Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: Fvg8w4MCZmwqwguXaR8x75HOW69mxBh7gmNP2tF/KDE=
Subject key identifier: FF:A2:42:CC:CE:69:10:C7:63:3C:0C:DD:B3:8C:75:E7:F8:71:F4:2F
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 019D389BA7EE0F0F082A267DEE9F52EBA4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 0840
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: 5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa (hash: b2S+2HR2gX8LbhzerywHZG+Oq0Xjm9O6862mVOPJiR0=)
2: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: FY2uRZmFmBpPY08gT4bjNZ+qGquI73DUUb9pl83l+do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a7:ee:0f:0f:08:2a:26:7d:ee:9f:52:eb:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=ffa242ccce6910c7633c0cddb38c75e7f871f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:aa:92:07:01:db:2d:9a:e1:fc:09:d7:5c:
9c:22:c8:51:74:e2:e5:23:6d:fd:3a:fb:6e:d8:f3:
4b:32:2b:c5:27:7c:b5:dd:53:3d:07:21:7a:ee:7f:
7d:07:c7:8b:e9:95:43:e3:03:24:1b:07:ec:e1:21:
bb:c6:ba:02:61:2c:6d:7d:c9:22:c9:c9:be:1c:97:
b9:51:15:06:89:b9:87:ad:bc:65:5f:36:2b:be:de:
93:44:08:4e:46:5e:e7:84:6f:5c:a1:1b:2c:a0:76:
0f:4c:60:83:27:e4:98:cf:40:22:f9:b2:2f:55:05:
30:ed:45:95:6e:86:38:11:41:7b:27:0a:83:5e:7b:
a1:74:b9:8f:02:32:0e:3d:d7:10:36:a5:ea:af:89:
c7:f5:bc:57:8e:3e:6d:85:33:c1:1f:87:c2:a6:43:
4b:6a:a2:d3:9c:97:6b:7f:ad:ab:c8:af:3f:8b:b5:
57:c3:5e:51:a6:db:e3:78:d5:49:44:f0:1c:83:ff:
70:cc:45:e1:16:6f:b7:f8:3a:eb:1d:27:1d:7c:79:
7a:7e:c6:e4:23:c8:c9:29:39:c4:b9:35:9c:d7:e0:
24:3e:1d:51:6c:df:1e:f3:ed:c3:5d:a1:75:ee:24:
77:39:e2:20:42:58:40:8f:07:69:3e:f7:5b:de:d2:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:42:CC:CE:69:10:C7:63:3C:0C:DD:B3:8C:75:E7:F8:71:F4:2F
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:df:c3:3d:b8:0e:f8:a0:a1:36:94:0b:cd:dd:db:3e:83:
32:b7:09:10:64:4e:8a:98:c8:6b:af:0b:b7:07:17:f1:61:07:
f8:03:ea:c1:a8:ca:91:06:ba:38:4a:92:d5:ad:ed:55:a1:30:
35:e1:94:2b:f3:8c:54:43:80:c7:89:75:bf:56:ab:28:3f:e1:
39:14:cf:72:2f:ed:ef:8d:1f:63:d6:fb:9a:22:92:22:fe:1a:
00:77:04:24:fd:16:84:e0:a0:e5:b7:da:6c:4c:fa:9b:4a:dc:
53:3d:0c:43:a2:3b:03:84:4c:20:c6:da:29:55:c8:25:e3:80:
24:51:d0:30:46:ac:9f:8d:48:db:be:72:ed:40:93:38:fb:84:
68:ff:7d:74:8a:d3:db:fd:ce:52:ef:aa:29:85:2c:c5:86:79:
3d:06:19:a8:71:28:78:10:35:7e:ea:d2:14:19:23:42:4c:97:
46:e8:2e:82:8e:29:90:fe:ac:09:94:2c:8b:6e:71:a5:c0:ce:
92:45:0e:17:fa:bb:86:be:0a:f1:ed:a3:46:91:a0:78:b9:d3:
65:65:43:83:2e:aa:2c:98:e9:28:c6:d9:99:fd:2b:51:2a:ae:
40:db:67:34:ef:0f:c3:00:2a:8c:e9:bb:9c:0b:69:e3:66:0f:
77:09:45:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6fuDw8IKiZ97p9S66TuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx
YjZlMGMwHhcNMjYwMzI5MDgwMDE4WhcNMjYwMzMwMDgwMDE4WjAzMTEwLwYDVQQD
EyhmZmEyNDJjY2NlNjkxMGM3NjMzYzBjZGRiMzhjNzVlN2Y4NzFmNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWqkgcB2y2a4fwJ11ycIshRdOLl
I239Ovtu2PNLMivFJ3y13VM9ByF67n99B8eL6ZVD4wMkGwfs4SG7xroCYSxtfcki
ycm+HJe5URUGibmHrbxlXzYrvt6TRAhORl7nhG9coRssoHYPTGCDJ+SYz0Ai+bIv
VQUw7UWVboY4EUF7JwqDXnuhdLmPAjIOPdcQNqXqr4nH9bxXjj5thTPBH4fCpkNL
aqLTnJdrf62ryK8/i7VXw15RptvjeNVJRPAcg/9wzEXhFm+3+DrrHScdfHl6fsbk
I8jJKTnEuTWc1+AkPh1RbN8e8+3DXaF17iR3OeIgQlhAjwdpPvdb3tKEIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+iQszOaRDHYzwM3bOMdef4cfQvMB8GA1UdIwQY
MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt
MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3
LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGDfwz24
DvigoTaUC83d2z6DMrcJEGROipjIa68LtwcX8WEH+APqwajKkQa6OEqS1a3tVaEw
NeGUK/OMVEOAx4l1v1arKD/hORTPci/t740fY9b7miKSIv4aAHcEJP0WhOCg5bfa
bEz6m0rcUz0MQ6I7A4RMIMbaKVXIJeOAJFHQMEasn41I275y7UCTOPuEaP99dIrT
2/3OUu+qKYUsxYZ5PQYZqHEoeBA1furSFBkjQkyXRugugo4pkP6sCZQsi25xpcDO
kkUOF/q7hr4K8e2jRpGgeLnTZWVDgy6qLJjpKMbZmf0rUSquQNtnNO8PwwAqjOm7
nAtp42YPdwlFrQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:28 2026 by rpki-client