Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: +A48A0pC14Jic7blqWzWFevvt1hbmB+D/9jirVkJKfU=
Subject key identifier: A5:3B:C5:0B:46:C9:94:4D:A6:57:38:B7:B5:DB:CB:05:70:21:6F:1B
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019CAA90100B63FB4D5E8987B8F92D6728F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 08D1
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: o5/e7aWtb2opC6yXQVPToODrAy+pjisW49LR3rAqjWQ=)
2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:10:0b:63:fb:4d:5e:89:87:b8:f9:2d:67:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=a53bc50b46c9944da65738b7b5dbcb0570216f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:e1:63:86:d2:b9:e5:8c:02:43:c9:1e:52:
05:97:f2:be:44:af:ff:ea:95:9e:f8:5f:d8:f2:83:
ca:b9:fc:5b:59:f0:25:65:a4:f6:5e:bf:07:59:0f:
99:4c:b8:4c:95:10:63:bb:ec:99:27:4c:d5:5b:da:
ec:b8:02:c5:61:36:51:26:a8:14:de:aa:b8:96:e3:
e0:c2:be:d6:17:87:3d:e2:ea:60:aa:b9:0c:00:aa:
b5:37:a0:df:88:f1:c3:42:d2:04:54:d2:02:37:5d:
d5:d9:45:02:50:38:05:a5:83:50:aa:b8:6b:06:68:
87:5c:53:67:59:8f:f1:cc:69:c6:f4:b3:53:0a:1a:
e0:45:7d:a5:6a:2f:e4:14:ae:27:64:13:64:ec:80:
f1:3b:89:e5:5d:ca:48:90:9a:d2:41:08:a3:13:6a:
b5:6d:94:f7:f3:8c:67:5b:93:1e:cd:7c:74:5c:d8:
08:9f:c8:94:98:1c:0b:a4:87:48:87:0d:a7:93:9d:
3b:6b:be:3a:41:5a:5f:ca:a2:78:ec:b8:d9:5f:c3:
a2:d2:6e:a1:13:d2:b4:b8:83:98:63:28:9d:bb:d8:
f9:e5:31:ab:f2:98:50:0f:66:a1:e7:f9:e3:4e:e3:
a4:29:6e:2a:68:b3:b0:07:1b:7d:c4:42:29:3a:2b:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3B:C5:0B:46:C9:94:4D:A6:57:38:B7:B5:DB:CB:05:70:21:6F:1B
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f0:65:42:a7:5c:88:55:0f:90:60:a6:33:90:4f:99:d1:14:
c3:1b:6b:cf:7d:29:dd:9a:74:ce:70:7b:97:65:99:e8:01:b6:
0a:ad:67:ed:fd:91:0d:98:99:db:c0:f1:09:cd:10:78:40:17:
42:c0:26:be:de:27:b0:75:74:13:b0:9b:e0:3e:de:81:6d:8f:
93:60:ba:77:2c:5a:b7:aa:64:d9:81:37:e3:d5:08:d4:1b:dc:
96:22:01:46:80:8c:7f:48:ee:4e:03:71:5f:39:59:fd:49:a5:
da:20:04:3b:47:23:9b:01:61:2d:15:c2:b9:b0:70:b4:fe:a1:
b6:aa:69:54:70:09:d9:ad:05:a5:9b:d4:5b:05:fd:cd:2c:2b:
e1:a2:56:61:d0:c5:4d:a7:3b:ab:7d:ae:6e:50:75:4b:ad:50:
b8:89:aa:0c:b1:fe:89:c9:d0:21:7f:68:48:84:5a:10:89:a8:
6f:7d:94:71:d2:03:7d:1d:3c:d6:3e:6b:4b:d4:f8:46:34:4d:
df:99:6b:49:ff:45:7a:bf:2e:b1:d8:28:95:94:32:d8:75:40:
9d:01:c3:0b:55:21:3f:7b:22:c6:d9:46:5a:09:ef:b3:b2:49:
72:e7:16:26:99:bd:b3:a8:48:81:a7:77:86:79:ea:03:2c:fc:
bb:aa:5f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkBALY/tNXomHuPktZyj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx
NTAyZTIwHhcNMjYwMzAxMTgwMTMzWhcNMjYwMzAyMTgwMTMzWjAzMTEwLwYDVQQD
EyhhNTNiYzUwYjQ2Yzk5NDRkYTY1NzM4YjdiNWRiY2IwNTcwMjE2ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaDhY4bSueWMAkPJHlIFl/K+RK//
6pWe+F/Y8oPKufxbWfAlZaT2Xr8HWQ+ZTLhMlRBju+yZJ0zVW9rsuALFYTZRJqgU
3qq4luPgwr7WF4c94upgqrkMAKq1N6DfiPHDQtIEVNICN13V2UUCUDgFpYNQqrhr
BmiHXFNnWY/xzGnG9LNTChrgRX2lai/kFK4nZBNk7IDxO4nlXcpIkJrSQQijE2q1
bZT384xnW5MezXx0XNgIn8iUmBwLpIdIhw2nk507a746QVpfyqJ47LjZX8Oi0m6h
E9K0uIOYYyidu9j55TGr8phQD2ah5/njTuOkKW4qaLOwBxt9xEIpOit84wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU7xQtGyZRNplc4t7XbywVwIW8bMB8GA1UdIwQY
MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt
YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1
LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/BlQqdc
iFUPkGCmM5BPmdEUwxtrz30p3Zp0znB7l2WZ6AG2Cq1n7f2RDZiZ28DxCc0QeEAX
QsAmvt4nsHV0E7Cb4D7egW2Pk2C6dyxat6pk2YE349UI1BvcliIBRoCMf0juTgNx
XzlZ/Uml2iAEO0cjmwFhLRXCubBwtP6htqppVHAJ2a0FpZvUWwX9zSwr4aJWYdDF
Tac7q32ublB1S61QuImqDLH+icnQIX9oSIRaEImob32UcdIDfR081j5rS9T4RjRN
35lrSf9Fer8usdgolZQy2HVAnQHDC1UhP3sixtlGWgnvs7JJcucWJpm9s6hIgad3
hnnqAyz8u6pf9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:16 2026 by rpki-client