Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: oef4pWVTnimFEXWfz3BC5YhK/U/xdPlXNj4L+tPeUkY=
Subject key identifier: 76:22:2D:91:E7:D1:77:08:4F:F0:51:DF:FA:0C:9C:13:D5:04:DB:8F
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019D382E46A2EA74AB7A4EF55C6FA06DA24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0B5A
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: 1P9K1WDYnwZOTF/vSYX+MGPJONTT8KVxT+4MoFdOng8=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:46:a2:ea:74:ab:7a:4e:f5:5c:6f:a0:6d:a2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=76222d91e7d177084ff051dffa0c9c13d504db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:df:d3:19:1a:31:bc:93:c5:52:e3:6a:21:
ae:9e:10:6d:ba:eb:85:f5:e6:ea:fe:51:59:00:07:
68:ec:7d:99:be:3c:8e:ea:61:1a:4a:37:a6:d6:b7:
94:df:04:07:5d:08:0a:7b:b2:82:4f:f1:9e:c8:ac:
06:64:60:59:7e:20:43:d5:2d:f8:11:e4:19:04:6d:
ca:51:72:81:93:79:68:53:7d:ce:ee:b4:35:60:0b:
86:03:da:af:fc:07:7a:fc:3e:ee:e0:41:15:d2:53:
85:ee:54:cc:a6:dc:76:7a:3b:b5:f8:42:de:02:da:
4f:cc:39:eb:59:f2:57:2e:18:a3:a2:29:c0:fe:70:
e4:d8:e2:69:ab:d7:da:d8:74:1e:47:6e:48:71:d7:
86:48:91:10:36:cb:cb:9c:1b:4f:d3:bd:ad:15:9d:
38:32:99:c4:0e:75:09:9d:f9:b7:d5:9e:29:3e:e3:
72:15:f9:2a:f6:77:2f:43:19:fb:2f:10:01:62:1e:
d0:72:45:1d:92:bf:c1:b9:64:33:55:96:c3:08:d2:
13:6b:14:92:ca:2f:70:57:e8:f5:50:f4:5f:30:07:
4d:ca:98:ae:9b:b6:e9:4e:a7:f4:2d:64:d3:e7:08:
f5:d8:ba:02:c5:29:46:39:7f:1b:b1:42:52:67:70:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:2D:91:E7:D1:77:08:4F:F0:51:DF:FA:0C:9C:13:D5:04:DB:8F
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:a1:a8:87:8f:e9:f6:e6:bd:d9:41:83:79:a6:dc:a6:0b:
d0:e3:f7:00:0d:0c:d2:4e:40:58:18:9e:16:57:81:e6:e3:a6:
f1:8a:73:fb:28:48:db:64:0d:b8:c7:57:eb:2a:96:4b:38:94:
54:80:65:4a:34:71:24:b4:33:5c:07:ff:db:b4:30:e6:b7:da:
d9:0c:34:17:24:49:05:7c:50:4d:13:cf:68:6a:ec:32:58:b7:
61:e2:d7:3d:f2:72:61:a0:70:c0:ff:5e:03:1e:c2:3a:ca:5a:
f2:45:91:2c:7d:79:3a:d7:7b:84:6e:15:05:d5:f3:df:93:a5:
8b:76:45:dc:ee:16:87:cd:c2:84:e7:3f:1c:eb:f5:0d:1f:16:
3d:c3:1d:e2:88:4f:dc:bf:67:ed:cc:88:b5:80:60:e4:e4:b8:
60:fe:b8:b0:fd:a2:c0:80:f0:33:d9:b5:bb:5f:52:e9:af:4d:
2e:8a:a1:c6:30:09:2a:bb:db:8b:44:e7:f8:c1:ca:ef:cc:12:
48:1d:3c:50:02:ab:aa:4d:a6:fc:c8:09:c9:c5:a0:6a:5e:80:
fa:ce:eb:22:15:15:92:4e:92:bf:f7:22:9f:0e:09:33:bb:0e:
39:3f:ec:58:0e:b9:6b:c9:e9:db:d0:2e:45:64:d9:f8:e6:1a:
f4:4b:2c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lkai6nSrek71XG+gbaJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjYwMzI5MDYwMDQ5WhcNMjYwMzMwMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg3NjIyMmQ5MWU3ZDE3NzA4NGZmMDUxZGZmYTBjOWMxM2Q1MDRkYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U/f0xkaMbyTxVLjaiGunhBtuuuF
9ebq/lFZAAdo7H2ZvjyO6mEaSjem1reU3wQHXQgKe7KCT/GeyKwGZGBZfiBD1S34
EeQZBG3KUXKBk3loU33O7rQ1YAuGA9qv/Ad6/D7u4EEV0lOF7lTMptx2eju1+ELe
AtpPzDnrWfJXLhijoinA/nDk2OJpq9fa2HQeR25IcdeGSJEQNsvLnBtP072tFZ04
MpnEDnUJnfm31Z4pPuNyFfkq9ncvQxn7LxABYh7QckUdkr/BuWQzVZbDCNITaxSS
yi9wV+j1UPRfMAdNypium7bpTqf0LWTT5wj12LoCxSlGOX8bsUJSZ3BZ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYiLZHn0XcIT/BR3/oMnBPVBNuPMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg2hqIeP
6fbmvdlBg3mm3KYL0OP3AA0M0k5AWBieFleB5uOm8Ypz+yhI22QNuMdX6yqWSziU
VIBlSjRxJLQzXAf/27Qw5rfa2Qw0FyRJBXxQTRPPaGrsMli3YeLXPfJyYaBwwP9e
Ax7COspa8kWRLH15Otd7hG4VBdXz35Oli3ZF3O4Wh83ChOc/HOv1DR8WPcMd4ohP
3L9n7cyItYBg5OS4YP64sP2iwIDwM9m1u19S6a9NLoqhxjAJKrvbi0Tn+MHK78wS
SB08UAKrqk2m/MgJycWgal6A+s7rIhUVkk6Sv/cinw4JM7sOOT/sWA65a8np29Au
RWTZ+OYa9EssIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:20 2026 by rpki-client