Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: 3Ki0nH6S9vGSfCzOlZW/O2xolqSvtWwf0OFwYd8QUVE=
Subject key identifier: 67:9C:7B:A7:30:EF:84:64:DB:D2:68:26:D6:BA:B6:A8:8C:77:75:04
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 01A0DA289791B1988BECFE691CE50DBDEE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 010E
Signing time: Fri 25 Sep 2026 20:01:28 +0000
Manifest this update: Fri 25 Sep 2026 20:01:28 +0000
Manifest next update: Sat 26 Sep 2026 20:01:28 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: 9l+zCtcF7O7LyDHCWaL07Swhbb234nvt0IqGiJ6ERDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:97:91:b1:98:8b:ec:fe:69:1c:e5:0d:bd:ee:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Sep 25 20:01:28 2026 GMT
Not After : Sep 26 20:01:28 2026 GMT
Subject: CN=679c7ba730ef8464dbd26826d6bab6a88c777504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:72:6a:2b:20:13:fe:ba:7a:51:62:ba:0f:
da:eb:70:e9:52:5f:b7:cb:df:03:11:88:11:79:1f:
16:c0:0f:7f:4a:5b:1a:6e:b1:4b:27:81:76:af:d4:
8c:06:c3:fb:db:49:2e:5a:cb:d0:f1:f9:23:37:67:
1c:1a:0b:98:eb:8d:89:a3:4a:7f:f2:e8:4d:0f:9f:
b5:05:e2:f7:f7:86:7d:28:27:d8:53:34:c4:c0:b5:
07:4f:17:76:85:30:66:ef:15:1e:e5:d7:4e:ba:97:
04:8a:36:76:97:3d:42:0c:fb:63:b2:15:ce:1e:7f:
a7:86:37:71:ea:2d:b2:64:c0:bf:4d:35:ea:c2:4f:
d4:95:10:cf:e9:fb:dc:34:78:cb:d5:d8:2a:de:d1:
da:91:c1:29:2b:cf:cb:a3:63:9e:79:77:95:38:5f:
7c:e3:54:7d:63:53:31:0f:c1:34:11:ab:cd:81:7a:
5e:78:b4:49:a7:ff:f5:90:33:64:54:d0:58:f2:15:
ad:45:5b:bb:a7:92:d3:d4:98:1f:ad:ee:02:a0:15:
92:13:02:4a:93:62:20:08:af:dc:6a:a7:97:5e:25:
2a:b5:50:96:58:a3:26:3b:3b:d2:68:ea:33:2b:b8:
9e:7c:cd:dd:69:84:02:9c:6e:9c:98:a9:b1:d1:38:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9C:7B:A7:30:EF:84:64:DB:D2:68:26:D6:BA:B6:A8:8C:77:75:04
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:d5:11:d0:26:43:df:b2:1e:ea:06:f1:79:0d:b8:0c:ff:ae:
65:7d:c1:59:eb:58:f0:12:31:e9:e2:d7:be:14:ba:90:2e:62:
c2:dd:55:89:d7:7b:ae:17:36:b8:37:b7:0d:23:87:9d:d2:e2:
88:86:23:63:64:09:e9:3d:38:5f:c7:23:a5:a3:b9:36:9b:96:
e5:80:0f:18:e0:03:98:25:ff:44:8c:b6:82:ea:ee:ce:9e:25:
27:2e:e6:30:58:47:5d:44:d1:47:74:25:d0:c6:92:d8:79:cc:
6f:57:c6:dc:a6:78:78:b0:3d:c7:3e:e6:b0:40:f0:d6:9a:55:
89:05:07:37:4d:0a:05:57:c8:52:05:28:2d:83:a3:a6:ba:9c:
84:12:89:da:b0:23:ae:fe:7c:9f:a9:75:70:2c:c8:aa:ee:a8:
36:23:01:ea:ce:d2:13:11:37:75:23:5f:da:29:3f:0f:bf:e2:
64:f9:c4:6b:f4:04:ef:e4:de:bd:ca:89:09:7f:a0:14:74:7d:
b9:67:5f:f4:ea:96:32:fe:44:b3:49:b5:11:a9:ca:5f:ad:a5:
63:ba:c1:15:c2:30:4b:fa:3d:d4:66:29:48:74:19:91:c5:cc:
01:31:d9:51:00:fd:a1:1c:4f:88:7f:54:16:79:60:44:7d:24:
88:f3:d2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKJeRsZiL7P5pHOUNve4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Mzk2YWMxNGI3N2IxZjAzM2Q5ZTQ1OTIxMGM4NzNiMDEy
ZTBhNzkwHhcNMjYwOTI1MjAwMTI4WhcNMjYwOTI2MjAwMTI4WjAzMTEwLwYDVQQD
Eyg2NzljN2JhNzMwZWY4NDY0ZGJkMjY4MjZkNmJhYjZhODhjNzc3NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs9yaisgE/66elFiug/a63DpUl+3
y98DEYgReR8WwA9/SlsabrFLJ4F2r9SMBsP720kuWsvQ8fkjN2ccGguY642Jo0p/
8uhND5+1BeL394Z9KCfYUzTEwLUHTxd2hTBm7xUe5ddOupcEijZ2lz1CDPtjshXO
Hn+nhjdx6i2yZMC/TTXqwk/UlRDP6fvcNHjL1dgq3tHakcEpK8/Lo2OeeXeVOF98
41R9Y1MxD8E0EavNgXpeeLRJp//1kDNkVNBY8hWtRVu7p5LT1Jgfre4CoBWSEwJK
k2IgCK/caqeXXiUqtVCWWKMmOzvSaOozK7iefM3daYQCnG6cmKmx0TheewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGece6cw74Rk29JoJta6tqiMd3UEMB8GA1UdIwQY
MBaAFKQ5asFLd7HwM9nkWSEMhzsBLgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERscXdVdDNzZkF6MmVSWklReUhPd0V1Q25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8zZGY2ZWUtMjM2Ni00YjkyLTgzOTQt
OTFjNTBhMDkwNDdhLzEvcERscXdVdDNzZkF6MmVSWklReUhPd0V1Q25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8zZGY2ZWUtMjM2Ni00YjkyLTgzOTQtOTFjNTBhMDkwNDdh
LzEvcERscXdVdDNzZkF6MmVSWklReUhPd0V1Q25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7NUR0CZD
37Ie6gbxeQ24DP+uZX3BWetY8BIx6eLXvhS6kC5iwt1Vidd7rhc2uDe3DSOHndLi
iIYjY2QJ6T04X8cjpaO5NpuW5YAPGOADmCX/RIy2guruzp4lJy7mMFhHXUTRR3Ql
0MaS2HnMb1fG3KZ4eLA9xz7msEDw1ppViQUHN00KBVfIUgUoLYOjprqchBKJ2rAj
rv58n6l1cCzIqu6oNiMB6s7SExE3dSNf2ik/D7/iZPnEa/QE7+TevcqJCX+gFHR9
uWdf9OqWMv5Es0m1EanKX62lY7rBFcIwS/o91GYpSHQZkcXMATHZUQD9oRxPiH9U
FnlgRH0kiPPSGQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:06:02 2026 by rpki-client