Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: IPq6r9qudj7frHGunaTamt/XpcKwGlgdnP8tSpOMzco=
Subject key identifier: 9B:89:BA:6D:B1:93:B1:F2:02:22:07:03:51:61:3C:7C:9B:C3:EB:25
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019DCE65BD2DA7A64EAE8CD6926A08830784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 02
Signing time: Mon 27 Apr 2026 10:04:27 +0000
Manifest this update: Mon 27 Apr 2026 10:04:27 +0000
Manifest next update: Tue 28 Apr 2026 10:04:27 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: 2jmHnA4IaXfvwXS4/mJlcGUFOO7I/Oxih+cERHvRIYA=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:65:bd:2d:a7:a6:4e:ae:8c:d6:92:6a:08:83:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Apr 27 10:04:27 2026 GMT
Not After : Apr 28 10:04:27 2026 GMT
Subject: CN=9b89ba6db193b1f20222070351613c7c9bc3eb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:54:ba:1f:ae:86:1e:50:97:c2:d2:93:d8:
0f:34:ad:8b:dc:e3:79:cb:92:7d:52:fa:7e:b2:0a:
4a:b6:a6:3d:65:5e:b4:93:f8:e4:8a:89:45:46:b1:
78:13:e1:d6:02:5e:47:90:8f:94:7f:71:4d:39:6c:
2a:83:e6:a4:74:9c:2e:a1:b3:5d:88:e1:b8:5e:26:
32:90:75:24:74:cc:7c:32:2b:3f:30:5c:06:36:b7:
11:60:c1:b5:05:8e:9d:d3:91:30:57:3e:c6:79:59:
55:dc:95:bf:28:5f:24:6c:93:ce:9a:2c:30:2b:93:
fc:ef:e3:3b:e0:56:06:65:6f:ce:fe:cf:3f:33:96:
61:4e:7d:a5:82:73:57:52:ba:21:3f:52:ae:86:2f:
84:2c:58:39:83:f2:c5:3d:02:03:d7:fa:b5:02:73:
a5:eb:9e:2c:11:c7:7e:35:9b:7c:d0:44:80:a2:94:
5e:be:1e:9c:4b:65:22:2a:38:c4:e2:af:3a:aa:52:
d2:11:f6:6c:fd:33:86:59:22:c3:0c:98:81:f2:db:
62:c5:e7:b3:78:76:b6:86:9f:c9:f1:e9:68:fb:a9:
bf:86:2f:a7:ad:5d:75:58:c7:aa:e3:66:4c:f1:1a:
cb:c0:82:fd:5f:06:73:22:af:f3:bb:56:41:f2:f7:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:BA:6D:B1:93:B1:F2:02:22:07:03:51:61:3C:7C:9B:C3:EB:25
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:76:63:9d:ec:71:45:ec:fc:ee:72:6f:bd:30:e1:f0:3f:14:
98:53:c9:03:c6:13:89:53:6a:55:da:80:b4:7a:58:f9:ee:60:
53:6f:93:7b:50:a8:ff:a2:99:28:b3:ff:34:68:63:37:48:91:
1d:39:61:d1:ff:e0:74:47:fd:e0:b5:60:f6:8a:b3:d7:4e:b4:
38:0e:22:a9:18:f9:fc:8a:e7:e4:ab:47:59:e2:b3:cc:e4:25:
d7:43:b7:06:6e:93:02:6e:b7:79:30:dd:fe:99:66:50:40:d3:
a1:8f:3a:6e:cc:fe:51:f3:fd:2c:d5:8a:8f:23:87:28:a5:ce:
b6:c5:19:30:fa:28:02:8e:07:17:78:ec:b1:1b:45:01:63:e6:
95:3e:c1:fa:91:42:87:c6:e6:7f:e9:8f:c2:74:ab:fd:99:0a:
03:cb:a9:38:ec:8c:38:6d:89:1d:62:99:df:e9:f9:6c:52:6d:
70:a8:c2:2a:71:d4:d3:ba:d3:ad:48:a7:6c:be:ef:ea:a7:35:
98:15:29:ad:5a:b0:a4:55:5b:e0:1b:51:6c:dd:89:c5:c7:9f:
5a:20:99:9f:d6:fa:79:08:96:62:81:fc:47:a8:f3:e9:e5:8f:
2c:3c:df:47:42:b3:f0:f2:7d:41:a8:4e:7f:a5:fc:d1:16:55:
fe:8a:29:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OZb0tp6ZOrozWkmoIgweEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTNlNjBiZGE2NDY1ODQ4OGNlYTZhMzMwZjA1Yzc3NDlk
NWI5YzYwHhcNMjYwNDI3MTAwNDI3WhcNMjYwNDI4MTAwNDI3WjAzMTEwLwYDVQQD
Eyg5Yjg5YmE2ZGIxOTNiMWYyMDIyMjA3MDM1MTYxM2M3YzliYzNlYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kxUuh+uhh5Ql8LSk9gPNK2L3ON5
y5J9Uvp+sgpKtqY9ZV60k/jkiolFRrF4E+HWAl5HkI+Uf3FNOWwqg+akdJwuobNd
iOG4XiYykHUkdMx8Mis/MFwGNrcRYMG1BY6d05EwVz7GeVlV3JW/KF8kbJPOmiww
K5P87+M74FYGZW/O/s8/M5ZhTn2lgnNXUrohP1Kuhi+ELFg5g/LFPQID1/q1AnOl
654sEcd+NZt80ESAopRevh6cS2UiKjjE4q86qlLSEfZs/TOGWSLDDJiB8ttixeez
eHa2hp/J8elo+6m/hi+nrV11WMeq42ZM8RrLwIL9XwZzIq/zu1ZB8vel1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuJum2xk7HyAiIHA1FhPHybw+slMB8GA1UdIwQY
MBaAFA9T5gvaZGWEiM6mozDwXHdJ1bnGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQt
ZDc0NjM3MDA1YjJjLzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQtZDc0NjM3MDA1YjJj
LzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXZjnexx
Rez87nJvvTDh8D8UmFPJA8YTiVNqVdqAtHpY+e5gU2+Te1Co/6KZKLP/NGhjN0iR
HTlh0f/gdEf94LVg9oqz1060OA4iqRj5/Irn5KtHWeKzzOQl10O3Bm6TAm63eTDd
/plmUEDToY86bsz+UfP9LNWKjyOHKKXOtsUZMPooAo4HF3jssRtFAWPmlT7B+pFC
h8bmf+mPwnSr/ZkKA8upOOyMOG2JHWKZ3+n5bFJtcKjCKnHU07rTrUinbL7v6qc1
mBUprVqwpFVb4BtRbN2JxcefWiCZn9b6eQiWYoH8R6jz6eWPLDzfR0Kz8PJ9QahO
f6X80RZV/oopJg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:07:43 2026 by rpki-client