Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: QdAdLVdVwkoqOFiLakGP9bKIImuOwlCylY9miqfOIgo=
Subject key identifier: 95:79:BD:57:5F:43:52:E4:FF:43:2D:98:6D:0A:12:A9:76:0C:0C:EB
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019CABD9FD4520611EF961B5F740557BA45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 1081
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: W2R_v-2PPRrVboMkPWH3Dj3JLrg.roa (hash: rkDwJt2K+Km3nsqaf+K/HYTojuHm7A1VkU7dA/qfqmQ=)
2: WgVuaq8pi4PEvuwDOmYyXIWprRU.roa (hash: oOdve/P3iAIAYO1Vt2jG8C9dlYkYXKP6wSYOHPb5U5c=)
3: l3ZvOxpIrbUcB01N9M89_gpX50g.roa (hash: waibiTCkXa3tlVwbpLhiCRrC9KIAbQGlow3ILlHZv2k=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: iMvveI5V1TYp4KrFlGYzLG0l2HibS1UmxQ5oYBrt2ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fd:45:20:61:1e:f9:61:b5:f7:40:55:7b:a4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=9579bd575f4352e4ff432d986d0a12a9760c0ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:2c:29:39:b4:7f:00:83:1f:5a:e3:61:a9:
6a:65:cd:f1:2f:33:44:7c:5a:d1:50:bc:31:c7:50:
76:26:22:ab:fa:70:f8:45:4e:81:7b:0c:43:7a:08:
7a:5b:71:7e:1c:04:f5:d0:fb:69:33:3f:df:6b:0e:
24:c8:eb:65:0c:b9:c1:49:96:a8:f6:7a:a1:41:66:
f7:7b:f8:bf:9a:f3:98:c2:16:77:7e:d4:16:9a:60:
a2:04:68:59:8d:68:e8:53:1b:ed:2e:b5:f1:08:5e:
d9:68:4a:30:d4:f0:cb:23:1c:03:83:3d:dd:a1:24:
00:b5:85:53:9f:6a:ee:cb:d5:d3:32:e3:e8:47:95:
f7:18:35:46:de:71:c9:58:5c:fb:8e:84:44:fa:6c:
83:85:8f:ec:53:7e:4c:b4:8c:e6:cb:9a:10:8c:85:
c6:fd:8e:4f:7b:8f:26:fd:65:6d:39:58:4e:6a:26:
f7:ed:c6:d3:77:5f:99:0f:d5:96:87:02:fb:61:ed:
30:e7:15:c4:e6:ab:d2:42:45:6a:6b:9b:f5:35:75:
d9:1d:1b:46:73:cb:f8:93:e0:e4:f3:18:96:6a:bb:
6d:f7:22:54:11:24:b5:10:de:be:5b:77:d2:31:fc:
c0:15:b1:c9:fe:01:a5:54:4c:7d:3e:0d:0b:eb:5f:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:79:BD:57:5F:43:52:E4:FF:43:2D:98:6D:0A:12:A9:76:0C:0C:EB
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:72:ac:39:eb:52:a3:4f:36:4e:da:09:1e:cb:b9:ba:3a:c2:
50:55:41:7c:ea:51:a1:36:df:87:34:d4:e9:e6:05:99:bf:e6:
8b:8f:ab:3f:a5:98:cb:9c:fd:fd:e3:72:19:50:fc:24:bf:6a:
9d:94:73:f0:38:92:f3:6f:d9:ff:0b:89:85:6e:29:6c:58:fe:
bf:87:8b:71:e9:59:76:77:7f:38:e7:4b:92:a8:bc:9c:99:9f:
6c:c8:b3:f6:ac:9e:a6:40:a4:71:b9:cd:64:82:3f:44:28:9f:
5b:22:b0:37:42:59:67:6b:a7:63:ff:b4:a3:66:0a:fd:74:ff:
43:6a:ea:7a:90:49:aa:cb:3b:89:d6:85:ca:83:45:a9:6a:eb:
71:57:36:ce:6a:bb:1c:6c:d9:96:ee:3e:ea:61:57:c5:3c:ee:
97:8c:5a:26:36:a0:de:d5:64:ed:6c:4f:bc:9f:18:e0:83:c9:
37:90:de:5a:f9:33:2c:11:ef:a1:02:2d:82:b1:a6:55:77:a4:
0c:c6:a0:2c:a9:bb:8f:f2:90:3f:fb:99:49:71:64:67:2b:92:
b3:49:b6:9e:8f:74:1c:80:f4:93:19:8b:bc:aa:1f:9d:42:91:
2f:3a:0b:6a:42:3a:03:c2:c0:d6:a9:b1:18:23:65:6a:f2:51:
3e:d6:e0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2f1FIGEe+WG190BVe6RaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz
ODA0MDkwHhcNMjYwMzAyMDAwMTU1WhcNMjYwMzAzMDAwMTU1WjAzMTEwLwYDVQQD
Eyg5NTc5YmQ1NzVmNDM1MmU0ZmY0MzJkOTg2ZDBhMTJhOTc2MGMwY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g8sKTm0fwCDH1rjYalqZc3xLzNE
fFrRULwxx1B2JiKr+nD4RU6BewxDegh6W3F+HAT10PtpMz/faw4kyOtlDLnBSZao
9nqhQWb3e/i/mvOYwhZ3ftQWmmCiBGhZjWjoUxvtLrXxCF7ZaEow1PDLIxwDgz3d
oSQAtYVTn2ruy9XTMuPoR5X3GDVG3nHJWFz7joRE+myDhY/sU35MtIzmy5oQjIXG
/Y5Pe48m/WVtOVhOaib37cbTd1+ZD9WWhwL7Ye0w5xXE5qvSQkVqa5v1NXXZHRtG
c8v4k+Dk8xiWartt9yJUESS1EN6+W3fSMfzAFbHJ/gGlVEx9Pg0L619lQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV5vVdfQ1Lk/0MtmG0KEql2DAzrMB8GA1UdIwQY
MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt
NDhkNzM4YzU5NDdkLzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk
LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3KsOetS
o082TtoJHsu5ujrCUFVBfOpRoTbfhzTU6eYFmb/mi4+rP6WYy5z9/eNyGVD8JL9q
nZRz8DiS82/Z/wuJhW4pbFj+v4eLcelZdnd/OOdLkqi8nJmfbMiz9qyepkCkcbnN
ZII/RCifWyKwN0JZZ2unY/+0o2YK/XT/Q2rqepBJqss7idaFyoNFqWrrcVc2zmq7
HGzZlu4+6mFXxTzul4xaJjag3tVk7WxPvJ8Y4IPJN5DeWvkzLBHvoQItgrGmVXek
DMagLKm7j/KQP/uZSXFkZyuSs0m2no90HID0kxmLvKofnUKRLzoLakI6A8LA1qmx
GCNlavJRPtbg+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:01 2026 by rpki-client