Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: 7TUdHyBl5ycP+ivCTfbYQVzhqjUd3MBo0rQa2monB7M=
Subject key identifier: B1:A3:DE:A2:22:A5:B9:4B:81:EA:46:64:99:3C:A5:CF:7B:DF:80:41
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 019D389BFC506D4AF24997A5A571BDAF68D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0E0A
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: cfgl/xG0ozimM81oUfhD3bOMwitC1M0qHBNFkIXIA9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fc:50:6d:4a:f2:49:97:a5:a5:71:bd:af:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=b1a3dea222a5b94b81ea4664993ca5cf7bdf8041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:48:92:09:74:07:b2:5d:51:53:af:f4:74:
0c:ad:54:6e:e6:73:55:cc:80:3c:b2:e6:f1:de:bc:
fa:27:cc:ce:9f:68:43:88:44:ad:2c:5d:35:26:5f:
b2:ae:de:7c:1d:dd:58:42:44:ef:ac:df:cf:f7:3c:
d1:85:52:9d:8f:8d:e3:8a:c2:ae:74:bb:4e:7d:58:
3f:8e:6d:99:bf:a7:40:49:ee:7e:7d:26:a3:6f:53:
38:c1:7d:da:91:25:4e:98:72:83:6d:a4:54:03:ff:
0c:b1:5f:7d:66:f3:be:ae:6b:a5:b8:bb:24:af:b9:
40:61:de:e8:50:86:80:fd:97:ae:31:16:85:99:6f:
c2:d1:e2:20:19:dd:e6:83:96:82:37:c6:ac:66:c5:
60:9f:87:77:83:94:e5:c6:64:73:97:7f:4d:3d:b7:
ff:c3:00:ed:f9:b3:fe:18:47:cb:f7:77:c2:c8:9b:
62:ad:0b:51:4e:1d:ea:11:c3:b0:74:a9:96:65:10:
fc:ec:1d:d5:f3:f2:da:fb:3f:69:ab:88:9c:52:dc:
48:a0:6e:a5:a2:51:99:94:fe:c9:3c:85:cb:ba:da:
4e:ae:77:85:08:49:21:4e:c0:1e:d9:64:fc:20:a0:
c8:61:83:2b:3e:c0:64:c8:5f:5d:1b:47:d7:9d:e6:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:DE:A2:22:A5:B9:4B:81:EA:46:64:99:3C:A5:CF:7B:DF:80:41
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cc:62:45:d0:94:e1:3a:4c:6b:eb:b7:cf:c5:4f:f6:6f:34:
57:74:5c:47:01:b2:1c:e7:43:3f:7f:f4:38:21:6d:5a:2b:f3:
a1:9e:95:56:ea:27:65:31:d8:19:a8:82:a3:d6:50:ec:ec:ca:
e2:0f:a4:cd:ec:78:c4:10:86:08:67:f2:48:32:c4:76:c2:e8:
fd:bd:ad:0c:65:b2:dd:09:7c:2f:b0:d6:11:16:87:53:b4:91:
87:12:49:39:cc:f0:ff:d3:8f:9c:a5:f2:9f:e7:0a:7c:07:88:
f4:72:43:6a:98:9f:96:a5:8e:12:33:6a:b8:eb:cc:f4:f4:5e:
8c:03:45:8f:b1:0b:cc:f4:cb:3b:d3:a2:37:bb:7d:e4:c2:7b:
b2:73:59:0a:22:f6:09:31:8c:1a:fc:6f:03:5e:12:5b:2e:07:
52:c4:40:e4:58:03:68:ab:b1:f7:98:f7:74:0d:d4:f3:fd:da:
28:be:12:c0:fd:b8:46:da:b5:0a:03:a3:27:ce:6c:5e:45:c8:
7f:20:f0:c9:40:c1:79:5f:01:5b:91:0a:3a:e4:6e:a7:48:54:
58:10:1e:57:4b:91:1c:f5:f1:f2:2a:c6:61:a2:14:b8:b7:71:
19:a8:52:43:0e:5d:19:ff:e1:4c:59:e5:8d:dc:e7:fa:78:5f:
eb:09:d1:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/xQbUrySZelpXG9r2jWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDJkOTI4NDIzMTA0ZTVjMzQ4MGUyMWI0YTNlZDE0OThi
MmEyN2UwHhcNMjYwMzI5MDgwMDM5WhcNMjYwMzMwMDgwMDM5WjAzMTEwLwYDVQQD
EyhiMWEzZGVhMjIyYTViOTRiODFlYTQ2NjQ5OTNjYTVjZjdiZGY4MDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X5Ikgl0B7JdUVOv9HQMrVRu5nNV
zIA8subx3rz6J8zOn2hDiEStLF01Jl+yrt58Hd1YQkTvrN/P9zzRhVKdj43jisKu
dLtOfVg/jm2Zv6dASe5+fSajb1M4wX3akSVOmHKDbaRUA/8MsV99ZvO+rmuluLsk
r7lAYd7oUIaA/ZeuMRaFmW/C0eIgGd3mg5aCN8asZsVgn4d3g5TlxmRzl39NPbf/
wwDt+bP+GEfL93fCyJtirQtRTh3qEcOwdKmWZRD87B3V8/La+z9pq4icUtxIoG6l
olGZlP7JPIXLutpOrneFCEkhTsAe2WT8IKDIYYMrPsBkyF9dG0fXnebVlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGj3qIipblLgepGZJk8pc9734BBMB8GA1UdIwQY
MBaAFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgt
NDg4NzkyMzg4ZTViLzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgtNDg4NzkyMzg4ZTVi
LzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcxiRdCU
4TpMa+u3z8VP9m80V3RcRwGyHOdDP3/0OCFtWivzoZ6VVuonZTHYGaiCo9ZQ7OzK
4g+kzex4xBCGCGfySDLEdsLo/b2tDGWy3Ql8L7DWERaHU7SRhxJJOczw/9OPnKXy
n+cKfAeI9HJDapiflqWOEjNquOvM9PRejANFj7ELzPTLO9OiN7t95MJ7snNZCiL2
CTGMGvxvA14SWy4HUsRA5FgDaKux95j3dA3U8/3aKL4SwP24Rtq1CgOjJ85sXkXI
fyDwyUDBeV8BW5EKOuRup0hUWBAeV0uRHPXx8irGYaIUuLdxGahSQw5dGf/hTFnl
jdzn+nhf6wnRsg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:46 2026 by rpki-client