Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: S2WjUihOeq+QbSbS74zWhprW87ilAANTBmpYW2Sb5Fg=
Subject key identifier: 1C:53:0A:C6:A0:87:93:B7:56:71:F1:4E:1E:33:FC:08:17:B7:92:28
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01A1C253BECE0BEFA3D4E30FF297F19BBAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 1AED
Signing time: Mon 09 Nov 2026 22:00:30 +0000
Manifest this update: Mon 09 Nov 2026 22:00:30 +0000
Manifest next update: Tue 10 Nov 2026 22:00:30 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: 789mDiqQ773e9WhJ88OWqd92p/Tog2imGNdtYnfU48I=)
2: O42Gic4dc360gIgddLeLvJAb0gg.roa (hash: cQ+n7ZgZ26eThRiniwC6AUO7/0CEDaEl6tna9PIT/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:53:be:ce:0b:ef:a3:d4:e3:0f:f2:97:f1:9b:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Nov 9 22:00:30 2026 GMT
Not After : Nov 10 22:00:30 2026 GMT
Subject: CN=1c530ac6a08793b75671f14e1e33fc0817b79228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:52:3c:20:80:fc:8d:7d:33:56:b8:03:b5:
c6:82:ad:c9:d8:99:b1:56:61:e5:e9:6c:d8:30:dd:
1d:d4:8d:8e:a1:b9:4b:64:2e:ba:12:44:29:71:2d:
a1:a0:bb:dd:bb:0f:9b:92:56:1c:34:42:33:19:ad:
ee:36:a6:73:75:81:89:3e:c1:0d:db:08:11:20:8b:
8a:32:c8:11:85:80:a5:79:89:26:b2:8d:d8:2c:49:
6c:78:26:bb:ef:b6:b2:50:31:fc:2a:dd:52:67:34:
a3:b6:0e:28:b2:7b:61:9e:92:87:76:20:04:0a:a8:
07:eb:43:a9:a0:8c:ba:f4:45:30:c0:92:c1:50:73:
54:31:ae:98:20:26:64:be:dc:5d:79:e4:39:90:32:
6f:61:95:11:72:ce:dd:d8:c7:d0:3c:5c:7b:dd:97:
8b:0e:f5:f6:4f:08:b8:8e:ae:dd:00:83:46:d5:09:
c7:4c:f3:01:c1:20:3d:2d:9d:18:f9:16:d0:49:04:
d4:5c:47:a3:04:b5:2b:ce:4d:5c:30:bf:76:70:aa:
74:ea:ef:2f:57:96:98:39:9b:8c:06:09:dd:bd:f3:
05:b2:05:ca:31:a0:a3:e1:8d:22:3b:f8:e0:cd:c3:
c3:05:1a:30:e7:e0:a0:87:e4:d0:64:70:d6:e5:12:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:0A:C6:A0:87:93:B7:56:71:F1:4E:1E:33:FC:08:17:B7:92:28
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:de:d9:02:35:a7:3d:54:b7:9d:4b:a9:e9:90:a5:a1:33:
df:c9:a0:64:35:41:d3:c9:30:d0:7d:e0:8a:42:41:50:d9:f9:
86:6b:f0:f1:de:35:c8:dc:42:ea:01:cb:97:de:df:a3:0f:64:
81:e0:c6:5c:dd:4a:3d:16:27:da:13:73:dd:39:63:4b:e6:52:
1c:b3:cc:89:6f:f0:ec:b8:ea:9f:91:f7:74:64:0a:55:a5:63:
f1:94:48:00:7c:65:63:97:9a:c5:c0:5f:ef:eb:31:8b:52:15:
8e:21:1e:bc:09:2c:e5:c5:7f:92:41:a3:25:bd:2e:64:c5:35:
09:7b:b9:6d:e4:e1:cb:07:03:df:c5:4c:7e:a3:12:5f:98:4a:
cd:9b:ce:99:ef:cf:29:e9:be:fd:90:24:41:95:c5:60:ba:20:
04:ea:63:fc:23:d0:d0:67:da:fb:7e:bc:53:67:27:06:0d:97:
85:14:bd:ab:90:37:56:cc:e7:e9:6b:08:68:51:7e:50:21:e0:
87:dc:13:f9:3a:39:f4:21:ec:d0:89:bb:24:51:90:8e:09:37:
d4:a9:f3:25:3e:90:e2:71:78:39:e2:ea:d2:9b:94:aa:4f:f5:
aa:17:94:a8:e2:5a:cb:fc:49:fe:d2:e5:b7:42:74:c3:a9:32:
3c:1b:9a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHCU77OC++j1OMP8pfxm7r3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjZlNjMzMDY3YzA2NmFlOWJlZjFkMzc3MWNjMzAwZTRi
NGQxYTcwHhcNMjYxMTA5MjIwMDMwWhcNMjYxMTEwMjIwMDMwWjAzMTEwLwYDVQQD
EygxYzUzMGFjNmEwODc5M2I3NTY3MWYxNGUxZTMzZmMwODE3Yjc5MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukdSPCCA/I19M1a4A7XGgq3J2Jmx
VmHl6WzYMN0d1I2OoblLZC66EkQpcS2hoLvduw+bklYcNEIzGa3uNqZzdYGJPsEN
2wgRIIuKMsgRhYCleYkmso3YLElseCa777ayUDH8Kt1SZzSjtg4osnthnpKHdiAE
CqgH60OpoIy69EUwwJLBUHNUMa6YICZkvtxdeeQ5kDJvYZURcs7d2MfQPFx73ZeL
DvX2Twi4jq7dAING1QnHTPMBwSA9LZ0Y+RbQSQTUXEejBLUrzk1cML92cKp06u8v
V5aYOZuMBgndvfMFsgXKMaCj4Y0iO/jgzcPDBRow5+Cgh+TQZHDW5RJq8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxTCsagh5O3VnHxTh4z/AgXt5IoMB8GA1UdIwQY
MBaAFA325jMGfAZq6b7x03ccwwDktNGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTct
OGQxYzlkMTE5MmIwLzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTctOGQxYzlkMTE5MmIw
LzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjc7e2QI1
pz1Ut51LqemQpaEz38mgZDVB08kw0H3gikJBUNn5hmvw8d41yNxC6gHLl97fow9k
geDGXN1KPRYn2hNz3TljS+ZSHLPMiW/w7Ljqn5H3dGQKVaVj8ZRIAHxlY5eaxcBf
7+sxi1IVjiEevAks5cV/kkGjJb0uZMU1CXu5beThywcD38VMfqMSX5hKzZvOme/P
Kem+/ZAkQZXFYLogBOpj/CPQ0Gfa+368U2cnBg2XhRS9q5A3Vszn6WsIaFF+UCHg
h9wT+To59CHs0Im7JFGQjgk31KnzJT6Q4nF4OeLq0puUqk/1qheUqOJay/xJ/tLl
t0J0w6kyPBuaXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 03:52:24 2026 by rpki-client