Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: UGk5IHWA3BVXBKUd6ZbxYEmVfFicUKVS84zqlGFWYnk=
Subject key identifier: 27:21:EE:79:7F:2F:13:F2:D4:DC:5B:18:2A:DC:9F:A7:97:35:F2:A0
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 019CAD5963CE26EE4B686D14B94F5E5F1FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0D8D
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: 1pC01ttDCpHcE2Iwh3nf3DfwMrM5admJ81D20vrLuOM=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:63:ce:26:ee:4b:68:6d:14:b9:4f:5e:5f:1f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=2721ee797f2f13f2d4dc5b182adc9fa79735f2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:88:f7:f6:77:6e:23:4e:9b:af:f0:bf:06:
ff:52:6a:c9:7a:8a:82:18:ba:4d:48:79:47:9e:e3:
eb:93:05:ca:28:05:d4:02:5f:55:4f:e4:d4:ea:68:
5e:07:20:32:c2:66:1b:03:b5:87:de:fd:fb:2d:ef:
54:8a:3d:07:d4:fe:bb:e9:04:a0:a1:f9:8e:5d:88:
b2:e5:0e:1b:fb:f9:df:75:bd:f6:fa:e5:d1:e6:9d:
4c:80:ee:50:6e:9c:1e:12:3b:82:7d:b4:28:6d:9e:
cc:02:bf:ec:dd:b1:4f:56:59:7b:a2:6e:2b:65:48:
55:b9:99:46:0b:f8:90:b6:0e:15:18:ae:05:99:a0:
d3:6f:fd:87:c3:2b:47:7d:1e:5d:f8:fd:c7:74:cc:
a7:6b:29:c7:af:a9:27:8e:93:da:72:00:14:8f:00:
76:73:7c:35:34:d1:46:75:44:de:81:12:98:ba:72:
7d:57:38:e9:9e:f9:86:e6:f7:92:21:b0:f6:a3:40:
cd:5f:cf:6f:1c:28:ea:10:66:10:3f:d4:ed:39:6e:
7c:ba:25:e7:a3:de:7f:fe:f9:2e:8e:b9:f5:74:5a:
52:80:68:4e:60:d3:d6:07:6e:34:de:55:b8:2b:39:
e5:19:84:c9:51:83:59:67:0f:82:78:6d:cf:ec:72:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:EE:79:7F:2F:13:F2:D4:DC:5B:18:2A:DC:9F:A7:97:35:F2:A0
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:1e:e7:de:e7:7c:b7:08:c9:bf:2d:b8:d0:44:6e:4b:37:
0c:88:64:7d:2d:b1:b1:b4:1f:ce:c7:a8:cc:43:91:9a:28:13:
7a:e0:5b:34:25:7c:6a:bd:1e:67:ab:d5:d7:a4:ea:dc:a2:30:
39:b1:8a:d7:a8:5f:00:92:6e:7c:9b:f6:a1:33:18:fd:52:ac:
c6:71:b3:34:a6:2e:b6:e0:81:79:7e:f1:05:da:af:81:74:91:
70:35:a3:e0:a3:dc:0b:16:8b:b6:d3:04:25:3b:cb:69:60:d6:
f4:0e:26:69:42:3f:b8:f5:0d:86:bd:20:e9:21:0c:a1:13:8c:
d4:be:2e:61:cf:0c:ab:3b:9b:9c:6e:38:df:40:3a:0f:08:ce:
3f:a6:9f:de:f5:b0:fd:74:c1:f3:ba:75:b8:83:9b:e6:89:20:
cb:dd:dc:58:02:67:e3:5b:b8:45:ed:a7:21:40:c0:52:9a:e2:
52:f4:42:6d:54:3c:bb:5a:37:96:ee:03:e9:35:53:5e:5f:ba:
a7:5b:88:65:11:12:10:50:ec:66:a4:a7:9c:8b:e8:22:44:3d:
97:0c:1d:29:93:46:c1:c0:11:f4:c9:5b:9f:10:7b:0a:71:8b:
08:24:89:97:a8:cd:b8:12:24:42:df:a0:51:ee:5c:cd:a6:d9:
bc:af:ed:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWWPOJu5LaG0UuU9eXx/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm
ZWY2YjUwHhcNMjYwMzAyMDcwMDQyWhcNMjYwMzAzMDcwMDQyWjAzMTEwLwYDVQQD
EygyNzIxZWU3OTdmMmYxM2YyZDRkYzViMTgyYWRjOWZhNzk3MzVmMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1aI9/Z3biNOm6/wvwb/UmrJeoqC
GLpNSHlHnuPrkwXKKAXUAl9VT+TU6mheByAywmYbA7WH3v37Le9Uij0H1P676QSg
ofmOXYiy5Q4b+/nfdb32+uXR5p1MgO5QbpweEjuCfbQobZ7MAr/s3bFPVll7om4r
ZUhVuZlGC/iQtg4VGK4FmaDTb/2HwytHfR5d+P3HdMynaynHr6knjpPacgAUjwB2
c3w1NNFGdUTegRKYunJ9VzjpnvmG5veSIbD2o0DNX89vHCjqEGYQP9TtOW58uiXn
o95//vkujrn1dFpSgGhOYNPWB2403lW4KznlGYTJUYNZZw+CeG3P7HKxvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCch7nl/LxPy1NxbGCrcn6eXNfKgMB8GA1UdIwQY
MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut
ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3
LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTge597n
fLcIyb8tuNBEbks3DIhkfS2xsbQfzseozEORmigTeuBbNCV8ar0eZ6vV16Tq3KIw
ObGK16hfAJJufJv2oTMY/VKsxnGzNKYutuCBeX7xBdqvgXSRcDWj4KPcCxaLttME
JTvLaWDW9A4maUI/uPUNhr0g6SEMoROM1L4uYc8MqzubnG4430A6DwjOP6af3vWw
/XTB87p1uIOb5okgy93cWAJn41u4Re2nIUDAUpriUvRCbVQ8u1o3lu4D6TVTXl+6
p1uIZRESEFDsZqSnnIvoIkQ9lwwdKZNGwcAR9MlbnxB7CnGLCCSJl6jNuBIkQt+g
Ue5czabZvK/thQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:36 2026 by rpki-client