Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: xQMTtWAXcoUSLGlcChocHBjlFUm9Hz7YZ2LgWryNjXI=
Subject key identifier: D7:C4:74:CB:FE:38:B7:B9:11:AB:02:CE:56:E1:58:AC:D8:D7:2F:74
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 01A0C255F0FE8607C9E3DF6064E19FFD3562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 05:00:07 +0000
Manifest this update: Mon 21 Sep 2026 05:00:07 +0000
Manifest next update: Tue 22 Sep 2026 05:00:07 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: Du15/GdThIhxkKYOflQGwH1Fcv+Kf2j+sfrq30ZG8FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:55:f0:fe:86:07:c9:e3:df:60:64:e1:9f:fd:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Sep 21 05:00:07 2026 GMT
Not After : Sep 22 05:00:07 2026 GMT
Subject: CN=d7c474cbfe38b7b911ab02ce56e158acd8d72f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:d8:e4:1a:d8:73:62:d0:de:12:10:d6:2b:
30:ea:40:9b:28:97:84:e9:d3:8e:ab:b5:59:10:b2:
fc:5f:b0:02:a4:54:0b:92:67:35:62:47:e4:43:eb:
71:b5:7a:e4:97:49:ce:06:cb:4b:ef:9c:6a:eb:6b:
2c:74:2c:58:1d:d5:78:35:fc:fd:7d:bf:27:01:83:
63:f0:71:30:3a:d5:02:52:c1:8b:7f:60:fa:5a:74:
e5:62:11:4c:1f:e6:06:4a:5a:c0:67:d6:56:19:52:
7d:cd:17:dd:97:77:94:98:a2:4b:f6:9e:4e:49:b9:
d6:e0:fc:6e:66:87:03:b8:2b:07:64:87:c9:33:6e:
e0:4d:42:f7:b4:66:a8:48:20:97:9c:88:f9:dd:0c:
25:4b:aa:73:6e:54:e7:5d:50:18:88:1b:70:3b:56:
31:ca:66:13:c3:d4:90:0c:e0:44:b5:6a:d0:67:2d:
38:b4:bc:fa:a6:de:56:c1:d1:2c:4c:17:b0:1b:55:
30:78:11:c9:d0:82:b1:40:a0:ef:46:8c:f9:67:26:
eb:c9:92:b6:39:60:e0:cc:46:89:a1:56:3b:9e:f1:
e0:9e:f2:f8:37:20:aa:96:f0:85:3d:ce:2d:3a:a6:
24:fa:53:03:7a:99:d5:9b:ba:fb:ea:2c:59:4a:3b:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:74:CB:FE:38:B7:B9:11:AB:02:CE:56:E1:58:AC:D8:D7:2F:74
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:65:97:3e:a2:2d:4f:1e:24:5e:b0:9e:08:c8:14:1c:4c:
42:8a:9f:cf:f7:2d:f3:f3:c6:98:af:fc:46:c2:2b:e7:e8:1d:
60:f7:69:d3:73:20:59:c9:02:67:3c:02:f8:d9:e3:5f:77:ac:
d1:e8:d3:ff:8a:6d:3f:61:27:59:c0:a5:4e:ba:ce:15:7b:9e:
10:41:96:0a:df:0c:67:5f:8d:62:91:78:99:ed:7f:5c:ba:ae:
03:13:86:27:e8:23:62:d1:08:8a:eb:1b:62:0c:8e:72:de:24:
76:f3:64:24:65:86:36:07:7f:db:32:f5:c6:4d:10:81:1d:d8:
92:52:4b:4d:e0:25:e9:a7:55:64:b1:87:48:d6:06:26:83:5a:
03:82:de:df:ba:24:64:f6:b2:d1:ce:07:1f:14:34:cd:e5:03:
c5:fd:f5:55:63:6e:a5:ba:07:b6:81:57:84:22:9d:a7:8b:db:
51:56:bf:b6:f2:5c:14:eb:0b:7d:6f:ed:48:f1:b8:76:7c:f8:
8c:0c:ae:70:10:2d:2d:8c:97:0a:a9:6e:34:28:d2:85:90:1f:
3b:86:a5:72:1f:36:a1:58:30:fe:e2:cb:a6:f3:b3:c9:77:86:
2b:72:45:72:ce:02:1e:32:d1:51:9a:9f:82:95:c8:ab:c0:bc:
07:9e:04:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVfD+hgfJ499gZOGf/TViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4
ZWQ2NzcwHhcNMjYwOTIxMDUwMDA3WhcNMjYwOTIyMDUwMDA3WjAzMTEwLwYDVQQD
EyhkN2M0NzRjYmZlMzhiN2I5MTFhYjAyY2U1NmUxNThhY2Q4ZDcyZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk37Y5BrYc2LQ3hIQ1isw6kCbKJeE
6dOOq7VZELL8X7ACpFQLkmc1YkfkQ+txtXrkl0nOBstL75xq62ssdCxYHdV4Nfz9
fb8nAYNj8HEwOtUCUsGLf2D6WnTlYhFMH+YGSlrAZ9ZWGVJ9zRfdl3eUmKJL9p5O
SbnW4PxuZocDuCsHZIfJM27gTUL3tGaoSCCXnIj53QwlS6pzblTnXVAYiBtwO1Yx
ymYTw9SQDOBEtWrQZy04tLz6pt5WwdEsTBewG1UweBHJ0IKxQKDvRoz5ZybryZK2
OWDgzEaJoVY7nvHgnvL4NyCqlvCFPc4tOqYk+lMDepnVm7r76ixZSjvZbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfEdMv+OLe5EasCzlbhWKzY1y90MB8GA1UdIwQY
MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt
MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh
LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbVllz6i
LU8eJF6wngjIFBxMQoqfz/ct8/PGmK/8RsIr5+gdYPdp03MgWckCZzwC+NnjX3es
0ejT/4ptP2EnWcClTrrOFXueEEGWCt8MZ1+NYpF4me1/XLquAxOGJ+gjYtEIiusb
YgyOct4kdvNkJGWGNgd/2zL1xk0QgR3YklJLTeAl6adVZLGHSNYGJoNaA4Le37ok
ZPay0c4HHxQ0zeUDxf31VWNupboHtoFXhCKdp4vbUVa/tvJcFOsLfW/tSPG4dnz4
jAyucBAtLYyXCqluNCjShZAfO4alch82oVgw/uLLpvOzyXeGK3JFcs4CHjLRUZqf
gpXIq8C8B54E0w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:57:10 2026 by rpki-client