Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: NCG0uNBIatRgO7FW/2vVib9a/DJ3algHxvxz6FertpU=
Subject key identifier: DA:F0:8C:0C:8C:8C:F0:4C:7F:0A:AF:18:45:83:98:6C:07:BD:D2:26
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 019D378965D729E0921E61D5A9AF45F7F6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 042F
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: eU2t75Ap+mOsc/uidriaOuiASHGtxscDE2ykS6EbmD0=)
2: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (hash: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:65:d7:29:e0:92:1e:61:d5:a9:af:45:f7:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=daf08c0c8c8cf04c7f0aaf184583986c07bdd226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:ee:b5:39:03:a1:9b:06:dd:43:25:79:2e:
c6:af:24:88:23:af:24:28:8a:f1:38:89:74:5a:55:
0a:90:29:85:ad:c7:de:5d:e3:0d:e6:22:76:6b:a4:
29:fa:85:9d:be:ce:58:ca:b2:cd:e6:16:24:44:18:
db:bb:83:a5:db:55:c8:e8:c6:ff:36:36:58:6e:18:
f0:c6:fc:0e:e8:a5:33:be:2e:32:4d:0a:8e:d3:09:
33:b1:1d:79:81:7c:d9:84:62:69:05:62:3e:1f:25:
96:5f:5c:0e:cb:a7:bf:90:c2:76:38:17:ff:71:49:
74:35:01:45:57:b4:c0:ce:ee:9b:35:20:b3:0f:c2:
69:2b:e6:69:6f:1a:17:b7:27:11:18:fb:57:df:e5:
29:37:0b:84:6e:e0:b3:90:f4:8b:01:89:4f:d7:c4:
ca:87:a6:03:0c:8d:d7:4f:a9:ea:43:67:e6:34:53:
9e:18:80:56:06:b3:ec:50:b3:3e:66:5a:d5:d6:46:
31:7c:ef:ee:ff:0c:07:36:32:a2:c1:b6:4a:d9:5f:
98:03:e9:5e:a0:21:91:0e:e2:cf:74:01:fd:ee:02:
fd:1e:13:40:d7:ab:20:34:f6:1d:e5:13:e0:77:89:
5b:76:39:e9:f6:0c:9a:be:4b:b4:2c:04:c0:a0:f3:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:8C:0C:8C:8C:F0:4C:7F:0A:AF:18:45:83:98:6C:07:BD:D2:26
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:78:d2:0f:7f:2e:1d:df:a3:64:c8:5a:42:cf:02:38:4b:e4:
88:7d:74:c2:f1:a9:35:a7:9b:b1:cb:d3:74:95:45:4b:29:ea:
b3:80:87:c5:ef:6e:5c:d3:f4:c4:5a:af:f1:35:48:c0:84:64:
1b:21:8d:1d:0a:dd:cc:15:59:4b:df:11:da:c1:4d:93:fe:aa:
77:56:ba:b5:63:b8:5d:ac:49:d4:33:fa:a3:cf:de:0f:b1:c9:
5c:cd:64:4b:29:ff:76:d8:aa:eb:c6:eb:72:53:9c:af:b7:a3:
ad:df:6c:75:c7:35:b8:66:fd:97:ad:4b:0b:17:80:5a:4e:42:
2d:2c:33:7c:b1:31:bd:e0:48:3b:4c:5c:47:6d:9b:2a:44:1f:
d8:84:40:f1:26:ad:4a:a7:77:00:93:fc:0c:b5:90:6e:a7:dc:
07:61:bb:f6:87:0e:15:c9:3a:ce:8b:50:02:05:1f:49:83:46:
27:69:2a:ae:28:c2:a5:58:31:85:90:08:92:9b:71:e9:75:36:
8b:60:fb:12:8d:6a:8c:ad:f1:34:1f:9e:2c:b2:79:fb:f9:3a:
ae:1d:e8:41:33:6d:d3:70:a9:7b:c2:77:7d:04:5f:ea:9e:7e:
7b:65:41:18:47:70:28:ee:a0:90:05:69:b9:1c:b2:5b:01:9f:
98:ee:de:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWXXKeCSHmHVqa9F9/btMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm
MjZmNjUwHhcNMjYwMzI5MDMwMDQ0WhcNMjYwMzMwMDMwMDQ0WjAzMTEwLwYDVQQD
EyhkYWYwOGMwYzhjOGNmMDRjN2YwYWFmMTg0NTgzOTg2YzA3YmRkMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AjutTkDoZsG3UMleS7GrySII68k
KIrxOIl0WlUKkCmFrcfeXeMN5iJ2a6Qp+oWdvs5YyrLN5hYkRBjbu4Ol21XI6Mb/
NjZYbhjwxvwO6KUzvi4yTQqO0wkzsR15gXzZhGJpBWI+HyWWX1wOy6e/kMJ2OBf/
cUl0NQFFV7TAzu6bNSCzD8JpK+ZpbxoXtycRGPtX3+UpNwuEbuCzkPSLAYlP18TK
h6YDDI3XT6nqQ2fmNFOeGIBWBrPsULM+ZlrV1kYxfO/u/wwHNjKiwbZK2V+YA+le
oCGRDuLPdAH97gL9HhNA16sgNPYd5RPgd4lbdjnp9gyavku0LATAoPP/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrwjAyMjPBMfwqvGEWDmGwHvdImMB8GA1UdIwQY
MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt
YWZiNTAwYTQ0ODJhLzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh
LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHjSD38u
Hd+jZMhaQs8COEvkiH10wvGpNaebscvTdJVFSynqs4CHxe9uXNP0xFqv8TVIwIRk
GyGNHQrdzBVZS98R2sFNk/6qd1a6tWO4XaxJ1DP6o8/eD7HJXM1kSyn/dtiq68br
clOcr7ejrd9sdcc1uGb9l61LCxeAWk5CLSwzfLExveBIO0xcR22bKkQf2IRA8Sat
Sqd3AJP8DLWQbqfcB2G79ocOFck6zotQAgUfSYNGJ2kqrijCpVgxhZAIkptx6XU2
i2D7Eo1qjK3xNB+eLLJ5+/k6rh3oQTNt03Cpe8J3fQRf6p5+e2VBGEdwKO6gkAVp
uRyyWwGfmO7eKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:14 2026 by rpki-client