Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: UvCEfikvQahqLUjGnBAs6cTjD38yw73Bspb+L/BwKMk=
Subject key identifier: E3:D9:5A:6E:FC:1A:FA:D3:AB:7E:D0:B5:0F:3E:91:29:72:1B:4B:FE
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019CA9EB5293A6519D3E0FE17329EA592351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 09E9
Signing time: Sun 01 Mar 2026 15:01:37 +0000
Manifest this update: Sun 01 Mar 2026 15:01:37 +0000
Manifest next update: Mon 02 Mar 2026 15:01:37 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: FUpPygZe1d/jgZnApIZCyImLpdc3ogL/KX8BNQNczgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:52:93:a6:51:9d:3e:0f:e1:73:29:ea:59:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Mar 1 15:01:37 2026 GMT
Not After : Mar 2 15:01:37 2026 GMT
Subject: CN=e3d95a6efc1afad3ab7ed0b50f3e9129721b4bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:51:48:7c:3e:d0:e7:bc:14:44:3b:d0:ef:
ae:57:3a:a1:49:79:fd:3b:bc:c8:b7:b0:1b:6f:3d:
f2:c2:48:b3:41:01:01:70:90:b4:58:8c:c7:30:45:
5e:e5:04:52:94:25:75:9d:74:c2:00:e1:48:05:42:
c3:1f:38:cb:bc:9d:86:41:14:56:6d:0e:02:03:db:
96:59:68:58:a7:e1:90:c8:49:5c:0c:7b:61:6f:cc:
e9:67:7f:aa:e8:09:b8:9f:04:96:b5:a1:d2:a1:86:
1f:2a:65:70:b6:9b:51:93:e1:74:a9:39:b0:31:8b:
34:e5:f1:2a:26:a6:e5:a8:29:09:75:3b:5c:84:08:
eb:b0:0d:31:06:a5:22:93:6c:fd:07:9b:b4:47:a1:
a0:81:be:31:f7:1d:71:3c:f1:15:75:3f:80:36:ae:
73:94:e7:60:a8:f5:df:a4:b5:97:22:2f:65:94:29:
c1:4c:e2:41:f3:2d:38:a3:75:99:50:be:14:79:49:
cf:71:0c:1d:5c:ec:b9:70:a6:df:f4:a3:ba:f0:fc:
2e:b3:a5:ff:7f:54:7b:70:ba:9b:c9:d3:d1:7c:a9:
8c:62:39:81:98:f5:d3:f2:05:f9:f8:30:a8:af:0d:
9e:f4:b6:c4:70:3d:e9:cd:39:c7:ba:d0:a9:f7:36:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:5A:6E:FC:1A:FA:D3:AB:7E:D0:B5:0F:3E:91:29:72:1B:4B:FE
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8c:58:2b:c4:64:27:9d:c0:77:2d:44:60:ea:f4:91:6a:a8:
82:cc:cc:6f:e2:c8:d3:ad:2f:68:75:b6:bd:1a:b9:bf:58:a6:
ad:5d:06:8a:d0:1a:e4:bb:a1:75:bb:6b:dc:03:e6:96:01:d1:
c2:78:26:e1:da:51:da:f5:03:c8:d3:c3:f0:c4:13:d8:a6:7b:
c9:c4:aa:13:66:92:a3:a1:49:24:2b:f0:be:f5:28:21:92:c5:
53:aa:04:23:35:d2:a8:64:ec:94:23:40:00:69:23:0e:f1:74:
95:ac:55:f8:22:74:4a:7c:58:66:b5:11:4a:4d:68:a5:03:89:
46:57:70:46:56:b4:84:e2:05:e6:ff:e7:4a:6d:57:f0:24:33:
0d:6f:13:18:11:9f:df:a7:7d:16:43:12:63:f5:6a:ae:ee:dc:
3e:7c:6f:15:ed:a8:71:8a:0c:b3:6d:3b:f6:70:b7:3a:40:b1:
95:bf:ba:de:d9:cd:64:c5:37:e5:01:c7:36:35:68:b8:2f:ac:
07:8f:56:cd:9b:b7:e8:eb:d5:40:ec:7e:bd:d1:bc:cd:57:03:
84:23:fc:d6:31:0c:21:0c:62:a8:30:f8:ec:4c:ca:39:44:c8:
19:6c:8b:bf:d2:b6:d0:49:59:c6:db:f4:18:b3:87:eb:0f:9f:
bf:f6:65:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp61KTplGdPg/hcynqWSNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk
ZTllMGYwHhcNMjYwMzAxMTUwMTM3WhcNMjYwMzAyMTUwMTM3WjAzMTEwLwYDVQQD
EyhlM2Q5NWE2ZWZjMWFmYWQzYWI3ZWQwYjUwZjNlOTEyOTcyMWI0YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgtRSHw+0Oe8FEQ70O+uVzqhSXn9
O7zIt7Abbz3ywkizQQEBcJC0WIzHMEVe5QRSlCV1nXTCAOFIBULDHzjLvJ2GQRRW
bQ4CA9uWWWhYp+GQyElcDHthb8zpZ3+q6Am4nwSWtaHSoYYfKmVwtptRk+F0qTmw
MYs05fEqJqblqCkJdTtchAjrsA0xBqUik2z9B5u0R6Gggb4x9x1xPPEVdT+ANq5z
lOdgqPXfpLWXIi9llCnBTOJB8y04o3WZUL4UeUnPcQwdXOy5cKbf9KO68Pwus6X/
f1R7cLqbydPRfKmMYjmBmPXT8gX5+DCorw2e9LbEcD3pzTnHutCp9zZpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPZWm78GvrTq37QtQ8+kSlyG0v+MB8GA1UdIwQY
MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt
YzdkY2MyMzkxY2M5LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5
LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoxYK8Rk
J53Ady1EYOr0kWqogszMb+LI060vaHW2vRq5v1imrV0GitAa5Luhdbtr3APmlgHR
wngm4dpR2vUDyNPD8MQT2KZ7ycSqE2aSo6FJJCvwvvUoIZLFU6oEIzXSqGTslCNA
AGkjDvF0laxV+CJ0SnxYZrURSk1opQOJRldwRla0hOIF5v/nSm1X8CQzDW8TGBGf
36d9FkMSY/Vqru7cPnxvFe2ocYoMs2079nC3OkCxlb+63tnNZMU35QHHNjVouC+s
B49WzZu36OvVQOx+vdG8zVcDhCP81jEMIQxiqDD47EzKOUTIGWyLv9K20ElZxtv0
GLOH6w+fv/ZlfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:06 2026 by rpki-client