Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: 5F/+i0Wd6vbY9Gyo+kiLR72AsArssrZx1ZtD+3RGAeU=
Subject key identifier: 47:55:FD:02:FB:C2:AE:B5:21:A3:5F:B8:31:6D:CC:31:1B:74:42:AB
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019CA9EB23FFC7CDBFABCAE3DC182E69C2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0C00
Signing time: Sun 01 Mar 2026 15:01:25 +0000
Manifest this update: Sun 01 Mar 2026 15:01:25 +0000
Manifest next update: Mon 02 Mar 2026 15:01:25 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: tQ/Zb5GbpFDNayIw80NHqHLnWmZdB+JjNIo4cn/LxJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:23:ff:c7:cd:bf:ab:ca:e3:dc:18:2e:69:c2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Mar 1 15:01:25 2026 GMT
Not After : Mar 2 15:01:25 2026 GMT
Subject: CN=4755fd02fbc2aeb521a35fb8316dcc311b7442ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:9a:55:9b:15:00:fb:71:67:8d:46:93:50:
21:ca:39:c9:66:ab:66:41:eb:b1:71:d2:b9:1a:81:
d0:d9:24:be:70:6d:57:54:b7:2c:30:88:10:72:cd:
00:f9:39:f2:ab:42:ca:fc:f8:40:8a:a2:37:75:11:
5a:5a:43:9d:0d:79:cd:1a:3d:12:86:c2:5d:14:06:
05:cd:3a:0f:d5:ef:42:a4:fc:0f:20:1d:3f:3f:b0:
43:c9:c3:73:36:99:df:91:34:d9:8f:27:33:39:6f:
55:ba:d7:51:b5:3a:9c:60:f6:59:6a:27:2d:51:68:
16:e9:eb:5e:6f:13:46:2a:c0:a4:2a:af:fe:8b:ee:
22:95:e9:db:84:84:a2:8d:56:60:c1:28:b9:ce:8e:
2b:2f:41:53:84:e9:ce:73:34:d0:31:6b:ff:65:f0:
45:0d:c4:00:4d:5b:72:5c:87:72:e2:54:64:bf:ba:
a6:71:b4:a4:18:b4:61:ea:74:94:73:45:b0:9c:97:
ed:ba:67:f0:bd:c8:db:f0:ec:9a:71:d4:46:da:1a:
0e:1e:73:0a:8d:47:85:50:3b:b9:f6:e1:bd:d4:26:
d9:d5:a2:cb:5a:ce:ab:c9:49:0d:6d:22:81:92:2f:
50:d1:dc:1c:5a:55:66:5b:37:81:13:4e:f0:7f:f3:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:55:FD:02:FB:C2:AE:B5:21:A3:5F:B8:31:6D:CC:31:1B:74:42:AB
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:f1:cc:e6:ec:55:03:ee:8b:8e:c0:00:ac:e9:e3:a4:d8:
eb:62:70:d8:e2:2e:92:3f:28:24:02:bd:ec:8c:92:5a:b8:bc:
fc:55:52:2c:2f:b3:39:07:8c:dd:b9:2e:6a:63:3b:3c:c1:3a:
b6:0b:21:6e:6a:de:bf:e2:82:0a:c9:db:21:cf:17:7e:e3:f3:
48:f3:75:1e:e3:f5:78:0a:23:2c:76:b2:20:07:92:fe:63:05:
29:55:c4:af:de:81:0f:ce:a1:dd:23:57:56:ce:4e:88:99:5c:
18:91:3c:01:e3:4a:20:ad:a2:23:e6:1e:c2:5f:f1:5b:c7:f3:
ad:a8:86:9e:16:ac:06:f8:da:3f:85:54:33:03:24:0a:fa:71:
a7:a4:01:ae:39:43:c3:49:15:e6:ca:6a:8a:20:da:85:1c:b4:
37:df:ea:e6:2a:dc:f0:e6:76:94:78:0c:0c:fa:1b:56:89:f5:
1c:d4:bb:ca:f1:31:09:96:da:9e:30:11:7f:78:fe:b1:8c:57:
f7:76:5c:ec:1e:e6:b2:62:f4:6b:74:98:4e:83:d7:3f:b9:eb:
5b:b1:85:c4:94:e5:71:10:52:2f:31:fd:26:97:2d:90:fc:71:
5d:62:7b:3f:cd:d5:43:00:ba:b4:20:c5:51:07:96:17:ca:04:
ef:5d:0e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6yP/x82/q8rj3BguacK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy
MzA4Y2UwHhcNMjYwMzAxMTUwMTI1WhcNMjYwMzAyMTUwMTI1WjAzMTEwLwYDVQQD
Eyg0NzU1ZmQwMmZiYzJhZWI1MjFhMzVmYjgzMTZkY2MzMTFiNzQ0MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspaaVZsVAPtxZ41Gk1AhyjnJZqtm
QeuxcdK5GoHQ2SS+cG1XVLcsMIgQcs0A+Tnyq0LK/PhAiqI3dRFaWkOdDXnNGj0S
hsJdFAYFzToP1e9CpPwPIB0/P7BDycNzNpnfkTTZjyczOW9VutdRtTqcYPZZaict
UWgW6etebxNGKsCkKq/+i+4ilenbhISijVZgwSi5zo4rL0FThOnOczTQMWv/ZfBF
DcQATVtyXIdy4lRkv7qmcbSkGLRh6nSUc0WwnJftumfwvcjb8OyacdRG2hoOHnMK
jUeFUDu59uG91CbZ1aLLWs6ryUkNbSKBki9Q0dwcWlVmWzeBE07wf/N0tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdV/QL7wq61IaNfuDFtzDEbdEKrMB8GA1UdIwQY
MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt
OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1
LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQHxzObs
VQPui47AAKzp46TY62Jw2OIukj8oJAK97IySWri8/FVSLC+zOQeM3bkuamM7PME6
tgshbmrev+KCCsnbIc8XfuPzSPN1HuP1eAojLHayIAeS/mMFKVXEr96BD86h3SNX
Vs5OiJlcGJE8AeNKIK2iI+Yewl/xW8fzraiGnhasBvjaP4VUMwMkCvpxp6QBrjlD
w0kV5spqiiDahRy0N9/q5irc8OZ2lHgMDPobVon1HNS7yvExCZbanjARf3j+sYxX
93Zc7B7msmL0a3SYToPXP7nrW7GFxJTlcRBSLzH9JpctkPxxXWJ7P83VQwC6tCDF
UQeWF8oE710OsA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:57 2026 by rpki-client