Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: 2K2GBqC3fiTPUxyxTVlPzd06A6wkfcMWX8CGtTWWet8=
Subject key identifier: A0:C9:04:EE:FF:D0:9D:89:3C:EC:E4:A2:4C:4E:5C:48:03:AF:43:A3
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019CAB34406080581E34FA06E3B7260825BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: icuLQKhPh2Zn+mEd1WaJ4wr3xeATf7hiSUnqSWP4yw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:40:60:80:58:1e:34:fa:06:e3:b7:26:08:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=a0c904eeffd09d893cece4a24c4e5c4803af43a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:47:d8:f2:a0:02:cb:a9:49:41:04:dc:9e:
73:97:3b:c3:d5:2f:e3:f7:5e:b1:9f:bb:fd:19:e1:
a4:2e:ea:55:89:ba:03:ed:a4:df:53:8b:35:8c:36:
b8:db:d1:bb:a8:7c:7a:c8:79:a7:a7:44:a0:c0:cf:
90:35:5e:f3:93:79:c9:da:ee:20:04:dd:51:d8:ef:
de:c6:2f:f4:7d:8a:5c:3b:aa:71:71:a5:b9:7f:c8:
23:3f:b7:59:e8:90:4f:44:36:a5:38:a2:3e:30:7b:
cb:51:8e:fe:0d:d7:30:6d:84:d3:c2:ba:1c:0f:15:
4d:5b:8a:5b:1a:ea:f8:83:23:c9:25:3b:d8:cb:f4:
b4:dd:ef:50:e9:e6:df:1a:af:ad:4b:dd:e2:39:32:
03:a1:aa:87:d6:4b:1b:64:ff:8a:94:7e:ec:a4:b2:
50:d2:b4:5d:34:b7:32:9a:96:6a:d2:5d:62:9d:5d:
ce:03:83:7e:03:de:54:38:cb:97:58:6f:27:f5:29:
90:0c:79:b5:09:38:f4:5f:4f:36:3a:e1:ed:9e:e0:
16:fe:3e:62:97:e5:f9:89:09:75:ef:e8:69:75:4a:
6f:5b:0f:33:ac:aa:a1:47:6c:8e:32:43:97:60:54:
c4:5f:f5:4b:73:b5:95:8f:07:16:d8:e8:da:cc:42:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:04:EE:FF:D0:9D:89:3C:EC:E4:A2:4C:4E:5C:48:03:AF:43:A3
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e8:26:32:24:b4:b2:fb:98:3d:fc:c2:fd:27:d7:f4:a6:e5:
a4:02:71:71:3d:04:3a:d0:40:44:5a:0e:ed:2f:d7:71:7b:e6:
13:aa:5c:01:3c:f3:4c:18:4e:62:cb:5a:34:d5:8a:ef:76:e2:
3f:1c:a0:f3:4e:62:c6:8f:a1:7b:24:77:5a:e0:7d:b0:96:fd:
0c:79:1e:b5:ab:1c:13:4f:13:8b:f7:b4:5d:fb:01:10:84:0f:
0d:df:a2:cd:6c:72:fd:ac:1c:1c:fe:91:d3:1d:a9:12:2c:63:
07:3b:5c:86:5d:47:cb:6e:97:34:59:ec:8a:9a:8a:c6:76:5c:
9b:43:3b:76:7c:d6:eb:4e:96:67:eb:65:9a:45:8e:d6:d6:66:
c1:f9:81:60:45:4f:92:15:34:5a:da:ce:b3:2a:e5:7c:e7:c1:
16:9c:da:92:df:98:38:a0:a5:fd:5e:1d:99:f2:69:07:cd:9e:
d4:1e:e1:47:69:05:8a:7d:11:e0:e2:1d:bf:33:f4:4d:04:c3:
49:20:e1:f1:3f:47:26:94:96:b4:e2:73:f3:4f:09:ff:fe:9e:
8c:9a:5c:2d:ea:c8:de:fd:f8:31:c1:e1:d6:b5:df:b7:06:15:
f5:a8:8c:80:08:cd:23:ab:ff:c4:e8:97:9c:b8:7f:23:8a:e3:
c3:ec:75:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEBggFgeNPoG47cmCCW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx
NmJmNzcwHhcNMjYwMzAxMjEwMDU0WhcNMjYwMzAyMjEwMDU0WjAzMTEwLwYDVQQD
EyhhMGM5MDRlZWZmZDA5ZDg5M2NlY2U0YTI0YzRlNWM0ODAzYWY0M2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq85H2PKgAsupSUEE3J5zlzvD1S/j
916xn7v9GeGkLupViboD7aTfU4s1jDa429G7qHx6yHmnp0SgwM+QNV7zk3nJ2u4g
BN1R2O/exi/0fYpcO6pxcaW5f8gjP7dZ6JBPRDalOKI+MHvLUY7+DdcwbYTTwroc
DxVNW4pbGur4gyPJJTvYy/S03e9Q6ebfGq+tS93iOTIDoaqH1ksbZP+KlH7spLJQ
0rRdNLcympZq0l1inV3OA4N+A95UOMuXWG8n9SmQDHm1CTj0X082OuHtnuAW/j5i
l+X5iQl17+hpdUpvWw8zrKqhR2yOMkOXYFTEX/VLc7WVjwcW2OjazEK+4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDJBO7/0J2JPOzkokxOXEgDr0OjMB8GA1UdIwQY
MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt
ZTk4ZDA1MmNlYTdmLzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm
LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdugmMiS0
svuYPfzC/SfX9KblpAJxcT0EOtBARFoO7S/XcXvmE6pcATzzTBhOYstaNNWK73bi
Pxyg805ixo+heyR3WuB9sJb9DHketascE08Ti/e0XfsBEIQPDd+izWxy/awcHP6R
0x2pEixjBztchl1Hy26XNFnsipqKxnZcm0M7dnzW606WZ+tlmkWO1tZmwfmBYEVP
khU0WtrOsyrlfOfBFpzakt+YOKCl/V4dmfJpB82e1B7hR2kFin0R4OIdvzP0TQTD
SSDh8T9HJpSWtOJz808J//6ejJpcLerI3v34McHh1rXftwYV9aiMgAjNI6v/xOiX
nLh/I4rjw+x13g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:10 2026 by rpki-client