Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: 0hlI05YfuZyWlon0o0j0eT3ucSRaNeK29xgSzUtAyck=
Subject key identifier: FA:15:B4:52:05:D4:E8:5E:3A:B7:B3:19:65:72:2A:12:42:1B:F6:89
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01A1AC03333A93EC7E84031E197196D2F027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0B7D
Signing time: Thu 05 Nov 2026 14:00:53 +0000
Manifest this update: Thu 05 Nov 2026 14:00:53 +0000
Manifest next update: Fri 06 Nov 2026 14:00:53 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: fCJR8Hm5tk7Oi5CEY5UN1MwCN7Zf8FNggjwvJ4lcHBc=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:03:33:3a:93:ec:7e:84:03:1e:19:71:96:d2:f0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Nov 5 14:00:53 2026 GMT
Not After : Nov 6 14:00:53 2026 GMT
Subject: CN=fa15b45205d4e85e3ab7b31965722a12421bf689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:8d:ab:80:a3:21:a7:1d:9d:fb:e1:c3:fa:
b2:7e:38:78:b7:53:94:b1:fd:d3:2d:dd:10:15:b2:
38:d3:a9:37:86:42:c5:d9:e7:4f:82:b5:e5:ac:e4:
eb:f0:71:e5:a5:d4:0f:69:81:96:bf:87:ea:a8:68:
d7:17:93:85:0f:fe:25:75:76:fa:a8:2d:84:47:a9:
4c:49:58:db:25:20:69:97:20:91:ad:da:2b:71:b5:
42:13:4e:cc:27:ab:35:2b:b8:ca:54:dd:f4:47:2f:
ce:0e:52:c7:40:ab:1a:f0:27:f9:c4:25:df:f3:01:
1c:ef:9e:26:85:4d:4e:ef:00:1b:76:ee:1e:08:49:
90:e3:ce:10:b7:54:03:65:be:f4:bc:19:5c:05:c7:
ac:6b:04:06:2e:78:8d:b0:b7:d5:26:ba:8e:a3:fd:
27:0f:57:bb:98:02:e7:5f:6f:d3:b5:ea:1f:cd:4e:
8b:86:68:1f:e1:e3:80:b4:9c:2b:55:65:75:78:0e:
e1:cb:14:cf:17:26:06:ec:27:09:00:30:74:63:17:
9d:62:f9:bb:f0:3f:b9:df:5a:1c:5e:8a:a4:99:8d:
08:ba:79:22:6d:96:22:ca:00:44:6c:02:b1:46:75:
2f:36:5e:28:27:c5:16:40:82:9d:c8:68:c5:30:0f:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:B4:52:05:D4:E8:5E:3A:B7:B3:19:65:72:2A:12:42:1B:F6:89
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:14:af:ac:ce:27:de:44:ac:b3:c6:88:ba:ba:d5:a7:ee:
51:bd:e1:66:be:ab:42:2d:92:28:83:0f:08:83:85:f3:6a:46:
db:1a:52:d3:79:97:22:c3:33:95:ef:56:93:e7:0b:04:f2:d1:
ce:68:7e:b1:03:d5:77:b7:47:a2:1d:07:c9:8f:1a:57:a9:50:
14:ef:b4:a1:bd:b7:58:0f:a4:e6:47:92:5e:64:37:d9:4d:6f:
6b:0f:3f:5d:81:62:0b:49:52:53:72:d8:d7:72:80:0c:53:f7:
17:2e:08:58:e2:94:95:2e:6e:06:54:31:ef:f4:84:4c:13:83:
ec:21:83:ff:2f:1c:9c:09:c0:6d:d4:54:58:d1:bb:ec:f3:bd:
12:d0:aa:ee:6d:d2:1b:e8:d6:c2:78:ec:3b:bd:84:49:98:be:
32:53:cc:fc:fe:11:67:2a:7e:07:37:28:a5:84:9e:18:70:3b:
de:23:81:56:6d:8e:61:0e:e7:34:fa:eb:a2:6c:4c:05:06:83:
5e:0a:7f:4c:eb:45:90:06:e1:26:79:db:bc:a1:71:52:5f:6d:
e4:a7:66:f9:3f:b0:ab:7f:f1:66:6e:b8:2d:18:66:01:fc:e8:
af:b3:21:51:6e:4e:55:75:16:2d:8f:30:31:60:cf:77:c3:9f:
cc:e6:b4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGsAzM6k+x+hAMeGXGW0vAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl
OWQyOTAwHhcNMjYxMTA1MTQwMDUzWhcNMjYxMTA2MTQwMDUzWjAzMTEwLwYDVQQD
EyhmYTE1YjQ1MjA1ZDRlODVlM2FiN2IzMTk2NTcyMmExMjQyMWJmNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKqNq4CjIacdnfvhw/qyfjh4t1OU
sf3TLd0QFbI406k3hkLF2edPgrXlrOTr8HHlpdQPaYGWv4fqqGjXF5OFD/4ldXb6
qC2ER6lMSVjbJSBplyCRrdorcbVCE07MJ6s1K7jKVN30Ry/ODlLHQKsa8Cf5xCXf
8wEc754mhU1O7wAbdu4eCEmQ484Qt1QDZb70vBlcBcesawQGLniNsLfVJrqOo/0n
D1e7mALnX2/TteofzU6Lhmgf4eOAtJwrVWV1eA7hyxTPFyYG7CcJADB0YxedYvm7
8D+531ocXoqkmY0IunkibZYiygBEbAKxRnUvNl4oJ8UWQIKdyGjFMA8u1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoVtFIF1OheOrezGWVyKhJCG/aJMB8GA1UdIwQY
MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt
ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz
LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZF4Ur6zO
J95ErLPGiLq61afuUb3hZr6rQi2SKIMPCIOF82pG2xpS03mXIsMzle9Wk+cLBPLR
zmh+sQPVd7dHoh0HyY8aV6lQFO+0ob23WA+k5keSXmQ32U1vaw8/XYFiC0lSU3LY
13KADFP3Fy4IWOKUlS5uBlQx7/SETBOD7CGD/y8cnAnAbdRUWNG77PO9EtCq7m3S
G+jWwnjsO72ESZi+MlPM/P4RZyp+BzcopYSeGHA73iOBVm2OYQ7nNPrromxMBQaD
Xgp/TOtFkAbhJnnbvKFxUl9t5Kdm+T+wq3/xZm64LRhmAfzor7MhUW5OVXUWLY8w
MWDPd8OfzOa00A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:57:21 2026 by rpki-client