Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: jsddBo0KicEf8Qtg09yAux0lBzS9QmaCQWebp6DuUeY=
Subject key identifier: B1:59:7D:34:34:D4:82:5D:EF:0F:EE:6B:6C:85:9B:D0:86:CC:F4:0F
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 019D0553DBB2B31E5A404B14B97AEFEDCD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1875
Signing time: Thu 19 Mar 2026 09:01:14 +0000
Manifest this update: Thu 19 Mar 2026 09:01:14 +0000
Manifest next update: Fri 20 Mar 2026 09:01:14 +0000
Files and hashes: 1: UeHrvynok458nbOMxnfDo2XoOCg.roa (hash: mBftsmERWzpGKsnXFmodVRrKomChx92ReubqAs5GrrQ=)
2: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: mFGIw8jBD/q35G+RWwCBseLmhkv+YYZCJIY2KIL0jDo=)
3: jMDauzNgql38unoatB3JO5Ml3iQ.roa (hash: Bmlq4o2YkAwlEIUrRalLb7yAT8WXu+XhxwnwkhpOnOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:db:b2:b3:1e:5a:40:4b:14:b9:7a:ef:ed:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Mar 19 09:01:14 2026 GMT
Not After : Mar 20 09:01:14 2026 GMT
Subject: CN=b1597d3434d4825def0fee6b6c859bd086ccf40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:4a:69:0f:82:9a:fb:ed:92:b8:c4:fa:05:
43:cc:32:bf:49:d7:89:9a:0c:60:b7:0e:66:9f:c1:
72:b4:5e:22:11:76:8f:dc:e5:38:31:87:66:c3:ab:
ae:c6:c5:17:5c:9f:a0:e9:11:cd:d6:11:f0:d4:b3:
16:da:2c:a6:c2:a3:5f:fb:e8:aa:2f:f9:c3:9b:f0:
0e:e4:ee:fa:ab:98:17:45:19:57:70:7e:ea:24:92:
f5:64:59:bb:54:f2:d4:c0:f0:7a:35:7e:df:90:7b:
82:d7:50:1f:0d:85:e5:69:89:ba:0c:9d:a0:c2:a4:
1c:8c:e2:8a:a8:ad:fa:cb:09:23:4d:f2:69:53:43:
6a:cc:52:eb:e4:17:38:f4:a6:9f:0b:45:ec:3a:6e:
95:5c:c2:d3:27:bc:0c:87:42:bc:6a:3f:67:eb:5e:
e5:09:8e:8b:70:dc:3e:e4:26:22:15:ad:fc:6f:c4:
a9:b4:ac:02:6c:96:5f:4c:20:eb:d1:2c:cb:1a:97:
61:86:0c:99:59:01:bd:19:f3:f0:73:d1:21:b6:c5:
d9:59:d4:f0:84:f9:63:04:ef:aa:be:96:8b:f7:27:
e4:22:b7:45:a9:58:6e:0e:bc:47:05:d1:a8:69:66:
d8:c7:82:34:1e:c1:78:43:80:01:b3:18:30:33:f0:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:7D:34:34:D4:82:5D:EF:0F:EE:6B:6C:85:9B:D0:86:CC:F4:0F
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bb:c1:d2:86:c0:63:7b:4e:7e:56:d8:6f:16:13:39:7b:70:
63:ea:9a:13:87:5b:cd:4c:5a:11:31:7b:44:e3:61:fa:32:48:
31:e2:c1:d3:00:a3:57:38:7f:48:65:1e:c0:16:64:5f:f4:d4:
e8:ed:0c:62:ab:41:66:91:32:17:7a:72:13:e9:c1:a5:7a:62:
c1:f6:92:8f:3c:7d:0f:12:17:2e:47:0d:97:bc:b5:95:04:63:
30:72:a9:96:25:4a:2c:8f:1e:1c:dd:9d:14:98:f0:53:09:75:
71:a7:a2:87:b5:f7:4d:43:b4:40:80:c3:e5:d4:4f:2f:0c:21:
6a:c5:ee:d2:f9:68:17:84:52:2b:60:08:2a:66:13:63:2c:fb:
70:95:79:44:f1:ed:8a:6e:9c:62:53:ff:2f:29:8e:17:38:44:
02:cf:1c:8a:cb:8f:6f:23:e0:9d:d9:a9:40:61:0e:eb:2d:42:
bc:46:e1:5f:24:e0:48:18:8c:f2:08:49:b1:46:e8:65:af:51:
a2:46:c0:a6:87:c2:88:b4:e2:47:ef:ff:e5:0e:f0:63:b9:53:
c7:96:dd:8f:0b:c9:8b:e4:13:80:d5:04:b3:5f:e6:2c:9d:fd:
5f:80:1f:aa:db:a9:3e:42:69:ea:c0:42:c9:1b:10:dd:c2:28:
ff:5b:36:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0FU9uysx5aQEsUuXrv7c2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmRkNzVmMmVmYzI0NGY4NmEzMjFiMTUwZTYyOTM2YTE0
MDI5ZGIwHhcNMjYwMzE5MDkwMTE0WhcNMjYwMzIwMDkwMTE0WjAzMTEwLwYDVQQD
EyhiMTU5N2QzNDM0ZDQ4MjVkZWYwZmVlNmI2Yzg1OWJkMDg2Y2NmNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1KaQ+CmvvtkrjE+gVDzDK/SdeJ
mgxgtw5mn8FytF4iEXaP3OU4MYdmw6uuxsUXXJ+g6RHN1hHw1LMW2iymwqNf++iq
L/nDm/AO5O76q5gXRRlXcH7qJJL1ZFm7VPLUwPB6NX7fkHuC11AfDYXlaYm6DJ2g
wqQcjOKKqK36ywkjTfJpU0NqzFLr5Bc49KafC0XsOm6VXMLTJ7wMh0K8aj9n617l
CY6LcNw+5CYiFa38b8SptKwCbJZfTCDr0SzLGpdhhgyZWQG9GfPwc9EhtsXZWdTw
hPljBO+qvpaL9yfkIrdFqVhuDrxHBdGoaWbYx4I0HsF4Q4ABsxgwM/Cl+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFZfTQ01IJd7w/ua2yFm9CGzPQPMB8GA1UdIwQY
MBaAFHe9118u/CRPhqMhsVDmKTahQCnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEt
MWRlZGJlN2I1YmFmLzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEtMWRlZGJlN2I1YmFm
LzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLvB0obA
Y3tOflbYbxYTOXtwY+qaE4dbzUxaETF7RONh+jJIMeLB0wCjVzh/SGUewBZkX/TU
6O0MYqtBZpEyF3pyE+nBpXpiwfaSjzx9DxIXLkcNl7y1lQRjMHKpliVKLI8eHN2d
FJjwUwl1caeih7X3TUO0QIDD5dRPLwwhasXu0vloF4RSK2AIKmYTYyz7cJV5RPHt
im6cYlP/LymOFzhEAs8cisuPbyPgndmpQGEO6y1CvEbhXyTgSBiM8ghJsUboZa9R
okbApofCiLTiR+//5Q7wY7lTx5bdjwvJi+QTgNUEs1/mLJ39X4AfqtupPkJp6sBC
yRsQ3cIo/1s2hQ==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:22 2026 by rpki-client