Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier: 8aJhWH26j0bajCQeKbjQUH0bq5eDffqhi98gCdXs8OE=
Subject key identifier: 1D:27:FD:DA:4A:C5:78:E2:AE:BE:99:F5:95:C1:00:E6:8C:A1:C1:56
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 019CAAC6089B1737E4FE287BDE76B6DD1A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number: 1293
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: lZsmcgPx6fURHO1S2W50xFVMW4RWJBMe46MoNMtbxtQ=)
2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:08:9b:17:37:e4:fe:28:7b:de:76:b6:dd:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=1d27fdda4ac578e2aebe99f595c100e68ca1c156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:67:42:a9:66:5c:63:4f:50:ea:8c:1b:e2:
3f:61:a6:67:6d:2d:15:09:7a:02:93:c0:6a:eb:60:
48:8d:23:f0:57:05:89:f3:18:0d:3d:a8:25:03:a9:
52:97:e0:a0:d8:6d:bd:00:1d:c7:f2:7c:3d:4d:6a:
5a:cc:01:05:b7:5d:cb:8a:1e:dd:a4:e6:ac:9c:b2:
8c:b4:5c:94:27:bb:4e:fd:96:8a:8e:54:e3:d8:ac:
ad:99:c9:13:f9:e2:34:a6:64:0b:99:76:cd:5f:f7:
f8:f4:af:20:7d:ed:ff:0a:59:37:1e:85:5a:e1:bf:
83:e8:41:86:90:5b:b5:b2:6f:32:88:d4:9e:4c:a9:
24:55:10:cd:0a:74:c9:91:8f:1b:a2:0c:db:49:31:
be:48:f9:b0:e4:22:d6:a8:51:34:69:78:d4:49:81:
e6:3b:b0:d9:54:57:01:3a:17:58:80:38:e6:71:ec:
8f:99:c6:b8:1e:1f:d7:0c:60:29:c0:91:0a:be:d2:
a8:8e:99:30:76:6c:ce:fb:5a:ab:2f:e1:c6:fd:8a:
a3:ae:d1:38:e9:c6:01:bc:7f:d9:ff:78:01:24:fd:
0e:81:c9:6d:6b:43:b2:dc:04:fe:8f:19:1c:6a:ab:
7a:26:f6:0d:60:94:72:0d:1f:b2:12:cd:aa:c6:d3:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:FD:DA:4A:C5:78:E2:AE:BE:99:F5:95:C1:00:E6:8C:A1:C1:56
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:11:af:90:d3:68:24:d9:c1:4c:28:6e:27:7d:e7:44:15:
5f:54:f1:d3:7e:06:6a:ef:86:cd:89:34:3b:79:4f:1f:3d:e8:
5e:a0:c8:c8:d9:2b:f2:62:5b:06:64:e3:ce:2b:59:a4:dd:c9:
c4:7f:5e:c3:73:9e:96:e4:54:66:8d:0c:ef:40:fd:8c:0c:28:
c1:de:55:94:fc:2d:55:9f:06:3d:48:bd:e5:5e:ee:a9:e5:f1:
9e:c0:58:26:16:70:e7:6f:2e:76:f6:97:53:ce:44:fe:05:e4:
c5:19:38:ca:2b:80:52:04:12:25:2d:c9:7a:28:29:73:c6:6b:
44:e0:2b:d6:28:af:00:ea:7a:57:ae:49:dd:0b:05:a3:23:ba:
4f:57:86:ef:a8:93:78:26:91:30:58:09:28:67:2d:05:67:ee:
a3:19:49:c8:bd:ff:fa:5c:fd:92:0c:9a:cf:fd:f3:0a:23:8f:
f3:36:03:80:3e:c6:67:c8:ce:27:a1:11:5c:eb:c0:dc:32:4c:
3c:1a:67:b7:7f:a9:bc:94:89:46:f3:23:a1:ef:76:d3:6e:42:
61:dd:eb:94:c9:0e:5f:39:64:e9:c3:05:6a:e5:f1:dc:51:80:
cc:35:cd:60:62:35:c0:8e:37:66:df:de:8d:a9:49:b0:8a:08:
b3:30:9b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxgibFzfk/ih73na23RpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh
N2ZhZmQwHhcNMjYwMzAxMTkwMDMwWhcNMjYwMzAyMTkwMDMwWjAzMTEwLwYDVQQD
EygxZDI3ZmRkYTRhYzU3OGUyYWViZTk5ZjU5NWMxMDBlNjhjYTFjMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadnQqlmXGNPUOqMG+I/YaZnbS0V
CXoCk8Bq62BIjSPwVwWJ8xgNPaglA6lSl+Cg2G29AB3H8nw9TWpazAEFt13Lih7d
pOasnLKMtFyUJ7tO/ZaKjlTj2KytmckT+eI0pmQLmXbNX/f49K8gfe3/Clk3HoVa
4b+D6EGGkFu1sm8yiNSeTKkkVRDNCnTJkY8bogzbSTG+SPmw5CLWqFE0aXjUSYHm
O7DZVFcBOhdYgDjmceyPmca4Hh/XDGApwJEKvtKojpkwdmzO+1qrL+HG/YqjrtE4
6cYBvH/Z/3gBJP0Ogclta0Oy3AT+jxkcaqt6JvYNYJRyDR+yEs2qxtMovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0n/dpKxXjirr6Z9ZXBAOaMocFWMB8GA1UdIwQY
MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt
ODdlMWYzODY2MzYyLzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy
LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe8Rr5DT
aCTZwUwobid950QVX1Tx034Gau+GzYk0O3lPHz3oXqDIyNkr8mJbBmTjzitZpN3J
xH9ew3OeluRUZo0M70D9jAwowd5VlPwtVZ8GPUi95V7uqeXxnsBYJhZw528udvaX
U85E/gXkxRk4yiuAUgQSJS3Jeigpc8ZrROAr1iivAOp6V65J3QsFoyO6T1eG76iT
eCaRMFgJKGctBWfuoxlJyL3/+lz9kgyaz/3zCiOP8zYDgD7GZ8jOJ6ERXOvA3DJM
PBpnt3+pvJSJRvMjoe92025CYd3rlMkOXzlk6cMFauXx3FGAzDXNYGI1wI43Zt/e
jalJsIoIszCb+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:12 2026 by rpki-client