Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: cceUb+NBvacfryAq7mitu7vJQGAkfyOa3yDTyj/k6p4=
Subject key identifier: 0F:91:30:12:30:1C:74:C6:59:E5:4D:A8:7E:B7:E7:01:42:5D:F1:B7
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019D38D338EAA03788F32DA67ACF3B39EFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 08E5
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: 3ztmxNzL5o1dbJOHM4y6LmF1qyqrRM6oRzXpfiS4zcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:38:ea:a0:37:88:f3:2d:a6:7a:cf:3b:39:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=0f913012301c74c659e54da87eb7e701425df1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:60:e7:7f:85:81:e9:f7:ae:49:48:ad:7d:
73:e6:2f:c6:f8:b9:1f:8e:7c:64:d9:f3:be:29:46:
bd:89:fd:7b:16:cd:00:8b:77:33:1c:b4:a8:58:50:
77:6b:2c:95:1d:80:a9:c7:a5:2c:99:3e:c5:c5:c3:
d1:5b:f5:ab:83:89:b3:53:fe:b0:88:f5:2a:b1:59:
9d:d5:7e:3e:73:c1:72:75:20:c8:ce:45:25:72:17:
31:c1:0c:18:66:b1:ed:65:ac:8e:03:9b:8a:3d:ac:
4e:b9:fb:4d:30:5f:ce:66:01:d8:a7:29:e0:a1:ea:
ba:65:26:4c:df:d7:ba:b0:3a:91:3b:fc:67:49:de:
0f:a9:e7:13:2f:eb:53:0e:cd:4c:3c:de:1a:e7:8b:
b1:e3:a5:84:d1:1c:2a:aa:7f:3b:af:18:cb:df:04:
03:f5:58:34:19:cc:db:ef:00:9a:d4:cf:df:b1:c8:
3a:69:6b:e9:3e:5f:27:b5:e3:dc:5a:6d:95:b4:7a:
c3:10:28:a0:14:e7:15:b6:78:bc:d9:2b:ad:d7:e1:
3c:46:5e:ac:50:81:fb:69:60:b8:d3:a3:61:37:33:
a5:aa:4e:c0:04:b0:42:de:d6:9a:54:74:fb:04:65:
d5:1a:ea:01:b5:e7:22:ec:22:b2:e9:62:a5:db:cf:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:30:12:30:1C:74:C6:59:E5:4D:A8:7E:B7:E7:01:42:5D:F1:B7
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:78:79:e3:50:c8:f3:34:c9:b6:d0:43:51:45:6e:c7:13:
cb:d2:05:d1:ab:2d:51:a6:b3:28:ed:1d:69:81:fd:5d:5c:c7:
b3:d5:d0:5f:fe:ca:15:be:4e:41:84:dc:78:06:53:03:34:00:
e5:9b:53:c0:1d:7a:2a:5f:3d:ce:9e:1e:26:9d:4f:ff:39:3b:
54:d8:76:13:cf:25:0d:e8:e6:bc:46:20:4b:c8:57:74:ad:03:
08:5f:25:60:00:cb:72:28:34:71:aa:1d:03:91:ef:f4:d7:53:
84:53:3a:8b:fb:bf:7d:fc:83:e7:93:a5:74:2b:83:2c:28:84:
51:97:a2:c6:8b:ac:a1:23:ce:bb:6b:a3:64:a8:b9:12:0f:29:
48:5f:64:0e:6a:91:c7:ce:c6:a8:b7:2f:49:93:15:28:5d:ca:
f2:bc:06:3f:ab:e8:cf:e3:ae:85:dc:e4:df:20:ed:48:ff:5d:
b0:9b:e1:15:7d:66:ab:07:45:ea:42:8b:dd:4c:fe:06:38:70:
00:e4:a5:88:85:b0:c6:81:b2:f6:ec:bb:62:cb:d8:12:be:54:
85:05:b8:3f:60:13:96:38:6b:75:a1:58:8b:59:59:b9:2c:d8:
57:24:d4:ab:25:e4:e4:03:3b:69:b1:5f:ee:5b:fc:fe:c8:4f:
d4:02:49:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040zjqoDeI8y2mes87Oe/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzJkOGE2MDE5N2ZjN2JkZTY0ZmMzZmFkMTBlYjJkYTRm
ZTg3NzkwHhcNMjYwMzI5MDkwMDU5WhcNMjYwMzMwMDkwMDU5WjAzMTEwLwYDVQQD
EygwZjkxMzAxMjMwMWM3NGM2NTllNTRkYTg3ZWI3ZTcwMTQyNWRmMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsJg53+Fgen3rklIrX1z5i/G+Lkf
jnxk2fO+KUa9if17Fs0Ai3czHLSoWFB3ayyVHYCpx6UsmT7FxcPRW/Wrg4mzU/6w
iPUqsVmd1X4+c8FydSDIzkUlchcxwQwYZrHtZayOA5uKPaxOuftNMF/OZgHYpyng
oeq6ZSZM39e6sDqRO/xnSd4PqecTL+tTDs1MPN4a54ux46WE0Rwqqn87rxjL3wQD
9Vg0Gczb7wCa1M/fscg6aWvpPl8ntePcWm2VtHrDECigFOcVtni82Sut1+E8Rl6s
UIH7aWC406NhNzOlqk7ABLBC3taaVHT7BGXVGuoBteci7CKy6WKl28+BYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+RMBIwHHTGWeVNqH635wFCXfG3MB8GA1UdIwQY
MBaAFHfC2KYBl/x73mT8P60Q6y2k/od5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAt
OGYyYWY5YjUxYzViLzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAtOGYyYWY5YjUxYzVi
LzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMl4eeNQ
yPM0ybbQQ1FFbscTy9IF0astUaazKO0daYH9XVzHs9XQX/7KFb5OQYTceAZTAzQA
5ZtTwB16Kl89zp4eJp1P/zk7VNh2E88lDejmvEYgS8hXdK0DCF8lYADLcig0caod
A5Hv9NdThFM6i/u/ffyD55OldCuDLCiEUZeixousoSPOu2ujZKi5Eg8pSF9kDmqR
x87GqLcvSZMVKF3K8rwGP6voz+Ouhdzk3yDtSP9dsJvhFX1mqwdF6kKL3Uz+Bjhw
AOSliIWwxoGy9uy7YsvYEr5UhQW4P2ATljhrdaFYi1lZuSzYVyTUqyXk5AM7abFf
7lv8/shP1AJJcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:28 2026 by rpki-client