Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: GBgde0MN8Cq+jUatecJ2hypZ+PKaDmf/gXG5U70J0lI=
Subject key identifier: CF:DC:BF:85:99:22:CA:E7:E5:49:03:FC:51:AB:04:1D:1F:21:14:13
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 01A0C2FB25CF492FAEC01FD590A9D4EA5B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 114A
Signing time: Mon 21 Sep 2026 08:00:34 +0000
Manifest this update: Mon 21 Sep 2026 08:00:34 +0000
Manifest next update: Tue 22 Sep 2026 08:00:34 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: qg9yOWHmjZ+dBNak3VK672TDf7HCvXNn8+NgFc0uTXo=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:25:cf:49:2f:ae:c0:1f:d5:90:a9:d4:ea:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Sep 21 08:00:34 2026 GMT
Not After : Sep 22 08:00:34 2026 GMT
Subject: CN=cfdcbf859922cae7e54903fc51ab041d1f211413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:02:b4:d9:38:fc:5a:02:fc:5c:f2:88:a9:
2e:6b:65:37:a6:de:9c:0a:41:99:53:44:77:21:69:
72:0d:88:6d:7c:12:0d:1e:7d:c8:8d:2e:2c:35:a8:
77:3a:36:00:11:ff:12:09:4e:84:17:44:4a:f0:93:
f6:8a:50:94:51:4b:3f:0e:20:d6:f3:bc:f7:a9:d6:
65:b5:20:00:22:97:f5:4c:51:0c:8e:69:4d:50:5c:
30:76:45:a6:dc:58:da:7e:8a:02:51:56:84:88:6f:
23:64:59:4e:b8:ae:4c:a4:df:b6:ea:2e:cd:bb:8a:
fc:3f:a4:35:04:b7:21:9c:ed:44:57:8b:fb:54:26:
eb:f4:09:d9:55:91:6c:25:2e:29:f2:06:b5:33:d5:
7f:03:0c:40:6c:4d:03:b8:6e:93:a1:87:2f:a1:aa:
9d:02:b5:51:35:55:23:c9:78:34:1a:f5:6a:b4:43:
61:5e:2a:2d:a8:ae:f7:3e:77:6a:32:07:c6:2a:7b:
e6:f1:f3:88:0d:45:5d:7b:53:01:fd:6a:1f:2d:53:
74:29:43:1c:45:de:af:50:4b:4e:f5:c8:ef:8f:22:
92:9d:71:82:72:79:a8:b1:85:68:8d:4c:32:ac:1d:
48:bd:c9:21:da:87:06:43:46:85:1a:2b:f9:a1:bf:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:BF:85:99:22:CA:E7:E5:49:03:FC:51:AB:04:1D:1F:21:14:13
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:23:15:e1:f9:5c:f5:b7:d3:d4:5f:b1:96:78:9f:ba:eb:3f:
43:ac:12:b7:59:18:94:da:cd:59:ca:63:01:3f:89:04:9f:46:
57:37:9e:ac:a7:af:61:64:86:c6:88:8c:16:c2:1a:34:06:9a:
e2:83:fa:04:23:8a:fa:e5:84:bd:26:83:23:4b:e3:50:fc:b7:
26:3a:2a:dc:7c:09:dc:24:ce:85:96:1c:bf:db:f8:b6:66:a6:
21:64:1a:dc:5a:85:32:3a:87:ea:e4:49:99:19:8b:73:49:56:
7a:ed:d3:c2:c6:0a:01:e4:19:6d:c6:aa:c2:e1:fb:0f:bd:c9:
9d:73:3f:85:0d:8c:31:73:c1:3f:43:0c:1d:b1:d9:a4:c4:c5:
b5:08:17:ea:b1:c4:e4:23:81:49:66:e1:9f:b2:9b:3f:8f:fe:
95:3a:82:57:d7:12:1b:65:8b:36:e0:28:25:16:e9:f1:95:1d:
d2:58:59:37:69:4a:8a:82:ec:f7:03:e1:0d:a6:13:0f:47:46:
30:19:94:68:ba:a2:51:5f:c9:47:e8:6c:fb:1d:c7:5c:73:96:
3e:2e:57:9a:e9:97:63:37:f1:7a:9e:35:99:ac:ee:a0:9b:97:
64:8e:ed:27:b5:b3:13:77:d2:0a:08:fa:1d:07:b8:8a:2e:06:
a0:ca:f2:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+yXPSS+uwB/VkKnU6lsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2
Y2Y4ZTQwHhcNMjYwOTIxMDgwMDM0WhcNMjYwOTIyMDgwMDM0WjAzMTEwLwYDVQQD
EyhjZmRjYmY4NTk5MjJjYWU3ZTU0OTAzZmM1MWFiMDQxZDFmMjExNDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+gCtNk4/FoC/FzyiKkua2U3pt6c
CkGZU0R3IWlyDYhtfBINHn3IjS4sNah3OjYAEf8SCU6EF0RK8JP2ilCUUUs/DiDW
87z3qdZltSAAIpf1TFEMjmlNUFwwdkWm3FjafooCUVaEiG8jZFlOuK5MpN+26i7N
u4r8P6Q1BLchnO1EV4v7VCbr9AnZVZFsJS4p8ga1M9V/AwxAbE0DuG6ToYcvoaqd
ArVRNVUjyXg0GvVqtENhXiotqK73PndqMgfGKnvm8fOIDUVde1MB/WofLVN0KUMc
Rd6vUEtO9cjvjyKSnXGCcnmosYVojUwyrB1Ivckh2ocGQ0aFGiv5ob/1sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/cv4WZIsrn5UkD/FGrBB0fIRQTMB8GA1UdIwQY
MBaAFAz+EFijHjwYlLzwZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMt
N2NlOGM5NzA0Y2YwLzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2Yw
LzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSMV4flc
9bfT1F+xlnifuus/Q6wSt1kYlNrNWcpjAT+JBJ9GVzeerKevYWSGxoiMFsIaNAaa
4oP6BCOK+uWEvSaDI0vjUPy3Jjoq3HwJ3CTOhZYcv9v4tmamIWQa3FqFMjqH6uRJ
mRmLc0lWeu3TwsYKAeQZbcaqwuH7D73JnXM/hQ2MMXPBP0MMHbHZpMTFtQgX6rHE
5COBSWbhn7KbP4/+lTqCV9cSG2WLNuAoJRbp8ZUd0lhZN2lKioLs9wPhDaYTD0dG
MBmUaLqiUV/JR+hs+x3HXHOWPi5XmumXYzfxep41mazuoJuXZI7tJ7WzE3fSCgj6
HQe4ii4GoMryjA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:26 2026 by rpki-client