Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: NL4IWtGVvni3z7hSf9ET2Pq3tzH0IkAdlyA1A5pCjn8=
Subject key identifier: A8:63:8B:8A:DE:0B:D1:F7:7E:33:08:15:74:17:23:24:A8:A3:C9:7D
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019CEC021A1058FC136B5605AC6FFC783727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1331
Signing time: Sat 14 Mar 2026 11:01:26 +0000
Manifest this update: Sat 14 Mar 2026 11:01:26 +0000
Manifest next update: Sun 15 Mar 2026 11:01:26 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: Xb+Ig3wIo99BBNmYYZjVJ9q7QPgr7y0FNJDTlPgDhKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:02:1a:10:58:fc:13:6b:56:05:ac:6f:fc:78:37:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Mar 14 11:01:26 2026 GMT
Not After : Mar 15 11:01:26 2026 GMT
Subject: CN=a8638b8ade0bd1f77e33081574172324a8a3c97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:4c:38:da:04:df:2e:8f:36:cd:fa:a0:47:
6a:fd:2c:7f:12:30:41:9c:aa:ef:83:29:da:eb:6c:
b9:9d:11:ed:37:02:3e:27:05:21:48:7a:0e:69:bd:
6d:2a:c0:74:8a:8e:d4:56:b7:a7:cd:bd:47:df:f5:
00:a1:95:17:d9:2a:9c:bf:d6:35:c1:a6:4e:16:9b:
ba:ac:50:a1:4a:51:3e:98:c6:d0:2a:4c:4d:a0:91:
b3:a5:14:ac:0e:3a:13:a6:26:c9:7b:7e:f6:24:9f:
97:f6:83:8e:31:18:f9:bb:10:b2:03:1e:49:da:4f:
64:56:8e:9a:08:da:c3:f7:66:be:4d:73:14:c4:dd:
89:6a:33:ad:3d:96:81:8e:a9:d0:4e:8f:e7:6b:c5:
d5:68:cb:01:bc:e7:90:ce:2b:49:a5:d6:cd:b6:68:
f9:8e:e0:6b:41:b8:c3:c2:8a:9f:24:ea:5c:30:ff:
87:fe:35:b3:f6:73:43:25:16:a2:b3:be:30:fb:7f:
f6:5c:d5:44:e2:ea:a4:f5:e4:72:90:55:9c:48:db:
b0:e2:21:be:04:87:b4:30:08:bc:c7:60:c8:ec:ae:
94:4a:26:cb:eb:36:8d:6b:93:df:80:d2:39:05:d6:
d5:f3:41:bb:24:c4:1b:ec:60:8b:2a:83:1e:9e:a0:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:8B:8A:DE:0B:D1:F7:7E:33:08:15:74:17:23:24:A8:A3:C9:7D
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:41:fb:55:7b:80:35:4c:62:fd:8b:aa:6c:ac:05:b5:a5:
83:a9:38:61:b9:f2:8c:55:7e:32:83:e9:e6:1c:6d:a9:1d:04:
8e:e3:e1:ac:a7:a0:c7:59:69:eb:f8:e8:83:bd:a8:20:dd:d8:
d1:7a:8e:93:c3:75:4d:9f:3d:a4:c6:f9:e6:76:4e:b2:dd:4e:
ab:5c:7b:fb:d1:d6:b6:9c:43:c6:ab:0c:69:cd:fa:46:fc:be:
74:ee:ae:b1:04:08:07:7e:a4:cb:a0:9d:47:7f:96:bc:81:59:
6b:9d:a4:32:47:58:51:d4:f0:14:6e:0e:12:f2:3f:98:2e:7e:
65:18:03:e9:c1:1c:38:01:ea:d4:ec:96:82:6c:7e:d1:37:d8:
29:ae:eb:37:da:fc:55:eb:b2:ef:70:b8:bb:98:d7:8b:cb:f2:
f8:be:60:5f:dc:9e:da:e6:44:7d:df:6b:ad:75:ce:2e:c2:c8:
18:2b:89:16:f4:3f:29:c6:d0:d9:6e:46:b5:96:4b:98:8d:ee:
e2:54:5f:fe:38:6a:85:a3:f8:2c:b6:12:ea:54:bf:d7:6f:1d:
1c:c1:70:12:6c:a2:29:87:b8:14:56:68:d7:e7:74:ee:af:7c:
99:2d:3c:8f:42:e2:5c:44:0e:a1:d5:21:23:39:02:8c:ef:91:
bf:1b:63:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsAhoQWPwTa1YFrG/8eDcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwMzE0MTEwMTI2WhcNMjYwMzE1MTEwMTI2WjAzMTEwLwYDVQQD
EyhhODYzOGI4YWRlMGJkMWY3N2UzMzA4MTU3NDE3MjMyNGE4YTNjOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAostMONoE3y6PNs36oEdq/Sx/EjBB
nKrvgyna62y5nRHtNwI+JwUhSHoOab1tKsB0io7UVrenzb1H3/UAoZUX2Sqcv9Y1
waZOFpu6rFChSlE+mMbQKkxNoJGzpRSsDjoTpibJe372JJ+X9oOOMRj5uxCyAx5J
2k9kVo6aCNrD92a+TXMUxN2JajOtPZaBjqnQTo/na8XVaMsBvOeQzitJpdbNtmj5
juBrQbjDwoqfJOpcMP+H/jWz9nNDJRais74w+3/2XNVE4uqk9eRykFWcSNuw4iG+
BIe0MAi8x2DI7K6USibL6zaNa5PfgNI5BdbV80G7JMQb7GCLKoMenqAgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhji4reC9H3fjMIFXQXIySoo8l9MB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONpB+1V7
gDVMYv2LqmysBbWlg6k4YbnyjFV+MoPp5hxtqR0EjuPhrKegx1lp6/jog72oIN3Y
0XqOk8N1TZ89pMb55nZOst1Oq1x7+9HWtpxDxqsMac36Rvy+dO6usQQIB36ky6Cd
R3+WvIFZa52kMkdYUdTwFG4OEvI/mC5+ZRgD6cEcOAHq1OyWgmx+0TfYKa7rN9r8
Veuy73C4u5jXi8vy+L5gX9ye2uZEfd9rrXXOLsLIGCuJFvQ/KcbQ2W5GtZZLmI3u
4lRf/jhqhaP4LLYS6lS/128dHMFwEmyiKYe4FFZo1+d07q98mS08j0LiXEQOodUh
IzkCjO+RvxtjUg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:11:07 2026 by rpki-client