Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: GChMoZ/c3kl6gHOzpHDCFcCjtdPCTukirz1yUg3/Xi4=
Subject key identifier: 76:9F:8C:0B:34:5D:31:08:28:4F:1D:1F:AB:0C:3D:07:60:8E:0E:4D
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019CAC47839EC4248E3FAA1A68484744AA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:33 +0000
Manifest this update: Mon 02 Mar 2026 02:01:33 +0000
Manifest next update: Tue 03 Mar 2026 02:01:33 +0000
Files and hashes: 1: VuWfYezMuwuKUhdrekzuq4vKzXw.roa (hash: 9mN6oUykcmvDqkiR4AZJmp9qI5JmRegNOsGR4Bu/epo=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: beVSFSbdHmGsU00myQRuCUUT35ls7YmoWoDe8FuMIao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:83:9e:c4:24:8e:3f:aa:1a:68:48:47:44:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Mar 2 02:01:33 2026 GMT
Not After : Mar 3 02:01:33 2026 GMT
Subject: CN=769f8c0b345d3108284f1d1fab0c3d07608e0e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:f2:8c:dd:3d:9f:a1:4e:29:4a:bd:d1:27:
7f:64:5d:76:74:1b:61:33:75:dd:12:9c:68:e4:d1:
3b:05:a0:07:cf:06:e9:df:19:9c:37:d0:f4:d1:a8:
36:11:5f:e7:aa:96:0d:20:67:9e:66:50:7b:98:0e:
41:be:87:6d:0a:c5:19:c5:f8:bf:97:f4:eb:31:b8:
82:0a:cb:1e:05:1b:d6:0e:26:1a:42:16:3a:ab:88:
98:fb:c6:86:c8:70:da:46:e3:57:84:ab:d8:fb:b9:
21:e8:a2:9b:5b:f3:69:3b:2a:a4:6e:13:eb:f1:7d:
51:8f:dd:25:55:d4:df:44:e0:81:fb:2a:e3:80:93:
83:c0:94:a6:4b:27:44:f4:aa:ec:77:67:f1:9a:3f:
2f:4d:bd:5f:10:b6:33:5f:30:21:c5:8c:53:09:33:
3e:bb:08:d6:68:6b:93:af:41:7c:0b:da:8f:72:c2:
d8:5f:29:76:f1:ab:45:4d:c1:2d:8f:bc:aa:22:e1:
3f:26:e4:33:6c:92:73:2d:60:9c:63:25:51:0c:c4:
c7:e7:c6:f5:f7:4f:0d:e7:c4:0e:9b:47:3f:8c:7f:
10:b7:4c:e7:ff:c7:10:49:91:46:c5:ab:a6:2b:cc:
ff:b1:f4:1f:4e:68:c2:af:4d:bd:c0:ff:4b:7e:21:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:8C:0B:34:5D:31:08:28:4F:1D:1F:AB:0C:3D:07:60:8E:0E:4D
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:fd:86:51:6f:8f:f4:5d:66:e2:62:49:3b:2c:8e:b8:14:
60:99:32:28:eb:5e:96:23:94:70:83:ec:4d:87:4a:e0:be:99:
4b:b1:c9:31:ce:47:e9:5a:a1:f6:84:ce:06:d9:74:05:51:c1:
65:7f:ea:34:d5:0f:f0:83:6a:c9:6e:5a:d1:c2:36:cb:89:ba:
b9:7b:55:d5:d0:7e:0e:da:11:c9:45:89:8a:a1:f7:a4:05:56:
5d:4a:f3:56:c0:14:9c:9d:2a:b9:66:ce:65:bc:f4:38:68:34:
7b:d9:db:bb:26:67:cf:5d:19:29:07:4c:27:9a:11:48:e7:6f:
c1:d2:4d:e9:c0:c2:16:d8:b6:68:32:c3:46:b9:2b:3d:f9:b1:
66:37:78:7f:d2:9d:a0:31:ef:f2:5f:b7:3a:f7:42:37:d8:30:
2a:46:2b:6f:b6:2b:81:33:31:ee:8d:b2:31:49:c5:84:bb:f9:
2d:31:ca:8d:3a:b4:b3:e3:d3:6a:e3:20:0f:e3:ae:90:1d:aa:
01:4e:90:36:42:77:9f:c8:de:29:59:b2:33:db:38:86:f8:38:
c7:db:75:89:89:a8:a3:20:4c:fd:33:76:0a:d8:16:e3:6e:e7:
63:9c:1c:47:ba:d3:a8:ec:fc:08:26:be:cd:dc:ca:7e:77:91:
f4:f0:6d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4OexCSOP6oaaEhHRKpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjYwMzAyMDIwMTMzWhcNMjYwMzAzMDIwMTMzWjAzMTEwLwYDVQQD
Eyg3NjlmOGMwYjM0NWQzMTA4Mjg0ZjFkMWZhYjBjM2QwNzYwOGUwZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PjyjN09n6FOKUq90Sd/ZF12dBth
M3XdEpxo5NE7BaAHzwbp3xmcN9D00ag2EV/nqpYNIGeeZlB7mA5BvodtCsUZxfi/
l/TrMbiCCsseBRvWDiYaQhY6q4iY+8aGyHDaRuNXhKvY+7kh6KKbW/NpOyqkbhPr
8X1Rj90lVdTfROCB+yrjgJODwJSmSydE9Krsd2fxmj8vTb1fELYzXzAhxYxTCTM+
uwjWaGuTr0F8C9qPcsLYXyl28atFTcEtj7yqIuE/JuQzbJJzLWCcYyVRDMTH58b1
908N58QOm0c/jH8Qt0zn/8cQSZFGxaumK8z/sfQfTmjCr029wP9LfiHKvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHafjAs0XTEIKE8dH6sMPQdgjg5NMB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz
LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMb9hlFv
j/RdZuJiSTssjrgUYJkyKOteliOUcIPsTYdK4L6ZS7HJMc5H6Vqh9oTOBtl0BVHB
ZX/qNNUP8INqyW5a0cI2y4m6uXtV1dB+DtoRyUWJiqH3pAVWXUrzVsAUnJ0quWbO
Zbz0OGg0e9nbuyZnz10ZKQdMJ5oRSOdvwdJN6cDCFti2aDLDRrkrPfmxZjd4f9Kd
oDHv8l+3OvdCN9gwKkYrb7YrgTMx7o2yMUnFhLv5LTHKjTq0s+PTauMgD+OukB2q
AU6QNkJ3n8jeKVmyM9s4hvg4x9t1iYmooyBM/TN2CtgW427nY5wcR7rTqOz8CCa+
zdzKfneR9PBt/Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:19 2026 by rpki-client