Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: LSWJPbx3/ZpkK5sG1I99G0CYM7/xSszEPIo2YrhhmeM=
Subject key identifier: 4E:BF:ED:97:BB:8F:F4:78:CD:8B:77:08:E4:8D:51:B6:39:2E:09:EF
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019D37527DDC6BBCB0B0919AE24662C58A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: VuWfYezMuwuKUhdrekzuq4vKzXw.roa (hash: 9mN6oUykcmvDqkiR4AZJmp9qI5JmRegNOsGR4Bu/epo=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: w2l4Unq5NLgx26EFLtp7+tJIpi94zi1SFldkAYrZ+W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7d:dc:6b:bc:b0:b0:91:9a:e2:46:62:c5:8a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=4ebfed97bb8ff478cd8b7708e48d51b6392e09ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:0e:86:8d:76:c6:2e:ba:ba:3f:79:24:f9:
82:dc:66:e3:38:bd:e6:c0:aa:3a:b5:5f:ca:b7:e2:
73:57:b1:90:06:0f:ca:51:4f:36:10:27:cd:2d:28:
2d:e6:1d:15:2f:6c:a6:6e:60:96:1c:79:d0:6a:a6:
cd:7f:83:c5:88:98:c5:8b:1c:42:74:da:f3:33:ca:
3f:ec:7b:9e:9b:4e:26:07:ed:f9:aa:78:7c:8a:60:
cb:d4:35:85:2e:80:3e:3d:ac:88:22:de:38:5e:d8:
27:ff:c6:cc:af:6a:db:d0:8e:df:e1:ca:d3:c9:6e:
0e:ce:0e:2c:32:f5:98:ce:b5:ef:83:c1:4b:8b:d1:
88:0a:4a:f4:c0:32:00:63:12:22:8f:71:8d:c7:35:
ce:d1:86:1d:74:d8:79:ae:eb:6e:83:4b:d3:c6:76:
54:43:1a:d9:35:b3:34:49:8b:f4:87:71:f5:24:e9:
54:25:fb:99:9c:07:76:32:98:1b:98:df:1a:7d:68:
85:f0:4a:09:61:8e:76:27:c0:b0:54:37:2b:10:d8:
99:2a:61:4a:6a:68:6f:6e:d9:ed:75:03:e0:81:20:
9d:1b:27:d0:ff:87:3d:1a:73:e5:a6:50:24:0b:f0:
a5:37:8c:98:c4:dc:fa:40:8d:1e:64:6b:54:4a:00:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:ED:97:BB:8F:F4:78:CD:8B:77:08:E4:8D:51:B6:39:2E:09:EF
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e0:75:e2:02:4b:66:6f:35:04:6e:af:ef:60:ee:6d:f4:1f:
fc:69:9f:10:9a:3c:fb:cd:fb:53:49:80:a7:74:0a:b4:5a:6e:
16:76:fe:a5:a6:bd:ce:43:9a:7d:ce:e0:d5:67:23:99:2a:02:
86:0b:77:af:74:af:aa:42:b9:14:0f:43:2d:ed:cf:80:ef:ff:
28:66:0c:29:aa:c8:c2:13:2f:e4:69:0e:47:b9:75:8a:b1:54:
ef:29:52:d6:aa:da:73:85:3f:88:83:c3:90:78:ff:bf:20:0e:
29:cf:8f:cf:c0:72:34:7c:bf:aa:64:f4:ef:e1:05:01:1d:5c:
91:2f:00:33:76:9b:6e:1c:df:d0:ab:88:94:15:e9:b2:ea:45:
92:90:93:b9:85:c4:a8:e6:c4:f1:33:08:28:42:f4:0d:18:99:
bc:41:0e:98:18:61:63:80:0a:c9:cc:e7:de:9a:98:72:9e:58:
ba:cd:46:05:05:e8:80:b7:61:6d:bf:15:04:8f:05:e3:3d:14:
40:de:a9:b3:44:a4:1a:ef:5f:d6:c3:40:dc:54:39:a8:5b:da:
24:f4:19:65:38:74:c4:52:22:74:99:8e:22:49:71:1b:06:75:
cf:0e:eb:7f:53:0d:65:b7:a5:01:d6:54:c5:33:81:0c:8d:53:
33:d1:3b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Un3ca7ywsJGa4kZixYplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjYwMzI5MDIwMDQ2WhcNMjYwMzMwMDIwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZWJmZWQ5N2JiOGZmNDc4Y2Q4Yjc3MDhlNDhkNTFiNjM5MmUwOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8sOho12xi66uj95JPmC3GbjOL3m
wKo6tV/Kt+JzV7GQBg/KUU82ECfNLSgt5h0VL2ymbmCWHHnQaqbNf4PFiJjFixxC
dNrzM8o/7Huem04mB+35qnh8imDL1DWFLoA+PayIIt44Xtgn/8bMr2rb0I7f4crT
yW4Ozg4sMvWYzrXvg8FLi9GICkr0wDIAYxIij3GNxzXO0YYddNh5rutug0vTxnZU
QxrZNbM0SYv0h3H1JOlUJfuZnAd2MpgbmN8afWiF8EoJYY52J8CwVDcrENiZKmFK
amhvbtntdQPggSCdGyfQ/4c9GnPlplAkC/ClN4yYxNz6QI0eZGtUSgB53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6/7Ze7j/R4zYt3COSNUbY5LgnvMB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz
LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuB14gJL
Zm81BG6v72DubfQf/GmfEJo8+837U0mAp3QKtFpuFnb+paa9zkOafc7g1WcjmSoC
hgt3r3SvqkK5FA9DLe3PgO//KGYMKarIwhMv5GkOR7l1irFU7ylS1qrac4U/iIPD
kHj/vyAOKc+Pz8ByNHy/qmT07+EFAR1ckS8AM3abbhzf0KuIlBXpsupFkpCTuYXE
qObE8TMIKEL0DRiZvEEOmBhhY4AKyczn3pqYcp5Yus1GBQXogLdhbb8VBI8F4z0U
QN6ps0SkGu9f1sNA3FQ5qFvaJPQZZTh0xFIidJmOIklxGwZ1zw7rf1MNZbelAdZU
xTOBDI1TM9E7Tw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:37 2026 by rpki-client