Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File: d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier: 29LSctwPgjqJzvskXmZZV1yIE8VPH0fHScFEaFDiUNk=
Subject key identifier: 2D:D3:27:E4:62:B8:63:83:5E:DA:F5:4F:56:03:B6:8E:3E:04:A9:6A
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer: /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial: 01A00213B6A8F3FAF03769AA3F3F3A62D3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number: 011B
Signing time: Fri 14 Aug 2026 21:00:41 +0000
Manifest this update: Fri 14 Aug 2026 21:00:41 +0000
Manifest next update: Sat 15 Aug 2026 21:00:41 +0000
Files and hashes: 1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: AHCQoXbpxDn+81kv8O60H7SeXUZnvSaxuxas3c3tf2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:b6:a8:f3:fa:f0:37:69:aa:3f:3f:3a:62:d3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
Validity
Not Before: Aug 14 21:00:41 2026 GMT
Not After : Aug 15 21:00:41 2026 GMT
Subject: CN=2dd327e462b863835edaf54f5603b68e3e04a96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:cd:6d:55:02:84:af:35:fa:72:7f:c2:3d:
ef:ce:9b:b2:39:d2:07:34:d9:16:9a:06:85:24:b7:
98:61:2a:bd:5d:c9:66:d6:7c:76:41:68:52:a4:ab:
12:2b:ff:44:e4:d4:eb:14:e5:f7:d0:05:14:9a:4d:
a2:2c:c0:c8:ce:9e:fd:6a:37:92:ce:44:56:5d:d7:
69:2f:cf:d8:e7:6c:06:b6:03:7e:19:22:4e:18:d9:
55:b5:6c:a9:d8:13:64:37:48:b4:85:2f:9f:80:19:
97:6e:37:fd:20:b6:20:7a:0d:56:5b:d9:2f:69:e2:
94:1c:f0:70:19:17:a5:51:3e:f8:9d:22:9d:65:2f:
b1:ae:52:07:4a:45:e3:42:ab:0f:05:06:eb:83:c0:
be:b0:e4:f7:33:21:a4:0e:9e:fa:7b:83:d3:1d:79:
3f:ee:ac:c0:13:7b:83:b5:6a:5b:e9:5e:c9:78:56:
f7:17:53:e8:a6:26:77:fb:c8:4a:b6:ec:ef:c2:40:
f6:1a:7a:1a:3c:f9:ed:89:cc:f0:50:77:76:80:9d:
a7:33:13:82:6e:04:62:df:b8:3e:5a:d5:99:92:ef:
ae:6d:f8:56:7f:9c:d2:72:51:1f:c7:7c:1a:a8:41:
68:42:51:7d:81:10:e9:69:b0:fb:45:99:23:88:25:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D3:27:E4:62:B8:63:83:5E:DA:F5:4F:56:03:B6:8E:3E:04:A9:6A
X509v3 Authority Key Identifier:
keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1a:fc:e8:5b:ff:59:54:87:9d:97:ca:8b:6a:20:29:4d:cb:
23:49:ca:f2:33:6a:6e:66:ce:e7:83:9c:f4:42:af:df:a5:7c:
05:f1:2b:f3:8e:c3:6d:71:21:d4:0d:83:7e:2e:a7:d8:a0:b7:
af:f1:bf:dd:df:86:0a:b2:5f:c2:f2:4b:5c:36:49:52:51:1b:
85:72:85:39:13:51:5f:18:31:30:c5:e5:cc:44:9e:40:17:36:
11:cf:59:3d:3a:e6:63:e8:f1:a5:ba:1f:96:ec:3c:e7:5f:05:
6f:27:19:87:bf:a9:e9:2a:dd:dd:9a:37:9e:67:d9:90:1f:46:
cd:51:9d:fb:1e:59:49:c4:dd:7a:be:8c:f3:d5:aa:23:2b:58:
7f:34:41:56:dc:67:1c:3c:f4:e7:28:bd:54:b4:c5:04:f5:08:
4e:f7:c9:86:ef:ec:ef:76:13:38:be:cb:af:9d:9d:e6:40:dd:
90:5a:0f:76:d2:6f:da:16:8c:b3:3a:79:cc:08:52:fa:93:8a:
0e:45:7a:22:6d:f4:17:0e:17:bb:03:38:ff:bb:49:f0:d4:e2:
2b:19:0e:7c:5a:13:c5:52:ba:62:2d:55:eb:d8:d2:e5:97:8c:
47:91:56:a4:f7:c5:4c:18:55:d2:0f:93:94:b8:89:fb:cc:6a:
47:9d:2f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE7ao8/rwN2mqPz86YtPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODUzN2JkY2IzNTMyMGM3OGQ1OTgxOWE1MGIzNjFlYjk1
ODIwYjcwHhcNMjYwODE0MjEwMDQxWhcNMjYwODE1MjEwMDQxWjAzMTEwLwYDVQQD
EygyZGQzMjdlNDYyYjg2MzgzNWVkYWY1NGY1NjAzYjY4ZTNlMDRhOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiDNbVUChK81+nJ/wj3vzpuyOdIH
NNkWmgaFJLeYYSq9Xclm1nx2QWhSpKsSK/9E5NTrFOX30AUUmk2iLMDIzp79ajeS
zkRWXddpL8/Y52wGtgN+GSJOGNlVtWyp2BNkN0i0hS+fgBmXbjf9ILYgeg1WW9kv
aeKUHPBwGRelUT74nSKdZS+xrlIHSkXjQqsPBQbrg8C+sOT3MyGkDp76e4PTHXk/
7qzAE3uDtWpb6V7JeFb3F1PopiZ3+8hKtuzvwkD2GnoaPPnticzwUHd2gJ2nMxOC
bgRi37g+WtWZku+ubfhWf5zSclEfx3waqEFoQlF9gRDpabD7RZkjiCULIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3TJ+RiuGODXtr1T1YDto4+BKlqMB8GA1UdIwQY
MBaAFHeFN73LNTIMeNWYGaULNh65WCC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRVM3ZjczFNZ3g0MVpnWnBRczJIcmxZSUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kNWQxY2QtMDAyNy00MGFmLTgxOWYt
ODNhMjJhNGZhYTRmLzEvZDRVM3ZjczFNZ3g0MVpnWnBRczJIcmxZSUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kNWQxY2QtMDAyNy00MGFmLTgxOWYtODNhMjJhNGZhYTRm
LzEvZDRVM3ZjczFNZ3g0MVpnWnBRczJIcmxZSUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhr86Fv/
WVSHnZfKi2ogKU3LI0nK8jNqbmbO54Oc9EKv36V8BfEr847DbXEh1A2Dfi6n2KC3
r/G/3d+GCrJfwvJLXDZJUlEbhXKFORNRXxgxMMXlzESeQBc2Ec9ZPTrmY+jxpbof
luw8518FbycZh7+p6Srd3Zo3nmfZkB9GzVGd+x5ZScTder6M89WqIytYfzRBVtxn
HDz05yi9VLTFBPUITvfJhu/s73YTOL7Lr52d5kDdkFoPdtJv2haMszp5zAhS+pOK
DkV6Im30Fw4XuwM4/7tJ8NTiKxkOfFoTxVK6Yi1V69jS5ZeMR5FWpPfFTBhV0g+T
lLiJ+8xqR50v5w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:37 2026 by rpki-client