Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
File: DY05iX3-Ia7thQlskKRzlvyknUE.mft (raw, json)
Hash identifier: KWnyOYlI1V8MOqBOLFNomwmXd3JkMQydjzUnao6oaEw=
Subject key identifier: FA:AA:58:18:98:00:67:1D:B6:0C:1F:4D:F8:62:8E:80:D1:DF:19:6A
Authority key identifier: 0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
Certificate issuer: /CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Certificate serial: 01A0E8C120E59B9A20DAB145D38AB1937108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
Manifest number: 1A06
Signing time: Mon 28 Sep 2026 16:02:45 +0000
Manifest this update: Mon 28 Sep 2026 16:02:45 +0000
Manifest next update: Tue 29 Sep 2026 16:02:45 +0000
Files and hashes: 1: DY05iX3-Ia7thQlskKRzlvyknUE.crl (hash: AYLcJS+QMiHGlthU6QhWnDMMNU0jQL2cx88E/ot31PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:20:e5:9b:9a:20:da:b1:45:d3:8a:b1:93:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Validity
Not Before: Sep 28 16:02:45 2026 GMT
Not After : Sep 29 16:02:45 2026 GMT
Subject: CN=faaa58189800671db60c1f4df8628e80d1df196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:d4:54:2e:f0:14:ef:c6:65:a2:a6:67:83:
c9:24:59:f5:c8:ca:62:75:58:7b:c3:9d:b5:2f:36:
d7:27:20:9c:1b:65:0d:72:55:1b:25:17:1c:08:08:
f5:54:d1:92:2a:7d:8d:b9:16:61:be:34:35:30:46:
6d:41:50:de:c7:a9:d5:73:8d:bc:cf:cb:77:10:b8:
be:b4:bf:9b:45:cb:57:e0:80:c1:28:29:ff:14:1f:
a4:f6:47:45:06:6c:c5:db:7d:6f:07:28:70:8a:1a:
45:06:9c:49:bd:04:f6:d7:6b:99:59:a7:a3:7b:59:
c8:d3:97:b1:ed:b6:c0:eb:53:7d:a5:f5:03:5c:9e:
ee:ec:b9:5d:40:91:83:16:7b:ca:2a:96:47:a3:1b:
47:d5:dc:e2:31:ac:99:16:fc:cf:d1:12:b8:02:b1:
cc:09:7d:2b:ae:85:0e:81:ab:78:91:6a:5d:57:d6:
b5:d9:ac:0b:70:58:85:ae:1e:ad:da:ef:ca:1c:43:
90:e0:70:fb:55:bc:24:41:10:15:5c:01:3c:cd:71:
83:92:64:aa:2d:0c:fd:98:61:92:76:b2:e2:36:5d:
7d:1c:e7:cc:d3:1a:93:c8:8e:af:9c:a2:bf:c1:12:
34:19:70:0e:ad:92:e8:27:3f:76:77:fc:c1:8d:cd:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:58:18:98:00:67:1D:B6:0C:1F:4D:F8:62:8E:80:D1:DF:19:6A
X509v3 Authority Key Identifier:
keyid:0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:2a:ea:40:f5:d7:70:c1:4e:28:e4:d2:a8:e9:55:50:d3:
02:5f:f8:61:0f:41:19:78:0e:1e:0c:fb:3c:82:54:2b:8c:05:
fa:b3:d7:8d:13:db:32:77:75:c1:f5:ea:86:a6:0b:80:5c:7e:
36:83:92:ff:ee:af:30:1e:4d:4a:29:73:28:03:6e:0e:10:fd:
52:ec:78:8c:2e:eb:6f:1d:ba:74:62:f1:01:f8:7f:49:d2:bd:
38:df:cf:c8:23:8c:39:a2:4d:ae:11:ed:32:cf:fe:97:9c:a1:
d6:31:e0:11:a5:76:36:8b:09:7a:01:0d:4e:1f:45:a0:87:34:
f8:64:a1:40:c0:0b:88:1b:6b:c5:37:ea:9c:34:22:e2:af:5b:
ea:b4:0d:e0:b9:24:25:34:a9:37:61:3e:57:57:a0:5e:1d:75:
a3:3a:cd:f6:79:0a:01:fe:3c:69:ee:9c:c1:55:f5:5d:71:a4:
00:30:fb:01:50:d5:8b:93:96:1c:20:30:a2:e3:39:8e:45:e0:
e0:fa:f2:35:ce:13:3a:1e:af:8f:e5:76:29:19:12:60:0c:35:
c3:94:ed:02:c7:4c:66:77:a1:88:d6:47:3d:9a:70:1d:eb:16:
ca:e1:09:f1:77:19:f7:ff:a7:8a:c3:cd:19:65:66:e4:c6:a9:
36:b6:38:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowSDlm5og2rFF04qxk3EIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGQzOTg5N2RmZTIxYWVlZDg1MDk2YzkwYTQ3Mzk2ZmNh
NDlkNDEwHhcNMjYwOTI4MTYwMjQ1WhcNMjYwOTI5MTYwMjQ1WjAzMTEwLwYDVQQD
EyhmYWFhNTgxODk4MDA2NzFkYjYwYzFmNGRmODYyOGU4MGQxZGYxOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcnUVC7wFO/GZaKmZ4PJJFn1yMpi
dVh7w521LzbXJyCcG2UNclUbJRccCAj1VNGSKn2NuRZhvjQ1MEZtQVDex6nVc428
z8t3ELi+tL+bRctX4IDBKCn/FB+k9kdFBmzF231vByhwihpFBpxJvQT212uZWaej
e1nI05ex7bbA61N9pfUDXJ7u7LldQJGDFnvKKpZHoxtH1dziMayZFvzP0RK4ArHM
CX0rroUOgat4kWpdV9a12awLcFiFrh6t2u/KHEOQ4HD7VbwkQRAVXAE8zXGDkmSq
LQz9mGGSdrLiNl19HOfM0xqTyI6vnKK/wRI0GXAOrZLoJz92d/zBjc00wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqqWBiYAGcdtgwfTfhijoDR3xlqMB8GA1UdIwQY
MBaAFA2NOYl9/iGu7YUJbJCkc5b8pJ1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFkwNWlYMy1JYTd0aFFsc2tLUnpsdnlrblVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MDhjNjgtYTczNy00M2E5LWFmMTAt
YmU4MjMxMDk4NTVlLzEvRFkwNWlYMy1JYTd0aFFsc2tLUnpsdnlrblVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81MDhjNjgtYTczNy00M2E5LWFmMTAtYmU4MjMxMDk4NTVl
LzEvRFkwNWlYMy1JYTd0aFFsc2tLUnpsdnlrblVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXcq6kD1
13DBTijk0qjpVVDTAl/4YQ9BGXgOHgz7PIJUK4wF+rPXjRPbMnd1wfXqhqYLgFx+
NoOS/+6vMB5NSilzKANuDhD9Uux4jC7rbx26dGLxAfh/SdK9ON/PyCOMOaJNrhHt
Ms/+l5yh1jHgEaV2NosJegENTh9FoIc0+GShQMALiBtrxTfqnDQi4q9b6rQN4Lkk
JTSpN2E+V1egXh11ozrN9nkKAf48ae6cwVX1XXGkADD7AVDVi5OWHCAwouM5jkXg
4PryNc4TOh6vj+V2KRkSYAw1w5TtAsdMZnehiNZHPZpwHesWyuEJ8XcZ9/+nisPN
GWVm5MapNrY4nA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:36:17 2026 by rpki-client