Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: YWEEBMD7TJgCMV+MOEwgGtWeNqeMBK9cDV2u/nFJQ84=
Subject key identifier: 90:B2:34:6F:26:CB:55:0F:1D:20:C2:7D:21:B0:84:A1:FD:23:EF:E5
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 01A0CD114E5EF035D38CAC8FA7FE3D3F21A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 0315
Signing time: Wed 23 Sep 2026 07:00:58 +0000
Manifest this update: Wed 23 Sep 2026 07:00:58 +0000
Manifest next update: Thu 24 Sep 2026 07:00:58 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: o270c5Jpxxj7x5YS0SM2vhBIAk5cxVA4CyTl9EjL19I=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
3: llmMHNqMSoDUXRxE5hAlr6D6GAE.roa (hash: R5kL9/aM+FrgRUOf+AsKqKfQFvEpHbyhgcOmGd1LC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:4e:5e:f0:35:d3:8c:ac:8f:a7:fe:3d:3f:21:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Sep 23 07:00:58 2026 GMT
Not After : Sep 24 07:00:58 2026 GMT
Subject: CN=90b2346f26cb550f1d20c27d21b084a1fd23efe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:2e:8f:5d:7a:61:1f:fc:22:ef:87:b2:59:
2b:60:90:b9:59:1f:42:2b:3b:85:d8:63:ef:65:b8:
7f:be:d7:29:05:cd:c0:88:35:86:8b:58:d4:f6:0e:
9b:de:04:c5:75:9b:29:8c:e4:8a:76:c7:13:69:9a:
81:94:19:63:61:76:da:71:7b:04:f0:ab:3e:e3:1c:
b7:ba:ed:80:5e:47:37:1d:e8:50:e4:cf:e6:3e:19:
e8:27:e1:ea:8e:ab:20:f8:8b:b1:f4:38:bb:80:4c:
ad:0d:f1:af:55:fd:0d:38:ce:3a:2c:42:ef:e7:8b:
0e:af:f8:1a:fe:2b:f5:8f:a5:b2:1c:29:94:b7:b9:
a6:64:ed:05:cb:bd:57:9a:b8:9d:10:b6:c1:54:04:
21:d9:3e:7c:9d:02:53:af:61:22:1f:07:0c:f4:64:
77:2a:8d:2c:a3:c2:38:76:2d:df:cd:0d:58:ae:75:
2e:63:f5:15:ab:fd:f4:3b:a5:69:bd:8e:6f:ab:b7:
0c:43:8b:5d:31:35:96:ba:4b:35:c9:c6:e2:39:e3:
f2:d3:e2:56:1d:c0:c8:4d:54:00:31:fd:a7:fb:03:
0d:48:9d:b0:8f:da:87:fe:e5:da:fe:70:fb:93:6c:
6f:1d:35:29:07:8c:c7:2b:61:ff:8a:cf:72:a7:39:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:34:6F:26:CB:55:0F:1D:20:C2:7D:21:B0:84:A1:FD:23:EF:E5
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:0b:4b:9a:1a:27:f9:16:01:41:46:d1:54:ae:69:47:e9:
fa:0f:39:99:9d:8f:52:d8:31:15:85:75:67:88:08:b3:67:df:
1a:df:3a:c1:3f:a6:12:54:1c:8f:a3:cc:c9:b4:f0:ef:f0:56:
08:88:31:bb:d4:ef:3e:d8:0a:5f:69:8a:00:fe:f9:ff:2a:b7:
27:a8:e7:7b:1c:c9:88:ff:19:f6:ba:ee:28:4f:db:5d:a1:47:
28:eb:52:c1:7a:79:23:ac:4d:2b:5f:34:08:d7:53:02:1b:86:
2c:82:78:f2:65:b3:bf:94:9e:09:62:2a:37:cf:8c:6e:97:51:
95:6e:ca:fc:cd:c5:e6:dc:d1:84:d1:f0:24:e0:d1:72:3a:e8:
41:44:66:eb:ac:09:29:fe:8e:6a:35:3c:f4:a8:4b:6c:ce:2d:
d7:1e:10:13:35:96:7a:07:ad:5f:f5:a4:90:63:1f:4d:18:7a:
dc:01:6b:f1:ed:90:ec:73:d3:72:13:f2:db:32:91:9a:b7:68:
11:ef:6e:9d:6b:50:2c:38:c0:2f:9f:ff:cf:7e:f6:c5:57:d7:
db:80:6c:23:0a:bf:00:23:9c:f8:4c:89:2e:37:4e:cd:71:8c:
5f:cf:ff:07:64:cc:50:59:93:58:00:47:0e:8f:cc:36:3e:4d:
4c:62:fe:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEU5e8DXTjKyPp/49PyGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0
NTYzNjIwHhcNMjYwOTIzMDcwMDU4WhcNMjYwOTI0MDcwMDU4WjAzMTEwLwYDVQQD
Eyg5MGIyMzQ2ZjI2Y2I1NTBmMWQyMGMyN2QyMWIwODRhMWZkMjNlZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5cuj116YR/8Iu+HslkrYJC5WR9C
KzuF2GPvZbh/vtcpBc3AiDWGi1jU9g6b3gTFdZspjOSKdscTaZqBlBljYXbacXsE
8Ks+4xy3uu2AXkc3HehQ5M/mPhnoJ+Hqjqsg+Iux9Di7gEytDfGvVf0NOM46LELv
54sOr/ga/iv1j6WyHCmUt7mmZO0Fy71XmridELbBVAQh2T58nQJTr2EiHwcM9GR3
Ko0so8I4di3fzQ1YrnUuY/UVq/30O6VpvY5vq7cMQ4tdMTWWuks1ycbiOePy0+JW
HcDITVQAMf2n+wMNSJ2wj9qH/uXa/nD7k2xvHTUpB4zHK2H/is9ypzkF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCyNG8my1UPHSDCfSGwhKH9I+/lMB8GA1UdIwQY
MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt
MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5
LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAsLS5oa
J/kWAUFG0VSuaUfp+g85mZ2PUtgxFYV1Z4gIs2ffGt86wT+mElQcj6PMybTw7/BW
CIgxu9TvPtgKX2mKAP75/yq3J6jnexzJiP8Z9rruKE/bXaFHKOtSwXp5I6xNK180
CNdTAhuGLIJ48mWzv5SeCWIqN8+MbpdRlW7K/M3F5tzRhNHwJODRcjroQURm66wJ
Kf6OajU89KhLbM4t1x4QEzWWegetX/WkkGMfTRh63AFr8e2Q7HPTchPy2zKRmrdo
Ee9unWtQLDjAL5//z372xVfX24BsIwq/ACOc+EyJLjdOzXGMX8//B2TMUFmTWABH
Do/MNj5NTGL+9g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:38 2026 by rpki-client