Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: ULd/pM/bFFn1wGF5ZEgBEz/yhPWSzIVj6b5fZHbXtoY=
Subject key identifier: 94:D7:A3:56:AA:40:50:6C:BB:0C:93:FC:01:4C:B4:77:80:84:D7:8E
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 01A0D94D082B304C0CC0E9CE54947C6D5768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 146B
Signing time: Fri 25 Sep 2026 16:01:39 +0000
Manifest this update: Fri 25 Sep 2026 16:01:39 +0000
Manifest next update: Sat 26 Sep 2026 16:01:39 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: 3r1Bq04t67wXnL6FkE/BEPYg6iAr5UkHDKuYHZJsC6w=)
2: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (hash: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:08:2b:30:4c:0c:c0:e9:ce:54:94:7c:6d:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Sep 25 16:01:39 2026 GMT
Not After : Sep 26 16:01:39 2026 GMT
Subject: CN=94d7a356aa40506cbb0c93fc014cb4778084d78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:85:1a:ce:f1:6b:d5:26:47:bf:4a:fc:ef:
7c:a0:d5:d0:5a:95:8c:a1:b3:89:80:35:1f:0e:b7:
04:da:65:70:2f:17:a8:d0:a1:26:a1:06:f5:4f:0c:
22:e7:03:6c:5c:ed:52:ee:d8:02:fe:40:bc:dd:f3:
ed:b4:4a:77:6c:4d:ef:39:b5:c8:cf:3c:ad:38:bb:
65:2c:42:f0:55:36:66:70:f6:e5:cd:be:4d:b2:a9:
a3:2d:13:3b:7c:80:31:28:aa:56:c3:25:e5:b5:9f:
c5:93:e7:98:76:e9:d9:5f:24:93:d5:b5:7e:9e:36:
98:95:df:4b:49:63:6e:e7:bf:b2:71:8d:73:a2:5d:
a7:f7:61:48:6a:86:7e:26:62:5e:3a:a1:ee:eb:85:
17:91:5d:32:93:61:a3:37:95:a8:83:f2:bd:fc:61:
8c:0c:7d:26:4d:4d:e5:0c:49:69:4d:71:86:03:a2:
58:63:0f:fb:85:54:ba:ef:e3:4a:cf:bd:7f:a0:c5:
cf:1c:b0:8a:88:38:95:8e:23:2c:01:9b:8c:fb:80:
97:dc:62:2e:91:a4:16:21:4f:11:1b:db:d5:88:a4:
7b:f1:9e:57:0e:d5:7a:b6:7a:fb:c6:68:90:52:e6:
c9:37:f7:80:e9:16:ea:ef:5f:72:40:f4:97:4d:da:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:A3:56:AA:40:50:6C:BB:0C:93:FC:01:4C:B4:77:80:84:D7:8E
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c8:67:ca:18:03:14:b8:d7:d8:d0:df:8c:6f:e0:e8:1b:a0:
09:6b:07:9e:01:6d:7e:d6:db:27:89:c8:be:fc:f6:7a:ab:5d:
d1:f3:7f:5a:07:b8:a4:72:10:a5:9f:0c:4b:fd:a1:a0:5a:69:
21:34:de:a8:51:4a:1e:90:aa:61:ed:90:92:8b:df:27:37:ad:
19:d9:9b:00:c2:4c:70:45:af:60:dc:d4:a9:d6:1a:b0:56:06:
92:22:a5:3d:92:a4:93:e9:c0:5e:1b:a3:87:00:40:72:ab:0c:
72:33:0e:5a:cd:fb:96:30:eb:e0:a8:81:21:7f:36:c0:0b:d1:
ce:5c:9c:d7:67:95:1a:ff:2d:0f:bf:97:4e:c8:7b:ca:ae:b1:
01:09:05:82:c4:2c:34:a5:ba:62:80:5a:8f:d0:8d:c9:a3:85:
a3:28:32:c6:4e:73:ce:9a:88:aa:d7:02:b5:c5:53:1d:11:a3:
ee:b0:11:25:4c:68:07:32:45:94:b3:ad:f7:d9:85:2c:ff:29:
77:d9:64:41:c8:6d:1a:a0:80:0f:6c:e1:e5:4c:c3:c3:e6:65:
34:bd:49:6a:f0:5a:98:58:5c:68:8a:8a:2f:b3:3d:ba:19:f2:
6c:f8:a4:bd:c7:f8:6f:fd:28:17:02:de:b2:f0:96:f8:7d:ab:
29:ad:1d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTQgrMEwMwOnOVJR8bVdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGVlNzk0NGFjNGRhMzExMTI5NWQ4MWUyOWRlYmEwMGMx
NjNhOTYwHhcNMjYwOTI1MTYwMTM5WhcNMjYwOTI2MTYwMTM5WjAzMTEwLwYDVQQD
Eyg5NGQ3YTM1NmFhNDA1MDZjYmIwYzkzZmMwMTRjYjQ3NzgwODRkNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfCFGs7xa9UmR79K/O98oNXQWpWM
obOJgDUfDrcE2mVwLxeo0KEmoQb1Twwi5wNsXO1S7tgC/kC83fPttEp3bE3vObXI
zzytOLtlLELwVTZmcPblzb5NsqmjLRM7fIAxKKpWwyXltZ/Fk+eYdunZXyST1bV+
njaYld9LSWNu57+ycY1zol2n92FIaoZ+JmJeOqHu64UXkV0yk2GjN5Wog/K9/GGM
DH0mTU3lDElpTXGGA6JYYw/7hVS67+NKz71/oMXPHLCKiDiVjiMsAZuM+4CX3GIu
kaQWIU8RG9vViKR78Z5XDtV6tnr7xmiQUubJN/eA6Rbq719yQPSXTdq/zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTXo1aqQFBsuwyT/AFMtHeAhNeOMB8GA1UdIwQY
MBaAFA/e55RKxNoxESldgeKd66AMFjqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81NDRiZWEtZjFlYy00NjY2LTgxYzAt
NzhhNGQ2NTY5M2ZlLzEvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS81NDRiZWEtZjFlYy00NjY2LTgxYzAtNzhhNGQ2NTY5M2Zl
LzEvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMhnyhgD
FLjX2NDfjG/g6BugCWsHngFtftbbJ4nIvvz2eqtd0fN/Wge4pHIQpZ8MS/2hoFpp
ITTeqFFKHpCqYe2QkovfJzetGdmbAMJMcEWvYNzUqdYasFYGkiKlPZKkk+nAXhuj
hwBAcqsMcjMOWs37ljDr4KiBIX82wAvRzlyc12eVGv8tD7+XTsh7yq6xAQkFgsQs
NKW6YoBaj9CNyaOFoygyxk5zzpqIqtcCtcVTHRGj7rARJUxoBzJFlLOt99mFLP8p
d9lkQchtGqCAD2zh5UzDw+ZlNL1JavBamFhcaIqKL7M9uhnybPikvcf4b/0oFwLe
svCW+H2rKa0dpA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:13:37 2026 by rpki-client