Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: eHUhY5/DUsrC9tGrb0KeIvz4zoI0MkQ2zRtwY2Uj59I=
Subject key identifier: 86:42:1B:CB:8F:36:E5:E9:8D:37:57:C2:6D:9A:FE:9B:33:A3:68:0B
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 01A1DEDE6072EE7B125808A4CF641AB6E712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 15C1
Signing time: Sun 15 Nov 2026 11:01:17 +0000
Manifest this update: Sun 15 Nov 2026 11:01:17 +0000
Manifest next update: Mon 16 Nov 2026 11:01:17 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: 2xyL0qBFjNjq8Dwqq4Gvo1Bz5BTPxtixeFAAOpPpecc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:60:72:ee:7b:12:58:08:a4:cf:64:1a:b6:e7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Nov 15 11:01:17 2026 GMT
Not After : Nov 16 11:01:17 2026 GMT
Subject: CN=86421bcb8f36e5e98d3757c26d9afe9b33a3680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:f6:75:4b:c1:52:ff:c9:52:e4:67:56:a0:
e4:b1:04:15:32:ac:fc:78:0f:ad:fb:cb:87:4a:15:
7f:a6:8a:3f:d1:69:b8:0e:6f:3a:16:b1:79:c3:fe:
33:90:b9:34:a2:85:85:03:33:34:f6:92:ce:e3:ed:
75:ba:a4:af:77:99:9b:ca:a8:c5:1e:74:e8:c4:85:
79:af:25:1e:d4:8a:8b:62:7e:d6:35:8c:2f:b9:ea:
d8:9c:85:3c:ed:59:f9:fd:0f:9a:6b:7b:a6:c3:ef:
6b:45:e2:0b:f9:19:e0:4f:bc:ee:cb:bc:85:3b:76:
e5:fb:5f:30:cb:08:b2:b5:74:19:a6:3c:23:44:9c:
ab:2e:63:89:8e:7c:f1:a0:f2:18:50:4a:cd:27:77:
43:14:f6:5c:76:78:be:33:6f:24:95:b9:ad:e9:a1:
e6:ac:b5:9d:6f:39:83:36:7f:95:92:f5:59:ce:80:
07:64:9b:49:9d:14:03:60:09:61:06:b9:46:6f:42:
93:e7:6e:e3:87:94:3d:c4:36:a8:ba:f7:d6:d5:40:
72:8f:20:a0:dd:e1:66:3e:a8:af:fa:5f:05:98:3f:
f4:89:75:0b:a6:8b:94:39:2f:12:f2:ca:0b:42:bd:
c3:75:ea:20:96:eb:4b:c8:25:ef:3b:55:24:97:c4:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:1B:CB:8F:36:E5:E9:8D:37:57:C2:6D:9A:FE:9B:33:A3:68:0B
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:96:a3:50:14:2c:7d:a8:bb:82:57:f3:9e:f6:89:5e:ef:0b:
ff:59:1c:f7:4c:cc:cf:f9:fd:74:ca:9a:0f:58:f7:29:b4:c0:
05:7b:a0:44:f5:bd:9d:dd:d2:6b:aa:77:35:ca:58:51:b8:b1:
b3:ef:27:3c:90:55:6d:b6:37:1a:91:9d:a4:ac:df:25:af:ab:
f5:0b:39:c0:82:e3:0b:99:29:ec:26:15:00:9f:f6:2f:23:5b:
d7:d8:32:6a:3f:b9:cc:0a:64:24:f3:ef:bb:9c:63:4a:6f:97:
c0:1a:f4:41:b4:36:be:b1:f4:1d:d5:b4:56:15:bd:15:19:5e:
0b:12:83:43:b9:20:93:63:09:10:e6:a7:dc:3c:14:0b:f6:da:
e0:15:5e:e0:f9:92:e1:9c:1f:1c:80:4f:63:bd:5b:78:49:69:
9d:4f:34:a2:5c:92:56:7c:ee:4f:c7:7e:9a:1f:f7:65:04:96:
18:89:a2:03:e0:4c:3f:e0:67:4e:3e:aa:56:f0:55:29:dc:72:
fd:e1:5d:bd:49:c1:50:53:7a:cd:b5:f6:69:87:ee:1d:c0:32:
ce:f5:bf:cd:fc:fe:c6:46:ea:f3:5c:40:29:e0:2f:fb:74:34:
01:59:2e:cc:b4:99:81:4c:d2:4b:6c:19:63:6a:77:87:23:41:
0b:96:c8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3mBy7nsSWAikz2QatucSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYxMTE1MTEwMTE3WhcNMjYxMTE2MTEwMTE3WjAzMTEwLwYDVQQD
Eyg4NjQyMWJjYjhmMzZlNWU5OGQzNzU3YzI2ZDlhZmU5YjMzYTM2ODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75T2dUvBUv/JUuRnVqDksQQVMqz8
eA+t+8uHShV/poo/0Wm4Dm86FrF5w/4zkLk0ooWFAzM09pLO4+11uqSvd5mbyqjF
HnToxIV5ryUe1IqLYn7WNYwvuerYnIU87Vn5/Q+aa3umw+9rReIL+RngT7zuy7yF
O3bl+18wywiytXQZpjwjRJyrLmOJjnzxoPIYUErNJ3dDFPZcdni+M28klbmt6aHm
rLWdbzmDNn+VkvVZzoAHZJtJnRQDYAlhBrlGb0KT527jh5Q9xDaouvfW1UByjyCg
3eFmPqiv+l8FmD/0iXULpouUOS8S8soLQr3DdeoglutLyCXvO1Ukl8Ry/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZCG8uPNuXpjTdXwm2a/pszo2gLMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpajUBQs
fai7glfznvaJXu8L/1kc90zMz/n9dMqaD1j3KbTABXugRPW9nd3Sa6p3NcpYUbix
s+8nPJBVbbY3GpGdpKzfJa+r9Qs5wILjC5kp7CYVAJ/2LyNb19gyaj+5zApkJPPv
u5xjSm+XwBr0QbQ2vrH0HdW0VhW9FRleCxKDQ7kgk2MJEOan3DwUC/ba4BVe4PmS
4ZwfHIBPY71beElpnU80olySVnzuT8d+mh/3ZQSWGImiA+BMP+BnTj6qVvBVKdxy
/eFdvUnBUFN6zbX2aYfuHcAyzvW/zfz+xkbq81xAKeAv+3Q0AVkuzLSZgUzSS2wZ
Y2p3hyNBC5bIDw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:15:26 2026 by rpki-client