Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: nsiKQnyhr7aDrrkQ7C5QPQK0XDZpazarAFQkX6ha0FI=
Subject key identifier: B3:9F:EE:2D:84:3A:B5:77:AB:77:B2:2A:F4:28:BA:CF:B7:F2:82:66
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 01A0C5FBDDA6C9CA9681D50B9A90474D29C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 1159
Signing time: Mon 21 Sep 2026 22:00:12 +0000
Manifest this update: Mon 21 Sep 2026 22:00:12 +0000
Manifest next update: Tue 22 Sep 2026 22:00:12 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: hRNatppn1nCmS93X1PwR433k2kDnJ1i6klPtORYCu+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:dd:a6:c9:ca:96:81:d5:0b:9a:90:47:4d:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Sep 21 22:00:12 2026 GMT
Not After : Sep 22 22:00:12 2026 GMT
Subject: CN=b39fee2d843ab577ab77b22af428bacfb7f28266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:bb:dd:75:9f:9b:17:83:cc:52:8f:17:d3:
71:cb:ca:3a:39:11:32:c3:99:80:50:c4:05:97:1c:
7c:9a:49:96:6d:1e:d8:75:47:81:d1:48:64:14:79:
39:d7:1f:50:c0:76:bd:0d:df:cb:d1:95:99:b3:6e:
5f:b7:b2:2f:d0:03:50:a7:62:75:0b:f3:74:7f:4b:
1d:ac:ca:b9:92:ce:1f:f4:4d:ad:e4:93:2b:10:49:
24:c9:70:d0:fd:6e:d2:7f:94:10:4c:e4:d4:0c:81:
5a:a0:6d:ae:23:13:73:0e:68:48:a4:6d:cd:61:ce:
4a:48:d1:39:ee:4f:5e:aa:1a:d1:59:68:cd:ad:18:
de:82:1a:f2:94:64:a5:8c:cd:6a:e7:9e:1b:3b:62:
24:e5:a9:90:1b:05:cc:a3:72:43:98:8d:25:92:fe:
c9:a7:5a:38:23:b2:aa:3a:14:88:b5:4a:13:8e:84:
cb:d5:c1:30:f4:6b:35:74:a3:e8:85:ca:0a:3f:10:
01:27:52:6e:75:9b:e4:8f:eb:e5:99:82:75:2f:29:
f9:d0:75:94:ef:6c:a0:27:f9:ad:2a:17:22:92:06:
2c:74:71:38:fd:2d:cd:aa:95:65:4d:19:23:1d:55:
24:b3:88:6d:22:43:46:35:4e:49:d3:45:68:a0:15:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:EE:2D:84:3A:B5:77:AB:77:B2:2A:F4:28:BA:CF:B7:F2:82:66
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:12:c0:5a:f0:89:96:3d:04:d4:c0:d5:02:85:8f:79:fd:15:
5d:88:65:5a:80:c7:a7:9c:d8:7d:cd:63:d7:61:c4:30:f5:57:
0c:5b:d6:73:73:e0:8f:5a:c8:8d:5f:ce:8e:b4:18:c2:3b:c4:
a2:fc:72:a8:5d:fd:59:94:3c:9c:ad:31:77:8f:f6:b7:6f:9a:
cf:27:d8:99:f0:77:ef:eb:3c:5a:60:d2:8d:9e:d6:75:8c:8d:
c7:9c:65:a5:f3:0a:36:6c:d1:c9:2b:36:72:be:8b:de:41:38:
ff:e3:1b:37:30:5a:b2:01:93:42:07:e1:e1:55:c6:f5:0a:ba:
4a:34:dd:6c:5b:70:ef:1b:6f:15:07:6c:2f:12:62:8b:e3:a3:
fa:bb:06:06:ea:57:1f:3e:53:85:a0:e2:ca:27:24:aa:7f:8a:
b9:70:6c:59:e9:35:a9:9b:6d:ff:94:60:ff:9f:8d:7c:cf:fb:
4c:60:bd:bc:ab:1f:1a:5c:96:7b:bf:9c:01:59:f1:ca:79:3e:
cd:e7:53:26:a1:c2:41:0c:b2:11:d6:53:a7:ba:cd:9a:60:1a:
f3:48:0b:e2:a1:56:e8:66:42:69:c0:cc:33:4e:d0:cd:22:01:
d8:ec:b4:76:1a:95:e0:76:4e:9e:96:92:2a:97:43:68:8f:af:
1d:e6:aa:cd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDF+92mycqWgdULmpBHTSnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmY5ZGE0MzBiZmYyNjhjODQzYTJlNTg2MDk4YzhkNzAy
MWNhMDYwHhcNMjYwOTIxMjIwMDEyWhcNMjYwOTIyMjIwMDEyWjAzMTEwLwYDVQQD
EyhiMzlmZWUyZDg0M2FiNTc3YWI3N2IyMmFmNDI4YmFjZmI3ZjI4MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4a73XWfmxeDzFKPF9Nxy8o6OREy
w5mAUMQFlxx8mkmWbR7YdUeB0UhkFHk51x9QwHa9Dd/L0ZWZs25ft7Iv0ANQp2J1
C/N0f0sdrMq5ks4f9E2t5JMrEEkkyXDQ/W7Sf5QQTOTUDIFaoG2uIxNzDmhIpG3N
Yc5KSNE57k9eqhrRWWjNrRjeghrylGSljM1q554bO2Ik5amQGwXMo3JDmI0lkv7J
p1o4I7KqOhSItUoTjoTL1cEw9Gs1dKPohcoKPxABJ1JudZvkj+vlmYJ1Lyn50HWU
72ygJ/mtKhcikgYsdHE4/S3NqpVlTRkjHVUks4htIkNGNU5J00VooBVQWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLOf7i2EOrV3q3eyKvQous+38oJmMB8GA1UdIwQY
MBaAFPj/naQwv/JoyEOi5YYJjI1wIcoGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QLWRwRENfOG1qSVE2TGxoZ21NalhBaHlnWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzFhNzhmLWMzMWItNDM4MS04NjMx
LTY4MjljMGZjNzM4ZS8xLzEtUC1kcERDXzhtaklRNkxsaGdtTWpYQWh5Z1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VmLzMxYTc4Zi1jMzFiLTQzODEtODYzMS02ODI5YzBmYzcz
OGUvMS8xLVAtZHBEQ184bWpJUTZMbGhnbU1qWEFoeWdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhLA
WvCJlj0E1MDVAoWPef0VXYhlWoDHp5zYfc1j12HEMPVXDFvWc3Pgj1rIjV/OjrQY
wjvEovxyqF39WZQ8nK0xd4/2t2+azyfYmfB37+s8WmDSjZ7WdYyNx5xlpfMKNmzR
ySs2cr6L3kE4/+MbNzBasgGTQgfh4VXG9Qq6SjTdbFtw7xtvFQdsLxJii+Oj+rsG
BupXHz5ThaDiyickqn+KuXBsWek1qZtt/5Rg/5+NfM/7TGC9vKsfGlyWe7+cAVnx
ynk+zedTJqHCQQyyEdZTp7rNmmAa80gL4qFW6GZCacDMM07QzSIB2Oy0dhqV4HZO
npaSKpdDaI+vHeaqzQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:19:38 2026 by rpki-client