
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: sDJlSlhXRwkYLBAJJBZutKRQeWdNrcm6HHcS6p6vD6M=
Subject key identifier: 21:05:70:28:15:1A:54:C0:68:DE:5E:BB:81:EC:13:D7:25:8D:A2:94
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 01A0C55758513B285F92E07B39A887D411CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 19:00:30 +0000
Manifest this update: Mon 21 Sep 2026 19:00:30 +0000
Manifest next update: Tue 22 Sep 2026 19:00:30 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: j0XI4ZyATH9kdFGSJMVLzRcUo3P+f5V8sRn4ReGTe5k=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:58:51:3b:28:5f:92:e0:7b:39:a8:87:d4:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Sep 21 19:00:30 2026 GMT
Not After : Sep 22 19:00:30 2026 GMT
Subject: CN=21057028151a54c068de5ebb81ec13d7258da294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:95:28:d5:2a:38:27:c9:76:b3:80:aa:0d:
a1:98:ee:ea:56:92:fa:bd:ee:f3:e2:80:7e:48:12:
ad:63:e5:cf:6c:43:1c:e5:23:db:84:aa:ae:df:cc:
1b:e9:34:e1:d3:2a:f8:63:f7:f1:b9:34:80:be:81:
6f:22:b8:ef:a4:f0:8b:ab:51:75:31:c8:a8:6e:10:
39:1b:1c:21:db:44:f3:d9:b4:65:e1:b5:28:51:be:
be:04:09:f9:b2:1c:22:be:31:6f:0f:75:4b:71:d4:
05:5a:96:e3:db:bb:c1:e3:bd:f1:eb:a0:20:5d:13:
ab:5f:80:7c:96:8b:1e:a2:10:3d:7a:c6:ab:cd:0a:
31:a0:c9:a4:86:c6:c9:bc:39:f5:6e:26:54:07:fd:
d6:01:90:55:9d:1e:ca:3e:e2:b6:bd:f6:2c:78:15:
e7:9c:46:dc:ba:94:95:32:c1:39:ae:e1:4c:2e:f0:
0d:8e:23:76:7f:69:4a:3b:92:38:f7:82:fa:6b:d0:
f5:46:50:da:6f:64:a0:44:67:dd:b1:f1:f9:d1:4f:
2a:00:79:dc:f1:ea:8e:d8:50:24:7c:be:e6:fc:73:
3a:42:03:63:07:e9:65:b8:a6:69:a5:c9:91:f7:1f:
15:e2:2e:c9:f9:2e:c3:32:a0:cd:81:f7:da:98:62:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:70:28:15:1A:54:C0:68:DE:5E:BB:81:EC:13:D7:25:8D:A2:94
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:cb:e0:d0:f1:c6:2c:51:d1:ca:59:e1:7f:13:7d:9c:7d:
d0:f3:bc:ca:32:51:a7:ee:dc:6a:34:53:15:e2:d1:33:e9:f8:
0c:7a:75:66:df:15:b5:5b:3a:15:04:db:3d:e5:8f:b2:09:3b:
c7:99:23:05:49:aa:ca:58:67:12:1d:a4:f3:12:6b:15:4a:d1:
80:99:89:c5:35:17:2e:a8:9a:57:ab:7b:39:ac:9f:73:f6:22:
a5:d5:e6:db:d1:fe:b1:36:a5:b2:eb:ef:ce:14:f8:13:1a:86:
e3:4a:2d:3e:51:80:8f:49:21:dd:55:34:bb:68:29:ff:16:b3:
ac:43:5b:45:bc:ba:e5:0e:34:1a:c3:0c:3a:2a:97:ac:a7:49:
27:d6:3c:c2:53:e9:c4:f7:d8:b7:00:63:98:3a:98:aa:7d:0c:
3b:4c:de:1c:06:47:3e:06:fd:03:80:4c:67:00:a7:49:11:e8:
37:87:d3:d2:cc:f1:11:3e:d6:23:d3:ff:47:12:33:c7:70:92:
1b:f4:14:50:e8:7b:14:66:3a:de:a0:e3:df:a4:b7:fa:f0:6d:
4b:f3:15:a3:1c:82:34:10:52:0a:a4:94:ba:d9:1c:81:8e:e3:
ed:c9:0c:8f:5b:be:70:c7:60:01:e7:b2:c3:d3:47:7b:32:22:
07:89:ad:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV1hROyhfkuB7OaiH1BHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj
MmM2OGIwHhcNMjYwOTIxMTkwMDMwWhcNMjYwOTIyMTkwMDMwWjAzMTEwLwYDVQQD
EygyMTA1NzAyODE1MWE1NGMwNjhkZTVlYmI4MWVjMTNkNzI1OGRhMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLGVKNUqOCfJdrOAqg2hmO7qVpL6
ve7z4oB+SBKtY+XPbEMc5SPbhKqu38wb6TTh0yr4Y/fxuTSAvoFvIrjvpPCLq1F1
MciobhA5Gxwh20Tz2bRl4bUoUb6+BAn5shwivjFvD3VLcdQFWpbj27vB473x66Ag
XROrX4B8loseohA9esarzQoxoMmkhsbJvDn1biZUB/3WAZBVnR7KPuK2vfYseBXn
nEbcupSVMsE5ruFMLvANjiN2f2lKO5I494L6a9D1RlDab2SgRGfdsfH50U8qAHnc
8eqO2FAkfL7m/HM6QgNjB+lluKZppcmR9x8V4i7J+S7DMqDNgffamGLyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEFcCgVGlTAaN5eu4HsE9cljaKUMB8GA1UdIwQY
MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt
OTkzY2Q4Mzg4ZmQ1LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1
LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsjL4NDx
xixR0cpZ4X8TfZx90PO8yjJRp+7cajRTFeLRM+n4DHp1Zt8VtVs6FQTbPeWPsgk7
x5kjBUmqylhnEh2k8xJrFUrRgJmJxTUXLqiaV6t7Oayfc/YipdXm29H+sTalsuvv
zhT4ExqG40otPlGAj0kh3VU0u2gp/xazrENbRby65Q40GsMMOiqXrKdJJ9Y8wlPp
xPfYtwBjmDqYqn0MO0zeHAZHPgb9A4BMZwCnSRHoN4fT0szxET7WI9P/RxIzx3CS
G/QUUOh7FGY63qDj36S3+vBtS/MVoxyCNBBSCqSUutkcgY7j7ckMj1u+cMdgAeey
w9NHezIiB4mtVg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:43:35 2026 by rpki-client