d:8a:20:72:
01:fc:ee:c3:76:c4:81:a8:8a:53:50:3d:e8:8d:12:36:38:d5:
88:88:f0:fd:f8:1f:ed:db:02:04:d1:3d:33:35:cf:32:1d:e1:
b3:7f:7b:19:96:a5:19:7d:79:9e:3d:e7:56:2f:75:48:45:0f:
a2:47:4a:1e:fc:70:36:7f:7e:7e:83:30:2f:6a:7c:4e:3c:8c:
0d:4d:d7:f9:fd:14:1e:7b:12:64:fb:76:23:8c:16:26:23:02:
29:9f:1b:b5:b4:e2:e5:89:f6:41:a1:04:17:ad:59:32:93:19:
64:bc:b3:ef:ed:94:20:89:34:b2:ef:56:97:a9:03:b2:db:2f:
c4:ff:70:91:1d:5f:b5:8b:73:93:cd:fb:b1:56:ea:f9:aa:be:
40:4d:44:0f:82:57:94:3b:97:6c:a9:e0:ed:13:a5:79:ce:90:
d9:ab:2a:9c:07:e2:bf:96:f5:71:a3:ea:d3:5a:3b:85:a4:af:
d2:39:6d:ae:bf:24:f1:ee:ab:c8:68:26:61:e6:5f:33:2e:df:
e0:fa:af:c2:0d:b8:bd:84:96:57:8d:51:2e:cf:8b:19:87:81:
64:2d:72:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjPkD8cU3RUiBHTjtJ37dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNWEwOGZjMzQ2OTBmNTJkYjBjMmI3ZTQ3ZThlNTM4ODMx
NDVhOTgwHhcNMjYwOTIxMDYwMDEzWhcNMjYwOTIyMDYwMDEzWjAzMTEwLwYDVQQD
EyhmYmY1YjVlNzEwYjgzZGViNzliODY0N2RmN2FiMDgzODg4MDFjZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11fQFSuEipPg99gK7G2CwH4kht3P
XeDltFwMVXKNqhxULPavLPF3mVGoD3EYKE8lrZwhX3EWCu89ZZd2v5op6eWSURsa
2NYcgqIv/JxoiU4btBkD0uGUcNCfEv7JPZjePmn5xzDXOXMyjvHuXPBRY3L1CGBy
2fZVyuTszwt9Zkq1gE8FIHFa2Ow7Ojl9dRFAwIVDaUsrPdUCwOZ0QpeY9GVz0NF0
Mx9zMo9dZRyv/bbfeR+DiRxfEuKTRFrzDrU/4+3eInBPI14QHVy95UZhIcTpDpmI
z79h7+BMfEas40QucOslpDfQTPO3E32iCcO8AY5yyxNXzRg0WK8NNE6mXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv1tecQuD3rebhkfferCDiIAc8jMB8GA1UdIwQY
MBaAFA5aCPw0aQ9S2wwrfkfo5TiDFFqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjkt
YTc3ZjBiMzIxNDRlLzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjktYTc3ZjBiMzIxNDRl
LzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNoBpDBy
ClzVU0F7Y2aD0EO3WZW7jDz/JAokGxb5AWFdiiByAfzuw3bEgaiKU1A96I0SNjjV
iIjw/fgf7dsCBNE9MzXPMh3hs397GZalGX15nj3nVi91SEUPokdKHvxwNn9+foMw
L2p8TjyMDU3X+f0UHnsSZPt2I4wWJiMCKZ8btbTi5Yn2QaEEF61ZMpMZZLyz7+2U
IIk0su9Wl6kDstsvxP9wkR1ftYtzk837sVbq+aq+QE1ED4JXlDuXbKng7ROlec6Q
2asqnAfiv5b1caPq01o7haSv0jltrr8k8e6ryGgmYeZfMy7f4Pqvwg24vYSWV41R
Ls+LGYeBZC1y2w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:56:43 2026 by rpki-client