Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: 2/ViEZNB5S4PtrYYYcf74HJnsfIvqRU0RUwAL+STo3U=
Subject key identifier: 83:18:58:1F:75:4F:B9:2A:5D:CB:D4:43:69:6E:6C:76:05:BA:1F:3B
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 01A11FADDD9AC15E07D6E54993B96651135E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0FF0
Signing time: Fri 09 Oct 2026 08:00:50 +0000
Manifest this update: Fri 09 Oct 2026 08:00:50 +0000
Manifest next update: Sat 10 Oct 2026 08:00:50 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: LtoPWHya7Bg+affQ5VJp9qAlKUCStHOqPK/D8ZU57Sk=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ad:dd:9a:c1:5e:07:d6:e5:49:93:b9:66:51:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Oct 9 08:00:50 2026 GMT
Not After : Oct 10 08:00:50 2026 GMT
Subject: CN=8318581f754fb92a5dcbd443696e6c7605ba1f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:d0:f3:73:f1:45:1a:96:67:36:7f:c9:0b:
98:a4:52:70:68:3d:96:7b:75:55:34:35:bf:e4:52:
e6:37:0b:4a:e9:6d:92:73:4a:4d:a7:7f:d0:7e:60:
c1:5d:ca:2d:c5:5f:3f:62:2e:14:83:71:15:cc:ae:
52:f0:ef:8e:18:5f:4d:d8:2b:7e:0e:2e:94:1f:72:
80:3a:24:25:82:e6:f6:12:ea:95:82:ae:db:06:71:
78:fb:08:8b:f9:fa:db:40:01:63:34:54:8c:19:de:
2a:1a:12:e2:a4:e3:32:ac:69:9e:1b:b1:75:6c:28:
fc:30:b4:3d:50:f2:60:7f:6d:b3:2c:4f:84:cd:29:
15:1b:ed:3e:f3:8e:31:af:98:fb:7b:1c:a0:95:af:
af:67:57:76:ee:29:70:18:9e:12:aa:70:68:60:2a:
5d:4a:06:9d:4e:94:77:97:47:cf:e0:48:d4:cc:16:
29:21:03:2e:39:eb:5c:73:4d:e9:96:3a:c3:4c:31:
4e:e6:12:c7:92:26:7a:da:ff:78:1f:e8:b9:32:60:
6d:2d:90:6c:d6:12:db:94:01:72:9d:cf:48:04:01:
ff:c1:26:7e:88:dd:53:0e:f5:5d:a0:14:1d:00:59:
45:85:5b:9c:19:96:4a:85:37:46:84:2f:f3:9a:bc:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:58:1F:75:4F:B9:2A:5D:CB:D4:43:69:6E:6C:76:05:BA:1F:3B
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:57:d5:f6:8c:36:11:68:51:4e:da:20:a5:e6:0e:12:f3:8b:
c2:06:6c:c9:5f:07:6d:8d:f9:88:59:89:62:95:7a:cb:70:54:
fd:49:2f:ac:ca:bd:ca:b7:68:cb:1c:52:45:6c:d8:4b:c6:84:
52:de:eb:a2:aa:37:84:db:5d:30:d5:8c:a2:7c:f2:25:17:a2:
13:87:ae:e5:1e:39:eb:a1:4d:0b:2b:fc:dc:e0:f7:ff:8f:f3:
b2:ed:c0:fc:ea:26:9e:61:a1:94:82:df:80:b2:2d:d2:56:47:
8f:68:d6:77:57:4d:11:66:54:b2:96:23:74:ea:e9:14:f9:d4:
56:b4:db:9a:a7:4f:74:4d:30:7e:40:f0:fb:d0:41:34:e1:25:
8a:ae:3c:23:b8:19:f7:cc:da:26:c7:77:c8:b4:bd:01:41:39:
a5:40:c8:bd:2b:c3:22:c8:ae:9f:ae:a2:c9:be:1e:db:58:ef:
c0:4f:37:96:6a:fe:d6:c0:1b:d5:4b:dd:0c:0a:74:4d:73:91:
06:0d:d6:3c:1b:94:f0:f0:52:04:4d:6d:49:b0:f1:28:f4:06:
4d:a0:bc:f9:e7:57:8f:9f:da:72:af:ea:f0:b8:1e:d9:a9:37:
ab:56:a6:15:81:6f:36:ec:cd:f9:09:e3:a4:ba:34:c8:5f:a2:
57:52:3f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfrd2awV4H1uVJk7lmURNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx
NTY2MzIwHhcNMjYxMDA5MDgwMDUwWhcNMjYxMDEwMDgwMDUwWjAzMTEwLwYDVQQD
Eyg4MzE4NTgxZjc1NGZiOTJhNWRjYmQ0NDM2OTZlNmM3NjA1YmExZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP7Q83PxRRqWZzZ/yQuYpFJwaD2W
e3VVNDW/5FLmNwtK6W2Sc0pNp3/QfmDBXcotxV8/Yi4Ug3EVzK5S8O+OGF9N2Ct+
Di6UH3KAOiQlgub2EuqVgq7bBnF4+wiL+frbQAFjNFSMGd4qGhLipOMyrGmeG7F1
bCj8MLQ9UPJgf22zLE+EzSkVG+0+844xr5j7exygla+vZ1d27ilwGJ4SqnBoYCpd
SgadTpR3l0fP4EjUzBYpIQMuOetcc03pljrDTDFO5hLHkiZ62v94H+i5MmBtLZBs
1hLblAFync9IBAH/wSZ+iN1TDvVdoBQdAFlFhVucGZZKhTdGhC/zmry37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMYWB91T7kqXcvUQ2lubHYFuh87MB8GA1UdIwQY
MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt
MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl
LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVfV9ow2
EWhRTtogpeYOEvOLwgZsyV8HbY35iFmJYpV6y3BU/UkvrMq9yrdoyxxSRWzYS8aE
Ut7roqo3hNtdMNWMonzyJReiE4eu5R4566FNCyv83OD3/4/zsu3A/OomnmGhlILf
gLIt0lZHj2jWd1dNEWZUspYjdOrpFPnUVrTbmqdPdE0wfkDw+9BBNOEliq48I7gZ
98zaJsd3yLS9AUE5pUDIvSvDIsiun66iyb4e21jvwE83lmr+1sAb1UvdDAp0TXOR
Bg3WPBuU8PBSBE1tSbDxKPQGTaC8+edXj5/acq/q8Lge2ak3q1amFYFvNuzN+Qnj
pLo0yF+iV1I/Ag==
-----END CERTIFICATE-----
Generated at Fri Oct 9 11:52:26 2026 by rpki-client