Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: jnAQUeOQ4ZSDkmqR6RolArN9Xc11bUtYZqqaaIXSvsg=
Subject key identifier: E7:ED:65:6E:60:27:96:4E:E9:6E:C1:36:BE:C0:22:C6:61:43:36:15
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01A1C4B0C67871750F538533C0E7ECB9AD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1AED
Signing time: Tue 10 Nov 2026 09:01:21 +0000
Manifest this update: Tue 10 Nov 2026 09:01:21 +0000
Manifest next update: Wed 11 Nov 2026 09:01:21 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: /7IZtK++ydI0z07iG9+MwvxaSyxdEfpcJVQCg6GVAgY=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b0:c6:78:71:75:0f:53:85:33:c0:e7:ec:b9:ad:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Nov 10 09:01:21 2026 GMT
Not After : Nov 11 09:01:21 2026 GMT
Subject: CN=e7ed656e6027964ee96ec136bec022c661433615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:6c:80:41:85:ed:4c:bc:49:e7:fb:b2:ea:
4e:7a:70:ca:25:d0:c8:9d:62:bd:a1:5f:29:b5:0f:
cd:01:66:06:fc:ec:14:e1:44:1d:4d:9b:e0:7d:00:
c5:5b:80:a7:62:5b:d3:bf:59:63:08:91:1c:60:e8:
3e:18:93:6c:91:e8:30:02:b7:a8:3f:d5:a7:de:6c:
a2:2e:d9:6a:c1:84:e8:43:f7:7b:d8:b8:3c:61:db:
52:ae:ae:af:b5:bf:05:e2:c3:7f:3b:f5:c7:49:3a:
90:41:d7:8c:84:11:46:a6:28:02:a3:c4:04:ba:13:
9e:82:73:51:c9:0c:31:95:50:9e:a2:3a:b2:26:1c:
d5:72:d4:77:5b:ce:2d:92:86:b8:a1:49:bf:a4:c0:
ed:8f:35:4c:af:be:e7:30:6e:7c:32:b1:ed:37:e0:
3e:a0:bf:90:f5:76:5c:fe:b1:d6:51:94:c9:3b:76:
71:bf:60:45:14:38:8b:22:a9:71:b3:94:ea:b0:e3:
d1:8e:12:8e:0f:5c:26:e2:3d:05:17:8a:80:48:97:
50:c9:5d:cc:95:eb:0f:c1:b7:3a:83:1c:8f:6a:74:
da:ce:75:3e:a9:9c:f4:24:d5:9e:3c:60:8e:f3:eb:
5b:74:bf:1e:0e:98:2f:5e:58:32:31:83:c6:57:7f:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:65:6E:60:27:96:4E:E9:6E:C1:36:BE:C0:22:C6:61:43:36:15
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:59:c6:80:2c:37:2a:06:a5:83:57:dc:ed:71:55:29:d2:2a:
ad:d4:bb:27:29:b0:03:8c:b9:8a:a5:21:47:f0:1f:fb:34:9a:
ea:6c:60:02:e9:da:44:70:3d:06:04:d4:66:fa:3a:89:7f:0b:
91:d2:16:cb:45:f4:ec:87:52:30:a2:52:64:c5:80:d8:db:c5:
91:f3:d7:ce:da:f2:1e:a5:a8:19:62:95:59:b3:cb:cf:0d:70:
fe:b3:f0:9e:e3:04:b8:26:93:78:4c:ab:af:95:88:07:5c:3d:
84:c0:7b:65:e3:09:33:d2:e3:d4:0f:3e:89:5c:f3:e8:aa:4a:
d3:10:90:71:ff:56:d9:cc:31:1e:83:3f:45:b9:27:a9:c2:4b:
c9:64:b4:92:fa:bc:00:c2:22:06:9a:90:20:81:59:46:11:02:
45:55:3e:53:ca:5c:2f:84:2e:77:4a:b8:c2:72:a7:92:d1:84:
d5:1f:b5:cf:0b:1a:50:b9:b8:86:7f:75:cb:3c:aa:39:ac:70:
98:b3:a4:19:d0:7e:a4:02:e0:8b:1a:b7:72:a6:0f:f5:e8:f6:
e0:de:cb:f8:e2:cc:a8:1d:8d:0e:d7:d6:d6:cd:5d:62:29:8d:
f1:de:cd:2d:a9:c5:b6:65:d0:be:70:b1:74:03:a0:ed:28:4d:
f9:7f:13:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEsMZ4cXUPU4UzwOfsua2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl
YzgyYjMwHhcNMjYxMTEwMDkwMTIxWhcNMjYxMTExMDkwMTIxWjAzMTEwLwYDVQQD
EyhlN2VkNjU2ZTYwMjc5NjRlZTk2ZWMxMzZiZWMwMjJjNjYxNDMzNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp5sgEGF7Uy8Sef7supOenDKJdDI
nWK9oV8ptQ/NAWYG/OwU4UQdTZvgfQDFW4CnYlvTv1ljCJEcYOg+GJNskegwAreo
P9Wn3myiLtlqwYToQ/d72Lg8YdtSrq6vtb8F4sN/O/XHSTqQQdeMhBFGpigCo8QE
uhOegnNRyQwxlVCeojqyJhzVctR3W84tkoa4oUm/pMDtjzVMr77nMG58MrHtN+A+
oL+Q9XZc/rHWUZTJO3Zxv2BFFDiLIqlxs5TqsOPRjhKOD1wm4j0FF4qASJdQyV3M
lesPwbc6gxyPanTaznU+qZz0JNWePGCO8+tbdL8eDpgvXlgyMYPGV3/O0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOftZW5gJ5ZO6W7BNr7AIsZhQzYVMB8GA1UdIwQY
MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt
ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj
LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVnGgCw3
Kgalg1fc7XFVKdIqrdS7JymwA4y5iqUhR/Af+zSa6mxgAunaRHA9BgTUZvo6iX8L
kdIWy0X07IdSMKJSZMWA2NvFkfPXztryHqWoGWKVWbPLzw1w/rPwnuMEuCaTeEyr
r5WIB1w9hMB7ZeMJM9Lj1A8+iVzz6KpK0xCQcf9W2cwxHoM/RbknqcJLyWS0kvq8
AMIiBpqQIIFZRhECRVU+U8pcL4Qud0q4wnKnktGE1R+1zwsaULm4hn91yzyqOaxw
mLOkGdB+pALgixq3cqYP9ej24N7L+OLMqB2NDtfW1s1dYimN8d7NLanFtmXQvnCx
dAOg7ShN+X8T7w==
-----END CERTIFICATE-----
Generated at Tue Nov 10 15:31:45 2026 by rpki-client