Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier: +MljaMu3H4CDau/VGzU8ponK5tgbc+mw3jI/A2zNucw=
Subject key identifier: 25:99:39:73:CF:5E:DE:92:67:33:14:E7:BD:30:98:5C:C0:AF:26:8A
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019CAC4698C2300E3C32C6C34D9479D4BF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number: 1375
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: 4tLtZV00F7203d-0-VBLm-eP82U.roa (hash: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM=)
2: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: DqNNMrzdxSzN2yMwAkB5CsFQAHWJLHlrpXgBkjB0aGo=)
3: jknUDg7dwoXIKf-FEYWIUojpUtc.roa (hash: 2W3qLOECU7Uc4cSeqqL3ulz5L4R4vc28jKIJo8yhIIg=)
4: yeFo64foK3kpAhiGs_pqxDBcJmw.roa (hash: 4dFVu3RpkjabUXVyt139HwNFtfV67WkuH9beOvHuc1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:98:c2:30:0e:3c:32:c6:c3:4d:94:79:d4:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=25993973cf5ede92673314e7bd30985cc0af268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:68:f4:35:66:c7:aa:5f:ba:de:ca:e3:67:
73:b0:3e:fb:82:c9:84:f7:5c:74:20:a9:66:2a:86:
1f:2b:93:e8:ad:d4:6e:6c:ea:33:17:6a:62:ec:7b:
1b:2c:9b:8d:31:bb:22:39:cc:0c:f0:f2:52:7a:19:
eb:e0:a7:11:73:2e:07:66:a6:4c:01:67:43:bf:af:
79:85:12:3a:73:bc:f2:58:e8:e7:3a:bd:c3:e1:c1:
33:af:0d:f8:cf:24:19:78:08:10:f3:ae:56:8e:c9:
ff:1f:4a:07:ac:ff:9c:46:28:61:df:d8:a8:bc:a5:
32:a9:af:33:ef:58:93:30:33:f3:e6:81:85:28:c7:
54:44:ba:21:31:23:79:af:b5:5c:79:7a:c2:79:de:
32:83:2c:89:6c:4f:eb:18:14:7f:07:af:00:e7:34:
69:92:00:91:07:2e:e0:20:27:43:ca:a3:03:6f:e0:
0b:e1:31:ad:c9:85:70:d7:6b:7f:03:d6:cd:ea:a2:
a7:ed:0a:c6:4e:71:43:0e:87:b5:14:1a:21:87:0e:
cb:a7:6c:5b:9a:6c:56:72:d8:89:c8:b9:50:9b:bc:
43:d8:c7:8b:fd:9e:9b:62:20:2e:67:d2:9e:ef:6a:
ed:bb:ad:c7:31:1b:a1:b6:72:fa:eb:60:99:34:7d:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:39:73:CF:5E:DE:92:67:33:14:E7:BD:30:98:5C:C0:AF:26:8A
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a2:d0:7f:4b:b1:ed:54:19:2e:42:6d:33:5b:2e:6f:4d:da:
74:eb:71:93:eb:7e:61:9c:a8:fd:ce:32:7a:20:44:6f:56:22:
a8:73:71:e3:1d:04:92:dc:90:6b:20:08:22:5b:45:80:79:73:
2a:ab:d0:2d:fd:ee:20:6d:ba:02:dc:1a:bd:9f:50:28:8b:98:
51:ae:84:55:ef:c7:d9:56:75:36:45:03:95:8a:43:6c:5f:b6:
9d:4f:79:5f:93:92:54:28:c1:aa:60:ae:ae:37:bb:fd:53:08:
84:a7:6c:98:7a:17:c8:03:27:c8:ae:3f:1a:2e:70:d0:94:86:
16:b9:df:2f:ac:7d:73:86:7e:3d:41:1a:c6:11:1b:30:fd:58:
a2:dd:9d:f9:92:d1:33:7c:45:b4:6a:8a:b3:14:d1:a7:c5:59:
50:a0:a8:4d:df:ed:d9:33:3c:a5:7b:ac:70:18:d0:75:19:21:
a5:df:e1:b5:ed:74:36:57:f6:80:b4:0e:76:81:57:9a:73:0a:
28:0f:fa:70:b3:f2:44:e8:b2:ae:cd:35:11:1b:d2:96:03:58:
56:43:2b:60:39:f6:ab:68:b5:f5:9c:c8:bb:29:9b:b4:06:7c:
c2:6d:e3:61:af:4e:8c:ef:21:1c:ca:a9:50:20:42:d5:87:d5:
3c:d0:ca:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpjCMA48MsbDTZR51L8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh
N2U5ZDQwHhcNMjYwMzAyMDIwMDMzWhcNMjYwMzAzMDIwMDMzWjAzMTEwLwYDVQQD
EygyNTk5Mzk3M2NmNWVkZTkyNjczMzE0ZTdiZDMwOTg1Y2MwYWYyNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rBo9DVmx6pfut7K42dzsD77gsmE
91x0IKlmKoYfK5PordRubOozF2pi7HsbLJuNMbsiOcwM8PJSehnr4KcRcy4HZqZM
AWdDv695hRI6c7zyWOjnOr3D4cEzrw34zyQZeAgQ865Wjsn/H0oHrP+cRihh39io
vKUyqa8z71iTMDPz5oGFKMdURLohMSN5r7VceXrCed4ygyyJbE/rGBR/B68A5zRp
kgCRBy7gICdDyqMDb+AL4TGtyYVw12t/A9bN6qKn7QrGTnFDDoe1FBohhw7Lp2xb
mmxWctiJyLlQm7xD2MeL/Z6bYiAuZ9Ke72rtu63HMRuhtnL662CZNH1YfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWZOXPPXt6SZzMU570wmFzAryaKMB8GA1UdIwQY
MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt
ZjdkMDI3NTYwMDU4LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4
LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKLQf0ux
7VQZLkJtM1sub03adOtxk+t+YZyo/c4yeiBEb1YiqHNx4x0EktyQayAIIltFgHlz
KqvQLf3uIG26AtwavZ9QKIuYUa6EVe/H2VZ1NkUDlYpDbF+2nU95X5OSVCjBqmCu
rje7/VMIhKdsmHoXyAMnyK4/Gi5w0JSGFrnfL6x9c4Z+PUEaxhEbMP1Yot2d+ZLR
M3xFtGqKsxTRp8VZUKCoTd/t2TM8pXuscBjQdRkhpd/hte10Nlf2gLQOdoFXmnMK
KA/6cLPyROiyrs01ERvSlgNYVkMrYDn2q2i19ZzIuymbtAZ8wm3jYa9OjO8hHMqp
UCBC1YfVPNDK0A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:24 2026 by rpki-client