Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: SDYALwWraromnjAbpGZaSvcNxDJM2S4ZPxZkgXPQicI=
Subject key identifier: 3E:89:31:2E:E3:0C:DA:6F:EC:EA:1F:99:F7:B6:2D:9D:4D:64:40:8E
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019CAB341AE70E85A522473CA3AFFB667222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: Gr+EmFTPBXth/W7rElMbxEbeVBw0QZZsUEmtqtMHvVo=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1a:e7:0e:85:a5:22:47:3c:a3:af:fb:66:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=3e89312ee30cda6fecea1f99f7b62d9d4d64408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:af:60:bc:d1:2d:0c:28:c7:bf:05:58:5b:82:
ee:43:2f:8c:78:ed:8a:d5:7a:ff:66:00:43:ca:d6:
a8:43:27:40:bf:c9:ed:72:e7:31:5c:13:f4:fa:9e:
b7:54:52:09:9b:a0:39:30:bf:80:e9:98:ef:af:35:
f3:c0:74:eb:3c:c6:f8:e2:e8:0a:a5:7f:66:2d:4c:
93:1c:fd:4a:25:a3:84:fa:b9:95:5f:64:10:c6:b4:
f5:59:6f:7b:af:57:7a:b5:7c:81:12:be:74:bd:a2:
be:4d:0e:1b:30:9b:60:0f:1b:67:3f:78:c5:be:81:
bf:2e:77:10:d3:91:1c:31:31:90:42:f3:8a:5f:a0:
0c:57:16:8c:b9:70:c9:5c:13:c3:71:3c:95:ae:1a:
72:a9:42:12:9c:4a:67:4f:c5:60:92:db:3b:92:00:
89:63:59:c0:0c:ca:b6:ac:dd:5f:27:58:0a:f9:02:
bf:71:67:fa:2c:54:7a:75:0d:3b:73:2d:7b:5a:37:
ba:25:b3:b7:ac:78:f7:93:7a:ee:b9:b0:52:b3:e4:
52:60:3e:28:3f:97:90:1b:27:68:f3:91:e6:16:0b:
59:18:33:67:91:97:5d:1e:b7:ec:cb:8a:06:2e:a3:
e1:78:43:17:b9:30:f3:da:66:29:7a:1f:f9:71:53:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:31:2E:E3:0C:DA:6F:EC:EA:1F:99:F7:B6:2D:9D:4D:64:40:8E
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:0d:9a:27:10:45:8d:9c:d6:dc:4a:f3:3b:02:00:e9:ab:3a:
18:c1:2b:e9:9e:99:9a:26:54:44:67:66:3f:85:3b:66:2d:fe:
87:75:28:88:c4:46:e3:40:bc:10:fb:78:a5:fc:dd:c5:8b:a2:
23:d8:6e:0e:96:24:1b:b6:00:16:92:01:70:0c:95:cf:f8:8e:
02:f3:39:ad:db:7a:64:42:24:b4:d5:67:4e:8c:4b:1c:78:1a:
c4:6b:71:cf:26:97:0a:95:b9:f8:b5:c9:79:41:3c:09:e2:05:
98:30:17:c8:c2:16:f1:89:dc:8c:e9:10:b5:d5:c4:1a:6c:8b:
14:bf:68:bb:d3:64:92:e4:4e:ac:ec:e2:5a:7c:53:b7:53:25:
af:27:e4:15:b3:67:35:e2:66:93:e4:89:e4:3f:da:44:cb:f5:
03:39:90:d7:a8:63:1f:1d:9f:7f:e4:64:ac:c8:c5:23:21:f6:
93:ad:e7:ba:b0:de:69:b5:0c:96:0f:ab:fc:20:0a:29:ec:54:
c5:0b:7c:40:fe:9b:d8:5d:21:8a:d0:e5:ba:14:90:6f:d1:53:
61:a0:07:7f:16:a2:b1:49:42:7f:c4:f6:31:f1:02:8c:0c:ba:
d7:a5:6f:fe:f1:c5:a4:e6:e2:1a:9a:75:56:ac:06:c1:13:41:
4c:35:4b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBrnDoWlIkc8o6/7ZnIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjYwMzAxMjEwMDQ0WhcNMjYwMzAyMjEwMDQ0WjAzMTEwLwYDVQQD
EygzZTg5MzEyZWUzMGNkYTZmZWNlYTFmOTlmN2I2MmQ5ZDRkNjQ0MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+q9gvNEtDCjHvwVYW4LuQy+MeO2K
1Xr/ZgBDytaoQydAv8ntcucxXBP0+p63VFIJm6A5ML+A6ZjvrzXzwHTrPMb44ugK
pX9mLUyTHP1KJaOE+rmVX2QQxrT1WW97r1d6tXyBEr50vaK+TQ4bMJtgDxtnP3jF
voG/LncQ05EcMTGQQvOKX6AMVxaMuXDJXBPDcTyVrhpyqUISnEpnT8Vgkts7kgCJ
Y1nADMq2rN1fJ1gK+QK/cWf6LFR6dQ07cy17Wje6JbO3rHj3k3ruubBSs+RSYD4o
P5eQGydo85HmFgtZGDNnkZddHrfsy4oGLqPheEMXuTDz2mYpeh/5cVOnSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6JMS7jDNpv7Oofmfe2LZ1NZECOMB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0A2aJxBF
jZzW3ErzOwIA6as6GMEr6Z6ZmiZURGdmP4U7Zi3+h3UoiMRG40C8EPt4pfzdxYui
I9huDpYkG7YAFpIBcAyVz/iOAvM5rdt6ZEIktNVnToxLHHgaxGtxzyaXCpW5+LXJ
eUE8CeIFmDAXyMIW8YncjOkQtdXEGmyLFL9ou9NkkuROrOziWnxTt1MlryfkFbNn
NeJmk+SJ5D/aRMv1AzmQ16hjHx2ff+RkrMjFIyH2k63nurDeabUMlg+r/CAKKexU
xQt8QP6b2F0hitDluhSQb9FTYaAHfxaisUlCf8T2MfECjAy616Vv/vHFpObiGpp1
VqwGwRNBTDVLGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:59 2026 by rpki-client