Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: qUVn60P49t1kMvtz5mH3bfR9sF5x3sxAuIG/2jz1Qpk=
Subject key identifier: 45:74:19:A1:3E:2F:2D:DE:4F:C4:73:D0:56:1B:D8:D5:18:F6:1E:8F
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019D3A5392205C32D6041E62AE0E47815FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0806
Signing time: Sun 29 Mar 2026 16:00:48 +0000
Manifest this update: Sun 29 Mar 2026 16:00:48 +0000
Manifest next update: Mon 30 Mar 2026 16:00:48 +0000
Files and hashes: 1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: hLFsrUDUB+Tah6/Zxq4H4SZ8Jch+8GPi3/8dYFlN7Ng=)
4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:92:20:5c:32:d6:04:1e:62:ae:0e:47:81:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Mar 29 16:00:48 2026 GMT
Not After : Mar 30 16:00:48 2026 GMT
Subject: CN=457419a13e2f2dde4fc473d0561bd8d518f61e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:7b:1c:dc:41:f5:a0:1c:a3:59:89:3b:19:
54:b8:e7:e9:f0:74:59:ee:87:d5:cb:5c:6c:ca:8d:
b4:b4:f2:4e:1a:f7:ea:ef:77:b3:aa:a1:49:0c:d2:
14:c3:ba:e3:bb:1f:1e:04:8d:b0:ae:5e:e1:44:3c:
18:c2:9f:f9:07:4f:e8:b2:d4:f8:03:a6:2e:6b:35:
fe:f2:33:40:b8:dc:7e:12:58:fe:7d:5f:db:4c:87:
15:25:f2:c3:58:37:7c:83:a1:d0:e8:8f:d9:42:68:
9e:07:15:56:65:6c:16:19:b0:cd:e6:ca:8d:8b:92:
96:65:30:fa:07:10:5d:a9:4b:cd:d1:cb:0f:51:fd:
6f:49:15:94:c4:d7:91:e0:16:bf:1f:28:d1:7f:46:
17:c6:09:66:36:18:70:60:33:69:13:13:39:f3:1e:
c0:d2:81:19:0d:d4:d2:e1:0c:39:96:a6:f9:61:cb:
8a:0f:1e:b3:11:1e:cb:33:86:84:11:da:2b:6b:20:
6a:93:a5:ae:59:39:8d:82:dd:7b:5c:6e:0d:6b:f1:
c9:a9:e3:52:6d:bb:73:89:d1:b4:6c:d4:61:b9:9a:
26:4b:e6:b7:eb:86:28:0e:7b:7d:05:00:c9:4e:96:
18:55:02:0d:e7:4e:f1:0b:a7:bd:54:c8:7e:ee:67:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:19:A1:3E:2F:2D:DE:4F:C4:73:D0:56:1B:D8:D5:18:F6:1E:8F
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ec:f1:d6:8c:12:51:f5:b6:a0:f8:b8:9f:93:e7:d2:0e:6b:
c5:3b:19:6a:ad:31:9a:76:45:85:b4:59:cd:78:55:54:a0:37:
b4:82:25:59:57:8f:3e:11:88:23:6f:c5:71:22:ef:1f:39:d2:
1d:55:fc:9a:ca:95:04:59:31:27:84:bd:8e:88:a7:2b:51:17:
23:54:1e:34:9a:28:83:aa:06:19:9c:ec:54:8e:56:e2:83:2c:
35:13:2d:8c:41:cf:1f:df:a9:29:0d:04:10:d3:94:23:ca:46:
f1:34:86:57:89:68:71:91:89:eb:a3:72:26:93:5d:a2:fe:eb:
2f:42:a1:36:af:be:44:b7:cd:fb:b2:ca:19:b9:82:f4:11:30:
bb:84:cd:78:e9:b1:77:cd:7f:6a:b9:be:53:01:2e:19:ff:4c:
cf:9c:da:50:d2:7a:5c:d3:03:16:26:75:7a:cd:a5:0c:97:e6:
b9:f6:1e:52:1c:67:ef:df:73:c7:5a:da:f6:e2:f3:f0:09:68:
bc:ba:77:95:0e:41:70:05:1e:89:22:1f:93:b3:17:b3:43:39:
e9:9b:ef:9a:d2:fb:0f:9f:bd:e3:01:41:76:61:12:d2:ad:42:
83:51:d3:7c:7a:b2:c5:d1:94:2e:14:8f:5f:5d:0d:60:49:7e:
1b:cd:b7:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U5IgXDLWBB5irg5HgV+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw
YWNjNDEwHhcNMjYwMzI5MTYwMDQ4WhcNMjYwMzMwMTYwMDQ4WjAzMTEwLwYDVQQD
Eyg0NTc0MTlhMTNlMmYyZGRlNGZjNDczZDA1NjFiZDhkNTE4ZjYxZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3l7HNxB9aAco1mJOxlUuOfp8HRZ
7ofVy1xsyo20tPJOGvfq73ezqqFJDNIUw7rjux8eBI2wrl7hRDwYwp/5B0/ostT4
A6YuazX+8jNAuNx+Elj+fV/bTIcVJfLDWDd8g6HQ6I/ZQmieBxVWZWwWGbDN5sqN
i5KWZTD6BxBdqUvN0csPUf1vSRWUxNeR4Ba/HyjRf0YXxglmNhhwYDNpExM58x7A
0oEZDdTS4Qw5lqb5YcuKDx6zER7LM4aEEdorayBqk6WuWTmNgt17XG4Na/HJqeNS
bbtzidG0bNRhuZomS+a364YoDnt9BQDJTpYYVQIN507xC6e9VMh+7mcnUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV0GaE+Ly3eT8Rz0FYb2NUY9h6PMB8GA1UdIwQY
MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt
M2JlOTk1ZDJiYmRhLzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh
LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqezx1owS
UfW2oPi4n5Pn0g5rxTsZaq0xmnZFhbRZzXhVVKA3tIIlWVePPhGII2/FcSLvHznS
HVX8msqVBFkxJ4S9joinK1EXI1QeNJoog6oGGZzsVI5W4oMsNRMtjEHPH9+pKQ0E
ENOUI8pG8TSGV4locZGJ66NyJpNdov7rL0KhNq++RLfN+7LKGbmC9BEwu4TNeOmx
d81/arm+UwEuGf9Mz5zaUNJ6XNMDFiZ1es2lDJfmufYeUhxn799zx1ra9uLz8Alo
vLp3lQ5BcAUeiSIfk7MXs0M56ZvvmtL7D5+94wFBdmES0q1Cg1HTfHqyxdGULhSP
X10NYEl+G823JQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:45 2026 by rpki-client