Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: A2hWuNw0ofmmgSCnaBt5pUz7Yk7/qM+V28ihAEOmx7c=
Subject key identifier: DD:4D:6A:17:F7:70:3D:A6:AD:9B:45:81:85:DB:66:3A:1C:6B:76:82
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019D3865519FC170E1AF116CB1EA98E8A634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 07BD
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: FrWPsdIanKr1Sodt-qzdiaAKot0.roa (hash: MgcORKrAyQmVC5QqwfE0RufXlOwwg9f/50Q+8d4fy2E=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: kDjD/TTIbNvkLwD2MqoI6X6Hluf+n7k44j9NpPzQlO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:51:9f:c1:70:e1:af:11:6c:b1:ea:98:e8:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=dd4d6a17f7703da6ad9b458185db663a1c6b7682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:33:82:0b:1f:4e:88:ff:d8:63:dc:52:7c:
6a:5c:c0:95:90:c8:f2:73:bd:d2:02:d5:ae:ad:28:
7d:0a:cc:25:e1:07:b3:0b:d2:c0:83:f8:d1:63:16:
d6:31:51:7a:7a:d5:5f:72:8e:88:41:64:ef:de:c5:
0f:8e:0e:af:39:41:99:00:1f:ed:97:28:39:b4:ae:
37:d5:03:7d:8b:45:cf:01:a8:35:3b:1f:cb:af:db:
96:07:91:a4:d2:17:d9:e7:c8:af:51:23:a0:d1:6a:
2e:f7:cb:02:1e:7f:34:ae:fd:47:0c:2e:a6:66:75:
d1:f2:48:91:ef:b9:c5:4b:56:b6:b3:11:73:3c:b4:
4f:3f:c0:97:aa:df:38:9d:8c:d7:04:81:84:f5:5a:
7d:16:1b:90:37:a1:ed:65:fc:36:c1:9d:0b:d1:da:
5d:f2:56:f2:98:e5:a6:9e:b3:54:28:ff:e9:94:d3:
01:f0:a3:4b:7f:48:1d:58:60:36:b6:b4:07:48:7a:
7d:13:92:8d:46:68:a2:95:e1:cf:d5:b5:8c:23:b9:
50:f2:f4:fa:7f:14:8e:a6:3d:74:13:34:5a:a9:bf:
af:7c:a9:cf:a8:3c:52:28:9f:6c:ed:fc:68:e3:19:
3c:b3:71:dc:40:fc:c0:fa:8f:f9:f0:5d:6f:1f:ad:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:6A:17:F7:70:3D:A6:AD:9B:45:81:85:DB:66:3A:1C:6B:76:82
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:73:b2:be:23:87:9e:f6:c3:e4:32:f7:65:9d:a5:7a:03:
34:ef:66:96:54:ea:a6:2c:df:30:b2:ee:fd:d7:78:f5:9f:5f:
87:99:c1:98:74:a2:67:04:69:4f:cf:70:73:66:72:18:23:4a:
7d:50:36:f2:00:02:0c:dd:e6:60:d4:df:99:e1:17:d0:75:88:
6a:81:5e:ab:05:4e:e7:4a:b4:d6:14:85:fe:bd:a2:c6:fa:5f:
86:5e:83:f2:8c:fd:9a:b0:69:d8:41:e2:f2:cd:82:6b:48:3d:
11:89:35:3a:b4:d8:a7:15:4a:dd:4e:43:f7:99:30:f2:18:09:
63:11:3a:c2:5a:98:fa:d8:16:80:0d:05:05:46:71:4c:02:bd:
fd:fa:32:e9:72:02:3f:ef:23:cc:e7:bb:dc:d8:fd:ea:a0:19:
18:73:1e:fe:9e:c5:bf:74:5a:7f:56:e0:b8:e4:6f:23:dd:0d:
9a:c3:5d:56:83:6a:45:23:67:40:20:79:28:94:b6:6b:c3:e2:
f2:7a:39:62:73:04:7d:30:f6:75:67:fc:80:41:3c:53:2f:9c:
fe:22:b7:0e:a0:b9:d2:42:04:28:1c:28:18:72:9c:91:30:b7:
7a:79:ac:bf:ba:80:d9:20:75:86:41:11:48:55:e9:9a:45:31:
e7:3c:b9:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVGfwXDhrxFsseqY6KY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl
MzgxMTQwHhcNMjYwMzI5MDcwMDU3WhcNMjYwMzMwMDcwMDU3WjAzMTEwLwYDVQQD
EyhkZDRkNmExN2Y3NzAzZGE2YWQ5YjQ1ODE4NWRiNjYzYTFjNmI3NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv38zggsfToj/2GPcUnxqXMCVkMjy
c73SAtWurSh9Cswl4QezC9LAg/jRYxbWMVF6etVfco6IQWTv3sUPjg6vOUGZAB/t
lyg5tK431QN9i0XPAag1Ox/Lr9uWB5Gk0hfZ58ivUSOg0Wou98sCHn80rv1HDC6m
ZnXR8kiR77nFS1a2sxFzPLRPP8CXqt84nYzXBIGE9Vp9FhuQN6HtZfw2wZ0L0dpd
8lbymOWmnrNUKP/plNMB8KNLf0gdWGA2trQHSHp9E5KNRmiileHP1bWMI7lQ8vT6
fxSOpj10EzRaqb+vfKnPqDxSKJ9s7fxo4xk8s3HcQPzA+o/58F1vH61GcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1Nahf3cD2mrZtFgYXbZjoca3aCMB8GA1UdIwQY
MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt
NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1
LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCNzsr4j
h572w+Qy92WdpXoDNO9mllTqpizfMLLu/dd49Z9fh5nBmHSiZwRpT89wc2ZyGCNK
fVA28gACDN3mYNTfmeEX0HWIaoFeqwVO50q01hSF/r2ixvpfhl6D8oz9mrBp2EHi
8s2Ca0g9EYk1OrTYpxVK3U5D95kw8hgJYxE6wlqY+tgWgA0FBUZxTAK9/foy6XIC
P+8jzOe73Nj96qAZGHMe/p7Fv3Raf1bguORvI90NmsNdVoNqRSNnQCB5KJS2a8Pi
8no5YnMEfTD2dWf8gEE8Uy+c/iK3DqC50kIEKBwoGHKckTC3enmsv7qA2SB1hkER
SFXpmkUx5zy59w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:55 2026 by rpki-client