Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
File: rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft (raw, json)
Hash identifier: mLE5ff5WdwKa4QgPwABox8R37y5thjUsa/ypqnnUmcY=
Subject key identifier: 59:55:F8:05:6E:BF:75:2D:5B:13:0F:6F:E5:E2:82:3B:E1:D7:BC:4E
Authority key identifier: AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
Certificate issuer: /CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Certificate serial: 01A0C2C49505C8D01FAC6A4D588E4F99D7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 07:00:58 +0000
Manifest this update: Mon 21 Sep 2026 07:00:58 +0000
Manifest next update: Tue 22 Sep 2026 07:00:58 +0000
Files and hashes: 1: Gz3X-8j7Gx8pdMMWfZmGyoE6DGU.asa (hash: JA74CtsgdHK+a985gzPDuNOhZzq1S8tTRMrgbwBv/V0=)
2: ljuOz3ZBebPMNEnB7_alp2yK5FA.roa (hash: pcxcuskwHxObg6pFZjDF5cqRBnlQbP8YvCsLWhIo4g0=)
3: rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl (hash: OYhPZEyxDIOqpG0y2RfMx1dAuHmTZcpbNIt/gFHr1Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:95:05:c8:d0:1f:ac:6a:4d:58:8e:4f:99:d7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Validity
Not Before: Sep 21 07:00:58 2026 GMT
Not After : Sep 22 07:00:58 2026 GMT
Subject: CN=5955f8056ebf752d5b130f6fe5e2823be1d7bc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:9b:40:c7:7d:e3:08:1a:15:54:eb:5c:b6:
aa:d1:2d:e8:68:b2:ae:15:1a:38:72:11:7d:50:d2:
0e:75:20:e8:e9:88:4c:aa:3b:d0:82:ac:75:bb:26:
96:40:a3:90:86:55:ef:d5:e9:dd:57:16:a5:14:f3:
65:d1:29:a8:e0:0a:48:9d:43:6e:70:7e:b2:8c:2f:
33:a2:3a:3a:18:50:ba:0f:7b:a8:4f:86:d6:bd:15:
5b:1c:c9:32:b8:87:e4:8c:af:0a:c1:cf:6a:07:cb:
b0:e8:86:8a:72:41:9a:43:8b:47:79:94:ea:e9:33:
7c:e9:b5:d5:74:11:e7:ad:9d:79:75:85:d5:7e:bc:
55:f6:8b:7e:2d:ee:c7:4f:23:ad:29:5f:51:01:ad:
3f:d6:39:d7:3c:88:47:ad:ee:0c:45:56:fb:dc:12:
56:3d:ac:42:7e:47:a6:73:4f:a0:51:c9:b6:a9:d3:
f4:0a:df:7c:55:f5:ef:08:3c:57:7e:49:eb:1e:84:
d9:35:39:0a:01:e9:1c:fc:64:1b:ac:db:5f:ff:06:
4d:ee:af:63:ac:42:d5:6d:0b:af:47:03:7d:97:71:
d5:a0:77:2b:7c:1d:5c:21:92:f3:ed:6b:b3:3f:51:
ea:6a:63:4b:dd:08:ed:bf:ea:a9:30:18:0c:e7:46:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:F8:05:6E:BF:75:2D:5B:13:0F:6F:E5:E2:82:3B:E1:D7:BC:4E
X509v3 Authority Key Identifier:
keyid:AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:bf:40:c7:02:24:97:5b:20:85:9f:75:fd:60:4e:bf:b7:
62:29:12:a1:16:fe:99:7e:ed:29:46:06:58:e9:5b:be:de:8d:
f3:ef:61:0d:16:ab:84:ea:0d:c8:c4:ce:97:37:e1:ea:41:a3:
01:af:d8:a3:5e:60:5c:6a:0f:fd:02:07:81:0d:e1:0a:d5:7b:
84:83:5c:41:6f:cc:47:d0:a5:ec:e3:86:80:ba:d3:ec:c4:a2:
5d:0c:1b:0b:b4:aa:89:55:ff:95:08:8d:33:64:24:ac:3a:84:
98:17:57:48:77:b5:d5:68:43:00:45:ac:49:db:3d:1a:e4:bb:
ab:d3:9f:7c:2d:65:a4:fb:4a:b1:b3:28:b4:b1:93:f9:88:ef:
ff:a7:1f:87:26:ab:93:de:2e:80:d6:c8:54:81:ab:1d:58:86:
36:c3:88:8a:cd:a6:a9:a7:83:c5:68:cc:f7:db:3c:92:0d:f1:
da:a8:f0:86:64:b4:35:83:98:d0:1d:1f:17:e7:2e:c7:db:23:
d3:78:69:53:25:5f:52:b3:36:4e:5f:97:43:36:b5:f6:3e:cb:
ab:87:a0:15:79:81:be:fe:30:69:51:66:b0:6b:86:e2:14:35:
cd:29:9c:91:4e:e2:98:3e:b5:ce:48:a5:0d:80:1b:fc:28:7f:
26:51:c7:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxJUFyNAfrGpNWI5Pmde6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNDExMzBkNzdkMGY2ODIyZGY2ZGM3MWY1NjlhYWZmNDdm
NjcyZGUwHhcNMjYwOTIxMDcwMDU4WhcNMjYwOTIyMDcwMDU4WjAzMTEwLwYDVQQD
Eyg1OTU1ZjgwNTZlYmY3NTJkNWIxMzBmNmZlNWUyODIzYmUxZDdiYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymbQMd94wgaFVTrXLaq0S3oaLKu
FRo4chF9UNIOdSDo6YhMqjvQgqx1uyaWQKOQhlXv1endVxalFPNl0Smo4ApInUNu
cH6yjC8zojo6GFC6D3uoT4bWvRVbHMkyuIfkjK8Kwc9qB8uw6IaKckGaQ4tHeZTq
6TN86bXVdBHnrZ15dYXVfrxV9ot+Le7HTyOtKV9RAa0/1jnXPIhHre4MRVb73BJW
PaxCfkemc0+gUcm2qdP0Ct98VfXvCDxXfknrHoTZNTkKAekc/GQbrNtf/wZN7q9j
rELVbQuvRwN9l3HVoHcrfB1cIZLz7WuzP1HqamNL3Qjtv+qpMBgM50biDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlV+AVuv3UtWxMPb+Xigjvh17xOMB8GA1UdIwQY
MBaAFKxBEw130PaCLfbccfVpqv9H9nLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckVFVERYZlE5b0l0OXR4eDlXbXFfMGYyY3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wM2FmZmEtNDAyOS00YWQ3LTk3OWYt
ZmQ4YjkxZWY1M2ViLzEvckVFVERYZlE5b0l0OXR4eDlXbXFfMGYyY3Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wM2FmZmEtNDAyOS00YWQ3LTk3OWYtZmQ4YjkxZWY1M2Vi
LzEvckVFVERYZlE5b0l0OXR4eDlXbXFfMGYyY3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpe/QMcC
JJdbIIWfdf1gTr+3YikSoRb+mX7tKUYGWOlbvt6N8+9hDRarhOoNyMTOlzfh6kGj
Aa/Yo15gXGoP/QIHgQ3hCtV7hINcQW/MR9Cl7OOGgLrT7MSiXQwbC7SqiVX/lQiN
M2QkrDqEmBdXSHe11WhDAEWsSds9GuS7q9OffC1lpPtKsbMotLGT+Yjv/6cfhyar
k94ugNbIVIGrHViGNsOIis2mqaeDxWjM99s8kg3x2qjwhmS0NYOY0B0fF+cux9sj
03hpUyVfUrM2Tl+XQza19j7Lq4egFXmBvv4waVFmsGuG4hQ1zSmckU7imD61zkil
DYAb/Ch/JlHHrA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:34:28 2026 by rpki-client