Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: cy+lh6jNIn5JOHOSv9KgLfyTzFD+3NSSUh4Jt4++yns=
Subject key identifier: 10:B0:AA:00:29:BB:71:81:BC:C7:4E:D6:24:D8:AC:0B:82:C9:A3:B1
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019CAA8FE3D1E846CCB54C55F480010D2C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0F6B
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: 3lFiJAi9xcyPhHbde0XIskVsgIs.roa (hash: qs21NuisUl0QxWCvF+rTCWm7FC1OO83XG3sDyW4a0mM=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: DMzP5eDAFBwmHX/254UwUrsp5kmlhJLnJKNXRBCZJoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e3:d1:e8:46:cc:b5:4c:55:f4:80:01:0d:2c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=10b0aa0029bb7181bcc74ed624d8ac0b82c9a3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:06:30:d2:40:d6:48:06:ac:ef:a8:84:57:
8f:f5:c9:08:15:ba:54:72:99:74:70:4a:5c:3b:87:
95:9f:68:45:64:b6:6f:9a:e0:68:54:d1:d3:09:c0:
1c:ae:ea:92:0a:93:15:c6:0a:65:86:7b:74:a0:0c:
4f:43:5c:ca:d3:3c:a1:a2:e8:fc:4f:7a:bc:65:e9:
fd:9b:68:fd:f4:bd:b0:52:0b:76:13:6f:4f:30:43:
bb:6e:65:9c:a8:06:db:be:92:ba:93:90:8d:22:6e:
24:73:d1:57:34:e5:f0:07:59:cb:20:7f:25:20:68:
7d:74:5a:de:46:03:1f:80:3d:01:e4:b0:4d:a8:08:
aa:75:20:e0:6e:87:85:50:40:0a:c3:70:6a:03:a6:
a4:b7:1b:25:00:16:8a:99:dd:6b:cc:77:3c:a5:6f:
f9:a6:cb:9d:b4:9d:bb:3b:ab:a6:d2:d5:44:3d:34:
40:06:b4:48:48:2a:0b:e1:fa:d2:fa:5c:d0:cd:ad:
57:e5:b0:26:3f:8f:51:64:ac:f1:4f:3c:06:67:95:
a5:39:45:18:9e:67:43:e0:2a:a5:86:55:61:b0:99:
a9:7e:81:a4:67:f1:eb:6a:f8:26:b9:77:cd:23:ba:
8d:78:d1:0f:ab:9c:a7:f2:67:f3:53:cd:ba:83:bd:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:AA:00:29:BB:71:81:BC:C7:4E:D6:24:D8:AC:0B:82:C9:A3:B1
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:97:72:b9:4b:2f:c5:2b:cc:5c:21:a6:8f:aa:b4:e7:02:
0f:40:46:77:4d:44:0e:02:b4:31:40:e4:04:63:ce:cd:e7:52:
f5:7d:53:74:a5:c6:23:b5:ca:86:48:2f:41:96:8b:24:7c:f1:
26:d1:dd:ea:d1:bf:b8:55:4e:db:64:0c:5e:5a:67:b5:51:df:
77:db:3f:ff:8e:62:d7:64:31:41:82:82:c7:7f:85:fc:86:ff:
41:c5:24:88:ba:8d:cf:24:cf:f8:c4:b0:60:59:a3:de:ff:69:
a7:9e:08:ac:03:95:ce:f0:53:77:30:b8:3e:58:c9:6c:53:82:
50:82:e4:b3:62:31:35:17:b7:83:0e:95:38:36:7f:da:b3:b7:
b0:20:b6:54:a7:f0:64:57:eb:8b:a9:d7:8d:24:2d:bc:4e:3c:
47:b6:41:b6:b0:3a:19:0a:2d:b5:f2:c9:bb:28:21:79:6a:2c:
58:31:37:f0:c4:64:e1:ee:28:92:52:1f:63:62:b1:5a:0d:46:
4f:e3:77:b4:db:43:55:4f:bc:2d:5f:f1:28:76:59:1e:c0:df:
30:ec:b8:c7:9d:16:17:1f:f7:ae:ee:72:2c:53:b1:99:1e:50:
4a:9e:0a:fa:05:3a:ae:d6:c2:71:df:14:90:f5:c9:6b:10:ae:
32:ee:d6:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj+PR6EbMtUxV9IABDSxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZmJiY2UyYzIwODBmODFmNWEwZjk4ZjI3OTIyOTgyNmRl
NDg1MGIwHhcNMjYwMzAxMTgwMTIyWhcNMjYwMzAyMTgwMTIyWjAzMTEwLwYDVQQD
EygxMGIwYWEwMDI5YmI3MTgxYmNjNzRlZDYyNGQ4YWMwYjgyYzlhM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVkGMNJA1kgGrO+ohFeP9ckIFbpU
cpl0cEpcO4eVn2hFZLZvmuBoVNHTCcAcruqSCpMVxgplhnt0oAxPQ1zK0zyhouj8
T3q8Zen9m2j99L2wUgt2E29PMEO7bmWcqAbbvpK6k5CNIm4kc9FXNOXwB1nLIH8l
IGh9dFreRgMfgD0B5LBNqAiqdSDgboeFUEAKw3BqA6aktxslABaKmd1rzHc8pW/5
psudtJ27O6um0tVEPTRABrRISCoL4frS+lzQza1X5bAmP49RZKzxTzwGZ5WlOUUY
nmdD4CqlhlVhsJmpfoGkZ/HravgmuXfNI7qNeNEPq5yn8mfzU826g738ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCwqgApu3GBvMdO1iTYrAuCyaOxMB8GA1UdIwQY
MBaAFHf7vOLCCA+B9aD5jyeSKYJt5IULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYt
M2FhMjdkZjQ3NTIxLzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYtM2FhMjdkZjQ3NTIx
LzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4GXcrlL
L8UrzFwhpo+qtOcCD0BGd01EDgK0MUDkBGPOzedS9X1TdKXGI7XKhkgvQZaLJHzx
JtHd6tG/uFVO22QMXlpntVHfd9s//45i12QxQYKCx3+F/Ib/QcUkiLqNzyTP+MSw
YFmj3v9pp54IrAOVzvBTdzC4PljJbFOCUILks2IxNRe3gw6VODZ/2rO3sCC2VKfw
ZFfri6nXjSQtvE48R7ZBtrA6GQottfLJuygheWosWDE38MRk4e4oklIfY2KxWg1G
T+N3tNtDVU+8LV/xKHZZHsDfMOy4x50WFx/3ru5yLFOxmR5QSp4K+gU6rtbCcd8U
kPXJaxCuMu7WjQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:10 2026 by rpki-client