Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: JSjjURBcnudQ4r6LT/p30E3ngSE29pl5CztyO1Xy9Mw=
Subject key identifier: 3D:D0:3C:F7:49:CC:40:D4:65:80:76:84:0F:AF:35:AE:F8:EA:C1:59
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019CA7FD095016503239DEE1427F391FDF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0BFF
Signing time: Sun 01 Mar 2026 06:01:43 +0000
Manifest this update: Sun 01 Mar 2026 06:01:43 +0000
Manifest next update: Mon 02 Mar 2026 06:01:43 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: o0uXaLXRkiFHxsjWhZ3mFfAn6hoVPWvRWvN7C/oZGwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:09:50:16:50:32:39:de:e1:42:7f:39:1f:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Mar 1 06:01:43 2026 GMT
Not After : Mar 2 06:01:43 2026 GMT
Subject: CN=3dd03cf749cc40d4658076840faf35aef8eac159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:9d:37:f7:5d:d5:f5:e3:f3:54:cd:b0:07:
ef:5e:72:1e:a6:99:18:10:d0:91:69:7b:f8:d0:ce:
af:1b:0a:cd:bb:98:01:ba:7f:9c:e7:1e:2d:e6:ff:
be:3e:ef:f3:0e:94:d9:6b:52:e4:86:6a:5f:29:84:
9f:b1:b3:d7:25:62:1b:11:b6:e8:dc:a7:ac:00:8d:
56:bc:24:d9:b8:3c:91:fb:9d:a4:e8:64:27:ea:bc:
17:06:89:02:ca:f2:a5:a4:f3:79:26:f4:77:1f:17:
89:02:45:9d:38:1c:91:4e:6c:c0:f0:a8:13:43:80:
fc:4c:8c:0f:e3:21:5f:2b:15:c9:19:e6:38:1a:a8:
92:24:f6:4d:fd:54:21:97:c5:69:73:8a:98:8e:78:
ab:5b:b0:3e:e7:46:af:30:99:66:e0:ec:4c:42:c6:
00:b7:dc:5a:4f:04:22:b6:cd:c5:2d:22:fa:d0:66:
cc:68:72:8f:37:ab:11:14:7c:82:74:00:34:19:17:
52:60:f1:01:90:32:70:6b:0c:b0:98:75:49:12:86:
31:db:00:10:bf:05:15:7f:39:67:99:5f:f5:6a:ef:
30:7e:04:35:02:74:06:6f:49:66:36:ef:d8:b2:b1:
81:13:08:7f:02:0c:89:11:3f:9e:3e:72:09:d0:cf:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:3C:F7:49:CC:40:D4:65:80:76:84:0F:AF:35:AE:F8:EA:C1:59
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:77:3d:ff:39:a9:65:2c:b0:89:e6:3e:4f:0b:b8:75:ad:20:
f3:96:91:bf:22:cd:0e:4a:c9:34:bc:16:e3:d6:8a:a3:29:35:
63:42:94:38:6f:df:0a:ed:34:05:45:69:ce:ea:d1:16:f2:dc:
36:ab:a1:d6:c0:06:b1:9b:19:d8:ad:f4:23:a9:db:11:9b:df:
40:0e:ea:e3:d1:d0:1a:f8:7d:69:d3:17:05:29:64:fc:65:86:
27:00:96:b1:98:86:41:2f:95:1f:07:05:11:a3:63:56:54:1f:
93:4e:ba:ab:c8:e7:56:ba:8d:ff:a1:da:3b:26:48:38:be:f4:
85:45:ad:97:65:ea:b8:5c:a8:22:1c:29:72:49:37:ac:30:a3:
f6:4a:7c:7b:8c:67:c9:bc:09:bc:2e:de:ec:7d:d9:b6:88:54:
02:17:b9:cf:5c:f4:df:93:22:80:c0:2d:7e:1b:2b:c5:5a:80:
d0:53:db:11:ab:da:a5:73:59:62:44:fd:47:51:db:6e:9b:f9:
65:4e:27:77:0e:98:2b:1a:fe:1a:0b:b7:29:d1:bc:59:b2:6d:
f6:84:86:6b:08:e9:ed:46:75:c2:72:68:49:30:47:5b:ad:d6:
67:ef:b8:ea:7b:47:86:aa:d8:6d:7e:02:f6:e2:13:b1:39:ab:
e4:18:f7:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/QlQFlAyOd7hQn85H98JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy
MzA4Y2UwHhcNMjYwMzAxMDYwMTQzWhcNMjYwMzAyMDYwMTQzWjAzMTEwLwYDVQQD
EygzZGQwM2NmNzQ5Y2M0MGQ0NjU4MDc2ODQwZmFmMzVhZWY4ZWFjMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/udN/dd1fXj81TNsAfvXnIeppkY
ENCRaXv40M6vGwrNu5gBun+c5x4t5v++Pu/zDpTZa1LkhmpfKYSfsbPXJWIbEbbo
3KesAI1WvCTZuDyR+52k6GQn6rwXBokCyvKlpPN5JvR3HxeJAkWdOByRTmzA8KgT
Q4D8TIwP4yFfKxXJGeY4GqiSJPZN/VQhl8Vpc4qYjnirW7A+50avMJlm4OxMQsYA
t9xaTwQits3FLSL60GbMaHKPN6sRFHyCdAA0GRdSYPEBkDJwawywmHVJEoYx2wAQ
vwUVfzlnmV/1au8wfgQ1AnQGb0lmNu/YsrGBEwh/AgyJET+ePnIJ0M/UKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3QPPdJzEDUZYB2hA+vNa746sFZMB8GA1UdIwQY
MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt
OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1
LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHc9/zmp
ZSywieY+Twu4da0g85aRvyLNDkrJNLwW49aKoyk1Y0KUOG/fCu00BUVpzurRFvLc
Nquh1sAGsZsZ2K30I6nbEZvfQA7q49HQGvh9adMXBSlk/GWGJwCWsZiGQS+VHwcF
EaNjVlQfk066q8jnVrqN/6HaOyZIOL70hUWtl2XquFyoIhwpckk3rDCj9kp8e4xn
ybwJvC7e7H3ZtohUAhe5z1z035MigMAtfhsrxVqA0FPbEavapXNZYkT9R1Hbbpv5
ZU4ndw6YKxr+Ggu3KdG8WbJt9oSGawjp7UZ1wnJoSTBHW63WZ++46ntHhqrYbX4C
9uITsTmr5Bj3Lg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:09 2026 by rpki-client