Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json)
Hash identifier: SG7ch4/HakrTQmM7OXycJ6p/LCRgiJkH25DFp+/Xhuo=
Subject key identifier: 5D:D3:7F:87:59:FC:2C:4A:68:34:DD:D9:59:F2:31:31:BB:FF:55:37
Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Certificate serial: 019CB0C834647AAFE3ACB1F0A046F6B2365E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
Manifest number: 02FF
Signing time: Mon 02 Mar 2026 23:00:36 +0000
Manifest this update: Mon 02 Mar 2026 23:00:36 +0000
Manifest next update: Tue 03 Mar 2026 23:00:36 +0000
Files and hashes: 1: 1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa (hash: 9hRMwF9OzYcY4aoj5DqpON+f2xbb5moy11vfbRHpWD8=)
2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: x50NmRXIzD+qhIIQX9Q4aah5vWUL69wuZ6m1N+9Q9V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:34:64:7a:af:e3:ac:b1:f0:a0:46:f6:b2:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Validity
Not Before: Mar 2 23:00:36 2026 GMT
Not After : Mar 3 23:00:36 2026 GMT
Subject: CN=5dd37f8759fc2c4a6834ddd959f23131bbff5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:49:84:d0:74:52:4a:e2:af:bb:78:a0:e3:
68:ed:7f:6e:2f:be:f3:5c:0f:5c:0b:7b:23:d5:fb:
c3:4f:0f:b3:bd:64:57:02:7c:c9:fc:4d:88:b9:01:
ff:3b:25:8e:1f:06:f0:6d:d4:5f:70:6a:e4:44:d6:
e7:96:5a:2c:e0:d8:79:9b:02:c5:86:3a:2b:aa:67:
8b:bf:02:a1:ac:d9:02:eb:09:69:84:11:d4:dc:e0:
84:42:b4:ad:f8:5a:f8:1a:86:67:c3:d3:93:d4:a6:
8d:98:d1:ba:53:dd:33:67:72:3b:69:90:f9:c4:36:
b0:eb:5e:85:e9:0d:79:46:30:66:ca:e3:42:1b:86:
64:40:b4:e6:16:e8:87:70:6d:9f:44:05:2f:1e:79:
31:70:7d:19:15:88:2e:a7:f3:8a:e5:32:11:72:df:
b5:c4:3b:15:af:62:27:fd:c6:0b:17:65:ff:b7:b2:
28:e2:62:10:5a:ab:7b:66:2b:55:51:d6:5c:d8:d8:
af:43:bb:e4:99:a8:06:17:20:01:43:cb:73:e3:ca:
57:44:c0:7d:11:da:58:cc:6e:92:26:cf:ed:f6:aa:
68:e9:d3:66:84:81:38:b6:5a:ae:eb:48:fa:cb:84:
58:91:bc:6d:5e:29:bb:4f:4c:ab:9b:78:46:0e:55:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:7F:87:59:FC:2C:4A:68:34:DD:D9:59:F2:31:31:BB:FF:55:37
X509v3 Authority Key Identifier:
keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:77:69:04:16:a9:9a:96:a1:59:b8:45:d5:5a:13:7b:34:fe:
a9:a3:42:5e:aa:4f:05:63:27:d7:45:0d:41:a4:3a:c9:a5:07:
ef:1b:20:9e:66:e6:a9:ff:a0:7c:d5:a5:01:9c:f8:2e:e9:d9:
05:fc:8a:62:aa:02:74:d8:68:5a:6d:c5:7f:46:66:7d:70:9d:
e3:8d:75:4c:42:6a:7d:88:7c:aa:7a:1b:ab:8a:a8:c5:30:12:
6c:03:d7:f9:12:af:09:83:f8:50:de:48:2e:18:38:b4:f3:97:
1f:92:2a:e2:37:5e:f7:c0:9a:8f:37:8f:02:2c:ae:7e:bc:80:
67:29:57:f0:85:a4:09:0f:17:5a:2f:be:27:29:ea:3a:ce:e3:
c7:29:65:2c:29:eb:ba:7a:e3:56:e3:09:64:9e:81:e8:25:43:
bd:9a:18:07:54:17:c2:ae:80:7b:ab:ff:bb:9c:e0:8f:4d:b4:
05:bf:92:c4:f0:84:a3:c4:ba:22:95:c7:d3:5a:58:a4:12:91:
b8:5b:d4:68:ef:a0:29:5f:44:ca:ce:d8:66:a9:75:69:03:04:
47:54:20:ee:ef:b2:a5:e4:6e:ec:53:84:0d:75:25:ec:d2:71:
2e:bd:82:57:2f:92:76:cf:df:f1:74:de:ad:1a:c0:81:54:4a:
33:a5:df:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywyDRkeq/jrLHwoEb2sjZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWE0YTQyOTVjNjM4ZmRlNzYwZjNjZGE0NzZkOGJmYzI3
MTEyYjIwHhcNMjYwMzAyMjMwMDM2WhcNMjYwMzAzMjMwMDM2WjAzMTEwLwYDVQQD
Eyg1ZGQzN2Y4NzU5ZmMyYzRhNjgzNGRkZDk1OWYyMzEzMWJiZmY1NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hJhNB0Ukrir7t4oONo7X9uL77z
XA9cC3sj1fvDTw+zvWRXAnzJ/E2IuQH/OyWOHwbwbdRfcGrkRNbnllos4Nh5mwLF
hjorqmeLvwKhrNkC6wlphBHU3OCEQrSt+Fr4GoZnw9OT1KaNmNG6U90zZ3I7aZD5
xDaw616F6Q15RjBmyuNCG4ZkQLTmFuiHcG2fRAUvHnkxcH0ZFYgup/OK5TIRct+1
xDsVr2In/cYLF2X/t7Io4mIQWqt7ZitVUdZc2NivQ7vkmagGFyABQ8tz48pXRMB9
EdpYzG6SJs/t9qpo6dNmhIE4tlqu60j6y4RYkbxtXim7T0yrm3hGDlV8YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3Tf4dZ/CxKaDTd2VnyMTG7/1U3MB8GA1UdIwQY
MBaAFHeaSkKVxjj952DzzaR22L/CcRKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2Qt
NjJjNjdkNGJjNTQ2LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2QtNjJjNjdkNGJjNTQ2
LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3dpBBap
mpahWbhF1VoTezT+qaNCXqpPBWMn10UNQaQ6yaUH7xsgnmbmqf+gfNWlAZz4LunZ
BfyKYqoCdNhoWm3Ff0ZmfXCd4411TEJqfYh8qnobq4qoxTASbAPX+RKvCYP4UN5I
Lhg4tPOXH5Iq4jde98CajzePAiyufryAZylX8IWkCQ8XWi++JynqOs7jxyllLCnr
unrjVuMJZJ6B6CVDvZoYB1QXwq6Ae6v/u5zgj020Bb+SxPCEo8S6IpXH01pYpBKR
uFvUaO+gKV9Eys7YZql1aQMER1Qg7u+ypeRu7FOEDXUl7NJxLr2CVy+Sds/f8XTe
rRrAgVRKM6XfmA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:23 2026 by rpki-client