Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: G4nb+UyYtYFDvD7710HZ2OWyN+oot0zPCmt67hfuOvA=
Subject key identifier: 23:36:F4:B9:B0:BD:45:CE:10:1D:AC:1A:64:F0:A8:9A:C4:8B:73:6C
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 019CABD9A61B0E14418E7C52CDF8E3FE23A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: Lr4HD2PVf64XBmp6EdWC2bCJEEgvOw4JTt6Jnoe6hhk=)
2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a6:1b:0e:14:41:8e:7c:52:cd:f8:e3:fe:23:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=2336f4b9b0bd45ce101dac1a64f0a89ac48b736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:6e:c2:20:a8:0e:f5:8c:08:ad:f0:06:1b:
8f:6f:ef:e4:e6:7b:46:58:ee:0d:26:e8:76:be:e2:
f3:14:be:5d:d3:c0:7c:98:0b:d8:28:a0:8a:8d:5a:
c5:e8:fc:63:6c:14:30:51:52:3f:c0:28:6b:3c:52:
08:11:6c:16:b7:08:a0:39:cd:f5:31:65:f5:ef:81:
92:7a:48:42:64:3d:fb:43:b7:08:7b:80:b7:33:48:
b4:bd:bf:f4:8a:5f:e1:00:30:04:79:f8:3a:a3:c3:
22:91:50:e6:07:17:ee:bb:b5:85:0a:f8:fc:39:33:
60:73:3d:bd:62:8a:49:03:ad:82:c1:11:90:39:e3:
41:b9:06:4b:0f:ac:80:59:44:8f:cd:45:f4:71:40:
34:81:22:bf:d2:c3:46:e0:34:6d:9e:16:ba:cf:26:
a3:cf:2a:d8:c6:74:d2:6d:88:80:24:18:06:da:df:
ba:3a:e3:36:7b:fe:5d:47:75:d6:65:f2:63:cb:4b:
20:b9:20:e5:60:f0:65:f6:10:82:d8:1d:52:66:ca:
17:60:b8:48:f3:aa:e7:37:7c:2d:bd:dc:f6:c3:54:
e6:66:7e:3a:5d:06:d5:fc:14:3c:c6:d1:06:f5:3e:
cc:19:9b:51:32:74:e1:b6:6e:f8:0d:a2:8c:62:bf:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:F4:B9:B0:BD:45:CE:10:1D:AC:1A:64:F0:A8:9A:C4:8B:73:6C
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:db:ca:11:12:db:df:f5:4c:3b:e3:99:85:38:63:ef:86:0c:
a1:9c:52:ea:60:dc:9a:1e:0a:85:41:3e:84:02:3a:c4:84:67:
9f:45:d3:92:8e:4e:cd:fa:76:be:27:84:97:16:a0:84:16:88:
3c:f4:a7:44:c0:e2:3b:a0:20:a4:c9:ea:22:52:2a:58:92:d0:
30:60:b8:6b:f5:d2:8e:50:87:c7:fe:96:49:29:8a:c5:44:f3:
e9:c7:ef:f6:68:e0:30:4a:6e:86:f7:d5:12:15:0c:5d:b0:1c:
a4:8e:2c:f1:f8:4d:35:f6:d6:04:da:77:3f:bc:38:9b:fa:27:
2d:56:31:6a:16:ff:7a:9b:67:39:52:0b:08:87:5d:f4:90:90:
2b:92:7a:47:54:f1:da:d3:5b:c1:00:9c:24:e0:fa:45:46:b4:
59:e4:d0:a2:eb:eb:1b:f7:8a:b8:84:7b:c3:c1:e6:59:9b:96:
ab:26:f2:16:3c:f7:86:1e:93:a6:50:46:bd:1f:6f:63:4a:e3:
65:b6:25:75:5b:02:20:6b:1d:4f:7a:36:21:ae:48:48:6c:c4:
30:10:23:cc:bf:3a:0d:34:9a:61:59:85:4d:20:d2:84:b1:db:
ea:21:fb:af:0b:64:e2:b0:01:84:b0:40:67:e2:e3:01:b4:11:
3a:0c:fd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2aYbDhRBjnxSzfjj/iOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj
MjI5Y2MwHhcNMjYwMzAyMDAwMTMzWhcNMjYwMzAzMDAwMTMzWjAzMTEwLwYDVQQD
EygyMzM2ZjRiOWIwYmQ0NWNlMTAxZGFjMWE2NGYwYTg5YWM0OGI3MzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3puwiCoDvWMCK3wBhuPb+/k5ntG
WO4NJuh2vuLzFL5d08B8mAvYKKCKjVrF6PxjbBQwUVI/wChrPFIIEWwWtwigOc31
MWX174GSekhCZD37Q7cIe4C3M0i0vb/0il/hADAEefg6o8MikVDmBxfuu7WFCvj8
OTNgcz29YopJA62CwRGQOeNBuQZLD6yAWUSPzUX0cUA0gSK/0sNG4DRtnha6zyaj
zyrYxnTSbYiAJBgG2t+6OuM2e/5dR3XWZfJjy0sguSDlYPBl9hCC2B1SZsoXYLhI
86rnN3wtvdz2w1TmZn46XQbV/BQ8xtEG9T7MGZtRMnThtm74DaKMYr859wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM29LmwvUXOEB2sGmTwqJrEi3NsMB8GA1UdIwQY
MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt
NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl
LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtvKERLb
3/VMO+OZhThj74YMoZxS6mDcmh4KhUE+hAI6xIRnn0XTko5Ozfp2vieElxaghBaI
PPSnRMDiO6AgpMnqIlIqWJLQMGC4a/XSjlCHx/6WSSmKxUTz6cfv9mjgMEpuhvfV
EhUMXbAcpI4s8fhNNfbWBNp3P7w4m/onLVYxahb/eptnOVILCIdd9JCQK5J6R1Tx
2tNbwQCcJOD6RUa0WeTQouvrG/eKuIR7w8HmWZuWqybyFjz3hh6TplBGvR9vY0rj
ZbYldVsCIGsdT3o2Ia5ISGzEMBAjzL86DTSaYVmFTSDShLHb6iH7rwtk4rABhLBA
Z+LjAbQROgz9EA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:57 2026 by rpki-client