
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File: d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier: kO1Oz2xKfgXZErF1ZULz7XkHgt7wSnXGp/d3y07RY0s=
Subject key identifier: E1:B8:BB:D5:6C:60:FC:46:A5:01:C0:76:FF:7B:2E:80:CA:3D:4C:8E
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer: /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial: 01A0DC4E03E9F24B6BCFD2B36AE74124F6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number: 022F
Signing time: Sat 26 Sep 2026 06:01:35 +0000
Manifest this update: Sat 26 Sep 2026 06:01:35 +0000
Manifest next update: Sun 27 Sep 2026 06:01:35 +0000
Files and hashes: 1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: txx3h1Yait7o/7TKiP4O95EIpNKtkm4/PEVQNRsFXis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:03:e9:f2:4b:6b:cf:d2:b3:6a:e7:41:24:f6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
Validity
Not Before: Sep 26 06:01:35 2026 GMT
Not After : Sep 27 06:01:35 2026 GMT
Subject: CN=e1b8bbd56c60fc46a501c076ff7b2e80ca3d4c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:1d:ea:b2:fb:ce:82:5d:8d:d1:fd:9c:f7:
4b:cb:1f:b7:98:7e:b9:da:8e:05:30:df:8c:42:ce:
e2:be:a8:67:e3:ad:38:f9:0c:8c:58:c8:46:2c:7c:
8a:a6:dd:41:7f:89:1b:3e:96:49:1e:34:1d:74:d6:
0f:51:85:46:bb:c9:48:88:a0:b2:b3:4b:ee:43:3a:
41:12:97:5e:6e:21:11:58:5f:dc:98:b1:9a:32:e4:
4f:e7:b6:1e:4d:c1:16:92:85:1e:8a:20:87:4b:ef:
4e:e0:e9:72:e5:c3:60:95:f5:7c:2f:57:dd:f3:9f:
51:e1:1b:5e:eb:15:ad:4a:db:ea:c7:e6:51:db:24:
44:7a:60:18:dd:4c:91:eb:4f:2b:ab:36:9f:6b:5d:
b3:c8:07:12:3f:b0:23:3b:59:01:b6:55:f2:9e:b4:
ee:0c:b1:b3:da:90:b3:68:7d:84:fb:e1:16:50:e6:
79:27:c0:5d:78:43:08:6f:dd:da:35:3a:b2:d5:d6:
73:2e:89:0e:0c:89:f3:cd:a9:85:23:b6:73:94:f6:
04:83:e7:ed:b5:fe:53:7c:6c:13:53:14:c5:16:a4:
5b:b2:b4:8b:06:fb:d2:0e:25:31:70:f3:bf:12:a9:
12:d3:99:4f:13:f7:9b:1f:8b:16:0e:e4:60:4d:00:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:BB:D5:6C:60:FC:46:A5:01:C0:76:FF:7B:2E:80:CA:3D:4C:8E
X509v3 Authority Key Identifier:
keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b0:db:f2:68:63:b0:bd:5f:07:b9:5b:fa:da:b8:2f:dc:5c:
c7:26:c6:88:55:b6:bb:5d:60:68:2e:e7:c8:78:10:51:5a:fa:
ad:d9:45:b1:09:26:8d:1c:cd:88:7a:a4:88:ac:d8:2a:8f:e3:
cd:bb:77:3d:7b:28:86:61:e6:06:af:84:a8:46:e5:92:98:1c:
57:ef:e1:f6:22:5c:c2:f2:f9:50:f7:94:b3:67:23:58:27:31:
da:fd:31:4c:d0:53:09:0f:f3:23:53:86:b5:69:64:ea:1c:29:
7a:34:1c:4d:94:d8:fc:4a:28:4c:78:17:b3:9c:ca:83:73:5d:
41:9c:38:b6:1c:dc:64:e5:2d:c6:d1:ee:37:4c:b7:2f:0f:c8:
f6:e2:1b:f9:b6:da:58:d5:cd:74:2d:45:e9:c3:ab:35:49:36:
08:fa:00:d1:89:f4:5f:b6:32:62:6d:86:30:19:66:61:15:99:
08:5a:5c:fa:df:c8:bd:a9:a5:ef:69:5e:ea:55:7a:5b:ff:6d:
19:4b:e0:c7:a0:8f:21:b0:3e:15:7f:a6:37:b0:a4:8e:b8:5b:
0d:56:59:da:d3:08:2c:3e:6d:07:be:e6:34:9d:75:86:5a:4c:
e3:70:02:7e:f6:95:a1:bc:a6:53:c0:58:63:62:4f:c1:94:dd:
24:44:fc:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTgPp8ktrz9KzaudBJPa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NzI0MTEyZjAyODVkODMwYzg3ZWUzMjU2ZDUxOTY4ZjE1
YmI5MGIwHhcNMjYwOTI2MDYwMTM1WhcNMjYwOTI3MDYwMTM1WjAzMTEwLwYDVQQD
EyhlMWI4YmJkNTZjNjBmYzQ2YTUwMWMwNzZmZjdiMmU4MGNhM2Q0YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+cd6rL7zoJdjdH9nPdLyx+3mH65
2o4FMN+MQs7ivqhn4604+QyMWMhGLHyKpt1Bf4kbPpZJHjQddNYPUYVGu8lIiKCy
s0vuQzpBEpdebiERWF/cmLGaMuRP57YeTcEWkoUeiiCHS+9O4Oly5cNglfV8L1fd
859R4Rte6xWtStvqx+ZR2yREemAY3UyR608rqzafa12zyAcSP7AjO1kBtlXynrTu
DLGz2pCzaH2E++EWUOZ5J8BdeEMIb93aNTqy1dZzLokODInzzamFI7ZzlPYEg+ft
tf5TfGwTUxTFFqRbsrSLBvvSDiUxcPO/EqkS05lPE/ebH4sWDuRgTQDt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG4u9VsYPxGpQHAdv97LoDKPUyOMB8GA1UdIwQY
MBaAFHdyQRLwKF2DDIfuMlbVGWjxW7kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iMjc3MDQtZWY1Mi00NGE3LWJkZDEt
ZjlmOTFlNGUzMWZhLzEvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iMjc3MDQtZWY1Mi00NGE3LWJkZDEtZjlmOTFlNGUzMWZh
LzEvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7Db8mhj
sL1fB7lb+tq4L9xcxybGiFW2u11gaC7nyHgQUVr6rdlFsQkmjRzNiHqkiKzYKo/j
zbt3PXsohmHmBq+EqEblkpgcV+/h9iJcwvL5UPeUs2cjWCcx2v0xTNBTCQ/zI1OG
tWlk6hwpejQcTZTY/EooTHgXs5zKg3NdQZw4thzcZOUtxtHuN0y3Lw/I9uIb+bba
WNXNdC1F6cOrNUk2CPoA0Yn0X7YyYm2GMBlmYRWZCFpc+t/Ivaml72le6lV6W/9t
GUvgx6CPIbA+FX+mN7CkjrhbDVZZ2tMILD5tB77mNJ11hlpM43ACfvaVobymU8BY
Y2JPwZTdJET8KA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:30:34 2026 by rpki-client