Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: M0a/c8xnjMg1fqpG+rMcnYC5OwAf8UsOKsVn2D4nep4=
Subject key identifier: 38:5F:1F:81:B0:59:81:5A:58:73:F5:8D:AE:3C:BF:A4:10:29:FE:0C
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019CAB344DC16F6C15C21D043ACE8CCCB3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 04FE
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: 1t/xumcRMXghbS+XXUJ7k6NtX1zkNSPtXlRQi95bLNs=)
2: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (hash: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4d:c1:6f:6c:15:c2:1d:04:3a:ce:8c:cc:b3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=385f1f81b059815a5873f58dae3cbfa41029fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:b7:d2:55:56:00:85:d0:c5:f9:1d:6e:2e:
46:9f:a8:2a:88:66:26:70:ac:c1:f0:74:c3:8f:35:
4b:24:4c:34:66:e0:4c:78:78:7a:54:3b:8b:da:ce:
82:04:08:aa:2a:72:a0:f4:88:91:71:35:35:b5:97:
01:4e:b1:6d:f6:69:19:46:37:c0:4f:e2:51:4c:37:
ad:ab:52:a9:1f:d6:6d:80:5f:4e:cb:8d:8e:f5:6d:
34:f7:c4:4f:b5:63:29:19:84:4a:80:2b:85:99:a5:
55:22:89:2e:84:48:d8:ab:30:9c:01:98:db:0d:6b:
06:07:f3:8d:7d:53:05:07:a5:38:88:d6:7e:14:2f:
84:af:d6:6e:64:ec:e8:60:1c:67:7d:bf:02:a9:69:
77:a8:72:78:e6:27:3f:0a:93:ae:7f:90:d0:b8:04:
3d:72:d2:dd:18:dd:da:ce:5a:30:9c:39:0f:b1:92:
43:53:2f:35:9c:c6:2d:5b:87:23:ca:e7:88:70:df:
5d:c1:01:67:b9:6e:44:e9:cb:80:52:8b:cd:55:d3:
53:b6:91:12:4b:62:d2:0c:f4:63:c0:9e:f9:bf:41:
31:8a:77:29:bc:6d:05:cc:c5:64:f3:75:d8:01:44:
a1:8d:ff:ff:12:1d:38:d6:58:5f:95:57:01:32:3e:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:1F:81:B0:59:81:5A:58:73:F5:8D:AE:3C:BF:A4:10:29:FE:0C
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:93:73:89:72:41:94:ff:18:ae:e3:5d:79:a8:b4:99:8e:
41:f7:f4:65:ea:56:b7:38:49:f6:50:28:6b:31:3d:6a:a9:e5:
cc:b2:45:6c:41:01:24:ca:78:ea:70:dd:74:21:a2:5a:35:ad:
8b:85:41:93:de:bf:55:63:1a:1e:85:a4:f2:82:14:66:53:4d:
be:54:33:08:8f:3b:aa:17:fe:d9:ab:70:01:07:1f:86:7d:2b:
27:22:d6:4c:77:4c:cb:a3:d3:c7:8a:3e:20:e3:ec:59:08:f8:
fa:9c:aa:1a:8d:77:2f:6b:e2:cc:60:5f:bc:09:bb:e4:be:b4:
75:7d:d5:cb:3d:5c:2d:ae:c4:23:68:b7:3a:9d:17:c6:14:2f:
fc:38:e0:47:0d:a4:b9:dd:67:cf:7f:39:61:44:60:a7:a2:7d:
96:17:70:65:29:85:51:03:f8:50:d7:fc:4c:9d:a1:79:01:d7:
5b:1d:01:b3:c0:cd:7d:0a:69:a0:42:a8:bd:ce:23:2c:47:f3:
f8:63:53:d2:cd:95:76:ae:1a:73:d3:bc:e5:58:95:09:3e:2e:
63:33:80:c5:e5:65:db:e1:45:5e:c9:bd:67:47:54:3b:24:bb:
d5:95:0d:20:e5:e4:0a:35:5c:17:20:10:18:17:93:6b:2a:ed:
a8:9e:b4:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNE3Bb2wVwh0EOs6MzLPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjYwMzAxMjEwMDU3WhcNMjYwMzAyMjEwMDU3WjAzMTEwLwYDVQQD
EygzODVmMWY4MWIwNTk4MTVhNTg3M2Y1OGRhZTNjYmZhNDEwMjlmZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzS30lVWAIXQxfkdbi5Gn6gqiGYm
cKzB8HTDjzVLJEw0ZuBMeHh6VDuL2s6CBAiqKnKg9IiRcTU1tZcBTrFt9mkZRjfA
T+JRTDetq1KpH9ZtgF9Oy42O9W0098RPtWMpGYRKgCuFmaVVIokuhEjYqzCcAZjb
DWsGB/ONfVMFB6U4iNZ+FC+Er9ZuZOzoYBxnfb8CqWl3qHJ45ic/CpOuf5DQuAQ9
ctLdGN3azlownDkPsZJDUy81nMYtW4cjyueIcN9dwQFnuW5E6cuAUovNVdNTtpES
S2LSDPRjwJ75v0ExincpvG0FzMVk83XYAUShjf//Eh041lhflVcBMj6/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhfH4GwWYFaWHP1ja48v6QQKf4MMB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESyTc4ly
QZT/GK7jXXmotJmOQff0ZepWtzhJ9lAoazE9aqnlzLJFbEEBJMp46nDddCGiWjWt
i4VBk96/VWMaHoWk8oIUZlNNvlQzCI87qhf+2atwAQcfhn0rJyLWTHdMy6PTx4o+
IOPsWQj4+pyqGo13L2vizGBfvAm75L60dX3Vyz1cLa7EI2i3Op0XxhQv/DjgRw2k
ud1nz385YURgp6J9lhdwZSmFUQP4UNf8TJ2heQHXWx0Bs8DNfQppoEKovc4jLEfz
+GNT0s2Vdq4ac9O85ViVCT4uYzOAxeVl2+FFXsm9Z0dUOyS71ZUNIOXkCjVcFyAQ
GBeTayrtqJ60qg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:57 2026 by rpki-client