Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: PkDgK+kXpyQv/kbbUid+wT9pzqvdzB76/vp8X2FxFGI=
Subject key identifier: CF:49:EA:32:C7:5A:AD:AF:1F:F7:97:D6:29:DA:F9:33:C2:F1:93:A1
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019D39781D5A581645CC8651F81A16A690C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 05F7
Signing time: Sun 29 Mar 2026 12:01:06 +0000
Manifest this update: Sun 29 Mar 2026 12:01:06 +0000
Manifest next update: Mon 30 Mar 2026 12:01:06 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: EvY0kMD01csvRy3ZnbBbN9tLhEHzpweVSYIRbXRwtsE=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1d:5a:58:16:45:cc:86:51:f8:1a:16:a6:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Mar 29 12:01:06 2026 GMT
Not After : Mar 30 12:01:06 2026 GMT
Subject: CN=cf49ea32c75aadaf1ff797d629daf933c2f193a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:90:03:6e:74:f1:fb:bb:20:ad:ba:98:e5:
5a:15:68:74:8e:c1:dc:cd:cd:37:eb:ca:7c:aa:06:
4b:be:72:30:1f:7f:8c:ae:31:0b:22:18:37:e5:56:
f6:34:c3:1b:c9:e9:33:16:e3:b4:ee:98:2f:85:fe:
c8:30:af:ad:5c:88:f9:0f:84:16:af:87:88:49:4c:
7d:f7:b4:fc:e5:2e:a1:da:df:fa:52:be:50:31:47:
ca:b7:80:4d:59:3e:f2:26:29:29:98:3b:59:cd:60:
88:82:94:bb:0e:c0:1f:95:e7:21:82:91:58:39:25:
70:94:8c:f3:36:bb:a9:22:9e:8f:63:6e:ee:e2:95:
11:3f:04:e9:26:22:e0:0f:3c:db:c6:94:87:92:7b:
06:ed:69:d5:e3:f9:d5:aa:33:af:ab:3c:4e:d6:e7:
4a:cb:76:3b:b5:b5:16:e2:60:c4:d0:c4:c2:f9:e7:
76:62:5c:78:8a:b3:e7:90:a1:ec:e8:08:80:31:ef:
2a:2e:40:0f:12:da:08:63:4c:30:b3:e5:02:a0:ea:
00:c7:16:58:59:75:d2:07:a4:20:45:69:7c:70:fe:
f3:ce:5e:ef:64:60:47:40:90:6b:b9:ca:33:91:69:
32:13:7c:5e:17:66:85:1d:8c:36:59:f0:88:24:f5:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:EA:32:C7:5A:AD:AF:1F:F7:97:D6:29:DA:F9:33:C2:F1:93:A1
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b8:ee:d3:95:91:35:96:58:2e:cd:3d:bb:9b:6a:f0:fe:50:
ad:0b:7b:73:4b:3f:5a:75:86:20:70:bf:17:62:2a:b8:62:5d:
d4:6a:4e:44:78:63:c3:c2:fb:bf:51:2b:12:87:a6:0d:df:62:
8b:7d:22:a4:3f:47:7b:74:f1:4f:9e:47:24:76:2a:c4:8c:eb:
88:dd:55:e4:45:73:10:ac:99:39:ac:5b:7a:ee:d5:d1:3c:85:
d2:ce:31:6a:ca:6b:6a:40:ab:e5:9a:2b:39:24:11:2b:de:69:
9f:f2:5f:44:a2:31:f0:82:7b:3d:52:93:5f:74:fb:dd:a0:67:
fd:be:be:b0:3a:dd:4c:a2:18:7f:f3:58:c0:24:23:47:6b:09:
e9:3f:5f:4d:73:bb:51:d6:b8:fd:2c:75:08:b1:b7:1f:96:d8:
08:4a:4a:0e:ec:64:07:43:5a:fb:74:6b:a4:b3:ac:2b:62:d0:
89:b0:00:7a:97:c1:9a:6a:90:94:05:b0:2e:f0:72:08:3a:39:
c7:65:71:94:f5:52:65:7c:38:35:af:f5:94:54:9b:4b:64:95:
f6:14:be:24:84:03:74:98:9a:b4:54:c0:01:cc:3c:20:e0:a8:
9d:c5:e7:29:d6:be:ad:ad:c3:c4:11:52:a1:94:d0:c5:c6:6f:
3e:ed:c5:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eB1aWBZFzIZR+BoWppDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx
OTE2ZDEwHhcNMjYwMzI5MTIwMTA2WhcNMjYwMzMwMTIwMTA2WjAzMTEwLwYDVQQD
EyhjZjQ5ZWEzMmM3NWFhZGFmMWZmNzk3ZDYyOWRhZjkzM2MyZjE5M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HKQA2508fu7IK26mOVaFWh0jsHc
zc0368p8qgZLvnIwH3+MrjELIhg35Vb2NMMbyekzFuO07pgvhf7IMK+tXIj5D4QW
r4eISUx997T85S6h2t/6Ur5QMUfKt4BNWT7yJikpmDtZzWCIgpS7DsAflechgpFY
OSVwlIzzNrupIp6PY27u4pURPwTpJiLgDzzbxpSHknsG7WnV4/nVqjOvqzxO1udK
y3Y7tbUW4mDE0MTC+ed2Ylx4irPnkKHs6AiAMe8qLkAPEtoIY0wws+UCoOoAxxZY
WXXSB6QgRWl8cP7zzl7vZGBHQJBrucozkWkyE3xeF2aFHYw2WfCIJPWHdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9J6jLHWq2vH/eX1ina+TPC8ZOhMB8GA1UdIwQY
MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt
YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3
LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarju05WR
NZZYLs09u5tq8P5QrQt7c0s/WnWGIHC/F2IquGJd1GpORHhjw8L7v1ErEoemDd9i
i30ipD9He3TxT55HJHYqxIzriN1V5EVzEKyZOaxbeu7V0TyF0s4xasprakCr5Zor
OSQRK95pn/JfRKIx8IJ7PVKTX3T73aBn/b6+sDrdTKIYf/NYwCQjR2sJ6T9fTXO7
Uda4/Sx1CLG3H5bYCEpKDuxkB0Na+3RrpLOsK2LQibAAepfBmmqQlAWwLvByCDo5
x2VxlPVSZXw4Na/1lFSbS2SV9hS+JIQDdJiatFTAAcw8IOConcXnKda+ra3DxBFS
oZTQxcZvPu3Fkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:45 2026 by rpki-client