Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: /eymZG6M1yDlz13oSxa9CCQ+dF1T22AOYJXuncf7X8s=
Subject key identifier: 9D:8E:AD:B2:4A:1F:6B:FA:B5:B9:C4:30:FA:04:10:63:76:45:D0:BD
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01A0C3A031D5FD49DC5A8B89F33940CAE787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0DF2
Signing time: Mon 21 Sep 2026 11:00:50 +0000
Manifest this update: Mon 21 Sep 2026 11:00:50 +0000
Manifest next update: Tue 22 Sep 2026 11:00:50 +0000
Files and hashes: 1: 0Zv7gbcee3oYhoixuKSpzeAn6hc.roa (hash: g3K2VjxQqR918zAxnhQ8qYXe0zM7/nlsaCescrnOAFg=)
2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: mANam11Du/LbN74cQwWXgmowMeqCFo4jaI6YPw4QLn0=)
3: MtiFhvTFU6eR6K3JPWffFMPpWmA.roa (hash: DwTW8G9tlrgSrBgtQLqohKIvgiVA/TbEnEkmiFwX6uc=)
4: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
5: aCdtB2nYu55hGLQQzrV3-u62JS4.roa (hash: 0jBdXE3UE70+A74fzbLHoyPujmWBV5PBwxsIako4QUY=)
6: fcJRAvhE3GJ9JzGChcUs2vcrezw.roa (hash: IUgxFKpPcgKwv0m19KbyxHATCx8pJEqt3FiR48y3FC8=)
7: wYnksyA9j8IE38MK44WdI8QthwY.roa (hash: kUGjESP6hpImIv040oxFMoVXOTG5+DBRjTAXej9uu34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:31:d5:fd:49:dc:5a:8b:89:f3:39:40:ca:e7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Sep 21 11:00:50 2026 GMT
Not After : Sep 22 11:00:50 2026 GMT
Subject: CN=9d8eadb24a1f6bfab5b9c430fa0410637645d0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:c0:1a:9d:ab:ac:82:06:0b:68:f5:3e:3e:
bb:82:af:94:83:ec:48:e9:df:e0:08:42:7a:c7:ce:
a5:03:68:d9:50:45:fa:3f:16:83:57:54:62:45:cd:
bc:6a:fa:79:6d:42:30:42:cc:9e:81:9b:5b:3c:f7:
98:21:e5:23:3b:bd:17:2b:80:2c:a8:b1:44:f7:7b:
a3:81:5d:45:90:0e:6f:84:c0:84:5f:e5:7b:9b:d2:
69:29:5f:4c:aa:92:15:2e:3e:8d:41:62:5c:e6:61:
9a:9f:f5:14:92:c5:57:5c:87:4a:89:e3:e1:1f:e4:
e2:9c:37:a6:94:77:31:2c:54:a7:be:09:90:f4:5c:
82:1b:b5:bb:f9:47:3a:2d:98:45:a5:7b:c3:46:16:
23:7e:75:eb:89:70:95:b1:31:9e:be:b2:2a:47:66:
ff:a5:03:43:9e:c6:66:2c:30:f3:a5:20:5c:47:81:
33:69:af:8d:fc:fc:0c:1d:67:e7:d3:5e:fe:3d:ab:
6d:5a:24:90:f9:80:2b:31:da:ed:ed:91:8d:ff:5c:
d5:0d:a1:93:0e:13:c2:c6:37:66:9c:4f:bc:82:7b:
b7:81:ae:cd:1d:a4:5d:38:ce:ce:66:78:aa:3e:18:
1d:43:ec:c0:98:f7:f5:ab:cd:11:f0:cf:9f:12:70:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8E:AD:B2:4A:1F:6B:FA:B5:B9:C4:30:FA:04:10:63:76:45:D0:BD
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b2:c0:d2:d3:cc:dd:76:95:e4:dd:73:03:d6:38:31:dd:1c:
3c:fc:09:b8:c3:09:0c:3d:d1:ff:02:1a:83:b0:d2:08:cf:1e:
fd:14:e5:02:02:77:d9:e1:03:f7:0c:fb:a2:7e:93:45:32:aa:
3f:c9:45:d1:fd:a9:63:ab:7d:9a:2e:23:f5:7c:9c:c9:b9:74:
6e:32:d1:5c:b4:04:1e:8e:cc:32:81:fd:c6:98:7c:a1:a7:75:
70:1d:36:e4:c2:be:4d:8f:dd:a5:78:60:1e:68:7f:a8:18:4a:
f3:4b:57:ea:99:8b:21:34:65:b0:10:28:e1:19:f3:b7:08:5b:
22:73:6d:bb:e2:de:33:8b:9f:6c:e7:c5:bb:ab:59:40:78:9f:
2d:e5:56:8f:2b:41:55:ea:01:e2:80:71:72:9e:f9:43:32:65:
de:16:e7:3c:cd:6f:b4:27:69:03:92:4c:c3:58:63:b3:25:3e:
38:54:9a:a7:a5:7b:89:b4:b1:ab:b7:68:18:41:7a:65:ed:43:
ab:f7:16:b8:fa:e3:c9:39:1a:2d:3d:35:1a:9a:55:a9:03:ad:
d9:31:be:dc:73:60:8b:05:d6:55:5c:c0:61:8f:d5:92:90:db:
45:67:12:c9:60:fc:b4:46:a1:eb:48:32:df:2c:8d:b4:97:d4:
fb:fc:6e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoDHV/UncWouJ8zlAyueHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjYwOTIxMTEwMDUwWhcNMjYwOTIyMTEwMDUwWjAzMTEwLwYDVQQD
Eyg5ZDhlYWRiMjRhMWY2YmZhYjViOWM0MzBmYTA0MTA2Mzc2NDVkMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZbAGp2rrIIGC2j1Pj67gq+Ug+xI
6d/gCEJ6x86lA2jZUEX6PxaDV1RiRc28avp5bUIwQsyegZtbPPeYIeUjO70XK4As
qLFE93ujgV1FkA5vhMCEX+V7m9JpKV9MqpIVLj6NQWJc5mGan/UUksVXXIdKiePh
H+TinDemlHcxLFSnvgmQ9FyCG7W7+Uc6LZhFpXvDRhYjfnXriXCVsTGevrIqR2b/
pQNDnsZmLDDzpSBcR4Ezaa+N/PwMHWfn017+PattWiSQ+YArMdrt7ZGN/1zVDaGT
DhPCxjdmnE+8gnu3ga7NHaRdOM7OZniqPhgdQ+zAmPf1q80R8M+fEnCVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2OrbJKH2v6tbnEMPoEEGN2RdC9MB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbLA0tPM
3XaV5N1zA9Y4Md0cPPwJuMMJDD3R/wIag7DSCM8e/RTlAgJ32eED9wz7on6TRTKq
P8lF0f2pY6t9mi4j9Xycybl0bjLRXLQEHo7MMoH9xph8oad1cB025MK+TY/dpXhg
Hmh/qBhK80tX6pmLITRlsBAo4RnztwhbInNtu+LeM4ufbOfFu6tZQHifLeVWjytB
VeoB4oBxcp75QzJl3hbnPM1vtCdpA5JMw1hjsyU+OFSap6V7ibSxq7doGEF6Ze1D
q/cWuPrjyTkaLT01GppVqQOt2TG+3HNgiwXWVVzAYY/VkpDbRWcSyWD8tEah60gy
3yyNtJfU+/xuPA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:17:58 2026 by rpki-client