Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: 6bKTTW0su8QBjYXzuup6qpJXfcbB/V8zpKeLPq2ea5A=
Subject key identifier: 56:DA:1E:B1:52:00:3F:3D:E5:BA:3D:88:21:6D:73:D6:72:1D:67:E8
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 019CE41118F23BF37CE7EC9E69072912B9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0F4D
Signing time: Thu 12 Mar 2026 22:00:51 +0000
Manifest this update: Thu 12 Mar 2026 22:00:51 +0000
Manifest next update: Fri 13 Mar 2026 22:00:51 +0000
Files and hashes: 1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: CmseFNwrtM5jmTi20vqZnlLLRTabGumewAzhvFK+MDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:18:f2:3b:f3:7c:e7:ec:9e:69:07:29:12:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Mar 12 22:00:51 2026 GMT
Not After : Mar 13 22:00:51 2026 GMT
Subject: CN=56da1eb152003f3de5ba3d88216d73d6721d67e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:ff:c2:7c:4a:8a:b9:b2:29:e3:1a:c5:49:
5d:95:3b:0f:bc:e9:77:af:a0:24:a7:c9:c8:07:79:
5d:c8:59:a6:55:f0:21:0b:3f:4d:b4:6d:d5:5f:51:
ba:24:cc:4c:9c:df:fd:af:24:fa:4e:22:74:55:c2:
8f:1a:47:bd:e1:4a:c4:85:db:e6:ce:68:f9:ba:ac:
91:16:6d:62:23:1e:1f:24:0a:07:d7:e3:2b:f6:45:
ea:48:12:a3:46:19:5e:41:41:c8:50:ae:7a:6d:f9:
75:3f:c5:2b:4b:66:c8:2e:35:db:a1:34:3f:c4:1f:
61:ff:92:0c:27:33:fd:84:2e:60:5d:72:f0:4d:2b:
62:70:9e:f4:15:41:dc:5d:c8:53:2a:22:ea:64:66:
d3:c5:43:b8:7d:cb:a0:b5:7d:c3:0a:35:4c:89:b0:
02:c2:9d:08:f3:5b:ce:ab:15:f8:2e:3e:83:3d:17:
23:36:10:1f:50:dc:57:be:8d:c5:bc:ff:e4:34:d3:
98:d0:18:c4:bd:69:71:e2:e5:3a:b0:bf:4d:fa:a0:
53:92:a8:02:84:24:2c:f3:8f:35:3e:e2:b7:0f:ad:
c1:5b:23:93:54:5d:bd:85:89:e3:d8:5e:74:02:79:
14:0d:45:4c:75:b4:94:0d:4a:84:24:14:06:f1:f2:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:1E:B1:52:00:3F:3D:E5:BA:3D:88:21:6D:73:D6:72:1D:67:E8
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:e8:38:54:01:13:57:ef:91:4b:ca:c6:de:9f:35:30:28:
06:35:bb:d6:3d:28:3a:e1:5a:ca:85:21:1b:55:dd:38:b3:fb:
8f:ff:3b:2a:c2:38:7c:a5:73:4f:6d:72:53:30:cc:b4:b8:35:
3f:c1:e4:9d:d6:47:34:f6:1c:84:a4:08:3c:98:9b:b4:62:c8:
b0:73:1b:b2:e6:04:88:9e:2b:97:43:48:86:26:34:b5:95:9e:
c1:3b:6b:8f:85:b3:f6:8f:12:3a:ac:cb:f6:18:43:b9:a0:43:
83:90:b1:f2:2e:4b:91:a6:13:94:0c:3c:c6:10:36:87:78:31:
69:27:4f:6d:ce:d8:27:e7:9d:58:2b:41:10:1e:5d:9d:9f:6b:
94:af:e1:4a:60:44:75:80:29:77:2b:08:48:02:d5:71:84:af:
fd:12:e2:8d:49:b1:f3:6d:64:cd:81:63:4d:52:cc:f9:49:85:
21:2a:bd:cc:05:81:0c:d6:56:3b:78:93:88:28:74:11:1c:79:
9f:48:f3:6b:6f:6d:a5:8f:20:0b:2a:15:e5:75:88:8f:a4:45:
a4:cd:8d:1c:08:62:a0:05:bd:78:a4:ba:10:20:7e:b1:87:fc:
f7:cf:54:f6:38:e7:95:c0:d8:d8:13:8b:01:b2:60:c3:3d:b7:
ea:77:14:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkERjyO/N85+yeaQcpErnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk
NDUzOTgwHhcNMjYwMzEyMjIwMDUxWhcNMjYwMzEzMjIwMDUxWjAzMTEwLwYDVQQD
Eyg1NmRhMWViMTUyMDAzZjNkZTViYTNkODgyMTZkNzNkNjcyMWQ2N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmD/wnxKirmyKeMaxUldlTsPvOl3
r6Akp8nIB3ldyFmmVfAhCz9NtG3VX1G6JMxMnN/9ryT6TiJ0VcKPGke94UrEhdvm
zmj5uqyRFm1iIx4fJAoH1+Mr9kXqSBKjRhleQUHIUK56bfl1P8UrS2bILjXboTQ/
xB9h/5IMJzP9hC5gXXLwTSticJ70FUHcXchTKiLqZGbTxUO4fcugtX3DCjVMibAC
wp0I81vOqxX4Lj6DPRcjNhAfUNxXvo3FvP/kNNOY0BjEvWlx4uU6sL9N+qBTkqgC
hCQs8481PuK3D63BWyOTVF29hYnj2F50AnkUDUVMdbSUDUqEJBQG8fI17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbaHrFSAD895bo9iCFtc9ZyHWfoMB8GA1UdIwQY
MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt
Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0
LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcToOFQB
E1fvkUvKxt6fNTAoBjW71j0oOuFayoUhG1XdOLP7j/87KsI4fKVzT21yUzDMtLg1
P8HkndZHNPYchKQIPJibtGLIsHMbsuYEiJ4rl0NIhiY0tZWewTtrj4Wz9o8SOqzL
9hhDuaBDg5Cx8i5LkaYTlAw8xhA2h3gxaSdPbc7YJ+edWCtBEB5dnZ9rlK/hSmBE
dYApdysISALVcYSv/RLijUmx821kzYFjTVLM+UmFISq9zAWBDNZWO3iTiCh0ERx5
n0jza29tpY8gCyoV5XWIj6RFpM2NHAhioAW9eKS6ECB+sYf8989U9jjnlcDY2BOL
AbJgwz236ncUcA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:12:20 2026 by rpki-client