Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier: 9Cvge+igU6IgoHN4J2XIy0r6hU654g3U37R9hip2UkE=
Subject key identifier: EF:91:00:19:24:18:FC:3F:D2:A8:1E:22:93:4E:31:21:35:2C:B1:F1
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 019CAD90819AA9A4FE2BCAE07835A32C9BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number: 05C0
Signing time: Mon 02 Mar 2026 08:00:54 +0000
Manifest this update: Mon 02 Mar 2026 08:00:54 +0000
Manifest next update: Tue 03 Mar 2026 08:00:54 +0000
Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: P8eiqJX2pS4Oo0Uuzza5Jp1qRuxmSijdOE7v9k3lCJ8=)
2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:81:9a:a9:a4:fe:2b:ca:e0:78:35:a3:2c:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: Mar 2 08:00:54 2026 GMT
Not After : Mar 3 08:00:54 2026 GMT
Subject: CN=ef9100192418fc3fd2a81e22934e3121352cb1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:10:8a:8e:25:a3:c2:80:e4:da:06:a3:23:
e0:b6:07:d8:cd:1f:97:55:60:29:03:05:cd:18:09:
d8:cc:23:48:68:01:df:3b:06:1f:3f:7a:20:51:c0:
cb:5c:97:47:06:69:d1:93:de:49:7f:56:8f:99:3d:
35:c9:f5:f6:fa:ca:b6:66:81:d8:34:80:2c:43:4e:
21:e9:09:56:72:7c:1b:dd:ef:e9:2c:d9:0f:63:c6:
10:27:c1:d2:1a:f5:aa:14:2b:f7:f9:fe:11:f2:d8:
68:00:69:7c:67:f6:f2:7b:1f:be:20:dd:43:2b:d6:
6a:68:00:45:77:8f:d0:1e:d2:b6:65:3b:d5:b6:28:
31:4b:c6:58:b0:6f:7e:c8:43:6f:14:3c:2c:04:7b:
24:85:e4:6c:04:a5:6e:77:7f:77:9a:be:1a:bd:eb:
58:4c:ad:f5:9e:a8:c4:ae:ec:c9:14:ac:47:cf:9b:
01:36:d5:6d:23:0b:ed:d1:d4:66:12:5d:6a:9e:3b:
d4:7e:26:30:05:03:3f:d3:32:b3:9b:d7:16:af:94:
2f:9a:8e:bf:8b:21:0a:cc:73:b3:b6:18:99:c2:6a:
7c:d7:ab:eb:f9:6c:39:6b:8b:5a:28:4d:07:68:6b:
ea:e6:bb:49:56:0d:44:63:e3:9d:3f:e8:9b:7b:ef:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:91:00:19:24:18:FC:3F:D2:A8:1E:22:93:4E:31:21:35:2C:B1:F1
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:78:32:0d:50:17:c5:92:8c:84:be:8a:3d:d0:7e:1a:b8:81:
c0:d8:c7:a5:77:85:70:31:25:34:16:5f:82:c1:8b:c5:b4:5c:
2d:cd:db:30:cb:c6:6d:92:f7:e1:19:ef:9d:46:2a:5c:d7:96:
58:cf:d0:a7:96:a9:9f:52:e7:50:30:ec:bf:39:39:26:ac:b3:
54:e8:64:bc:42:24:91:f1:43:e9:a1:97:43:96:dc:9c:39:1e:
a3:ab:d8:ed:3f:98:a6:04:99:41:71:33:d0:11:f1:be:e9:36:
ed:8b:e0:ac:e7:ca:f9:c2:53:d1:65:44:4d:01:94:0e:af:5b:
10:d2:fc:53:fb:d3:1d:2c:13:13:34:f2:42:19:09:8c:76:e1:
76:41:f1:15:f5:c5:11:10:67:1d:d9:77:bd:01:db:dc:d2:7f:
46:5e:d9:6d:69:68:27:b9:3b:eb:7f:a8:7d:ed:a5:16:b4:5f:
21:dc:b2:df:f7:8f:2b:bd:29:99:94:95:3a:bb:d3:24:43:f5:
b0:1c:5b:07:ee:be:91:7e:23:c4:17:16:53:72:88:c7:b8:61:
ae:d0:6f:39:88:1e:6a:f6:05:c4:19:ca:5d:18:ae:fb:c5:d1:
a0:20:d3:1d:c0:ba:1a:40:ae:dd:ab:37:a4:62:65:55:a0:59:
5d:dd:eb:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkIGaqaT+K8rgeDWjLJu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0
ZTZkMzAwHhcNMjYwMzAyMDgwMDU0WhcNMjYwMzAzMDgwMDU0WjAzMTEwLwYDVQQD
EyhlZjkxMDAxOTI0MThmYzNmZDJhODFlMjI5MzRlMzEyMTM1MmNiMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PQQio4lo8KA5NoGoyPgtgfYzR+X
VWApAwXNGAnYzCNIaAHfOwYfP3ogUcDLXJdHBmnRk95Jf1aPmT01yfX2+sq2ZoHY
NIAsQ04h6QlWcnwb3e/pLNkPY8YQJ8HSGvWqFCv3+f4R8thoAGl8Z/byex++IN1D
K9ZqaABFd4/QHtK2ZTvVtigxS8ZYsG9+yENvFDwsBHskheRsBKVud393mr4avetY
TK31nqjEruzJFKxHz5sBNtVtIwvt0dRmEl1qnjvUfiYwBQM/0zKzm9cWr5Qvmo6/
iyEKzHOzthiZwmp816vr+Ww5a4taKE0HaGvq5rtJVg1EY+OdP+ibe+8IIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+RABkkGPw/0qgeIpNOMSE1LLHxMB8GA1UdIwQY
MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt
MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw
LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXgyDVAX
xZKMhL6KPdB+GriBwNjHpXeFcDElNBZfgsGLxbRcLc3bMMvGbZL34RnvnUYqXNeW
WM/Qp5apn1LnUDDsvzk5JqyzVOhkvEIkkfFD6aGXQ5bcnDkeo6vY7T+YpgSZQXEz
0BHxvuk27YvgrOfK+cJT0WVETQGUDq9bENL8U/vTHSwTEzTyQhkJjHbhdkHxFfXF
ERBnHdl3vQHb3NJ/Rl7ZbWloJ7k763+ofe2lFrRfIdyy3/ePK70pmZSVOrvTJEP1
sBxbB+6+kX4jxBcWU3KIx7hhrtBvOYgeavYFxBnKXRiu+8XRoCDTHcC6GkCu3as3
pGJlVaBZXd3r9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:23 2026 by rpki-client