Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
File: d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json)
Hash identifier: JCkmAYChNv7pTEa5MdWVar3kjNFQdLK0TBzwt05OKl8=
Subject key identifier: 20:76:E9:B7:4E:42:5F:89:27:D8:37:CF:47:B9:6F:75:CD:D8:FD:90
Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Certificate serial: 019D389C02FB10C15AB2ADD78CD24D9B71FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
Manifest number: 0277
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: coMp5dOgndLahx2iTGXfIJ8yLLE.roa (hash: q4LCC/e7DOJLCRD77MYpRDtHZ3bvIBYyvXX9RO1rrD8=)
2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: HDEXbl8gOcFZDluPQK5MA7w7WtFONgKRBl28IXyn0SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:02:fb:10:c1:5a:b2:ad:d7:8c:d2:4d:9b:71:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=2076e9b74e425f8927d837cf47b96f75cdd8fd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:30:0a:45:b0:e2:7a:c6:12:14:3c:50:82:
d0:8e:30:86:2b:88:80:bc:d0:b1:cf:ed:7f:80:f8:
72:d3:4a:1a:74:23:58:f6:38:ad:8f:36:d5:c7:90:
2e:b0:f8:9d:58:5f:08:6b:c5:64:ab:94:4a:35:76:
05:03:82:8a:d4:8c:99:ef:76:56:28:dc:37:c0:c9:
9c:3b:87:22:37:4a:6d:59:b4:2f:f0:b0:82:84:34:
db:af:42:04:f5:9e:33:1c:a0:c5:70:a1:03:04:68:
0b:9f:d8:b5:a6:11:b9:15:3f:82:85:ea:36:54:f9:
00:0f:54:10:6f:be:4c:50:98:22:97:fe:e0:fa:e7:
86:cc:39:e2:2e:51:64:b2:f2:54:e8:c1:84:1c:e3:
36:f7:45:6a:f1:43:f3:03:6c:64:07:ba:b6:9a:77:
67:cd:c0:2f:b5:f1:e9:c8:91:63:7c:8a:13:0e:91:
b2:23:f5:c1:d7:f4:41:2b:3c:fa:21:25:68:5a:b1:
72:6d:59:0c:fc:49:1a:73:0f:f7:74:02:a1:c5:b6:
0a:e2:c1:4a:90:29:f1:10:ef:1a:2c:c8:2b:e2:cd:
7c:4b:8d:3b:53:e6:63:22:d6:88:10:83:6b:ee:c3:
94:52:44:0e:e9:ac:c4:c4:76:e6:5a:7b:ce:35:81:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:E9:B7:4E:42:5F:89:27:D8:37:CF:47:B9:6F:75:CD:D8:FD:90
X509v3 Authority Key Identifier:
keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:a0:6f:ef:c5:a4:02:1a:cb:38:9e:45:30:78:d1:68:59:
e3:f6:e2:a1:fb:80:49:a6:be:e3:ef:22:af:8e:3c:fc:5e:45:
41:95:45:b7:7e:40:b8:a0:d3:47:52:43:af:90:85:1b:38:57:
52:05:38:ea:5c:0f:19:03:a5:2d:d9:7b:0a:4a:cd:94:91:38:
0d:66:d5:1f:78:d8:68:0b:6d:c3:b4:1a:95:52:47:19:78:77:
bb:1a:19:1b:35:e9:ca:b9:14:2b:9e:d7:f4:a6:b2:5d:c8:3f:
50:31:64:d7:53:1d:84:af:86:44:cc:83:d2:25:14:69:32:43:
ba:13:c8:b3:2a:04:37:8b:90:13:b1:58:12:c8:19:8a:71:41:
c9:44:25:08:5f:73:30:f6:71:eb:71:20:d7:2e:1b:f0:68:65:
00:15:8c:1c:ec:d6:65:59:4a:b5:67:f6:54:ca:d0:19:b1:fa:
42:8a:62:3f:a2:f3:c8:c7:01:ad:6c:f0:88:b7:bb:ce:73:62:
ec:ae:f9:4e:40:52:57:b2:24:63:98:24:19:21:b2:b0:91:50:
5a:29:d1:ac:dd:82:ca:b3:79:07:35:06:f6:8c:5e:35:6f:21:
b9:90:c1:5d:3d:99:b4:43:cc:e6:90:9d:07:90:0c:0a:08:87:
f2:4f:1e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAL7EMFasq3XjNJNm3H6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTJmZjQ2ODlkNDIxMzUwZjc2YTM3M2JjMTE5M2U0NTFi
ODFlZjUwHhcNMjYwMzI5MDgwMDQxWhcNMjYwMzMwMDgwMDQxWjAzMTEwLwYDVQQD
EygyMDc2ZTliNzRlNDI1Zjg5MjdkODM3Y2Y0N2I5NmY3NWNkZDhmZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zAwCkWw4nrGEhQ8UILQjjCGK4iA
vNCxz+1/gPhy00oadCNY9jitjzbVx5AusPidWF8Ia8Vkq5RKNXYFA4KK1IyZ73ZW
KNw3wMmcO4ciN0ptWbQv8LCChDTbr0IE9Z4zHKDFcKEDBGgLn9i1phG5FT+Cheo2
VPkAD1QQb75MUJgil/7g+ueGzDniLlFksvJU6MGEHOM290Vq8UPzA2xkB7q2mndn
zcAvtfHpyJFjfIoTDpGyI/XB1/RBKzz6ISVoWrFybVkM/Ekacw/3dAKhxbYK4sFK
kCnxEO8aLMgr4s18S407U+ZjItaIEINr7sOUUkQO6azExHbmWnvONYGEOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB26bdOQl+JJ9g3z0e5b3XN2P2QMB8GA1UdIwQY
MBaAFHfi/0aJ1CE1D3ajc7wRk+RRuB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAt
NTQ0NmQ4NmJjZmM2LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAtNTQ0NmQ4NmJjZmM2
LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIigb+/F
pAIayzieRTB40WhZ4/biofuASaa+4+8ir448/F5FQZVFt35AuKDTR1JDr5CFGzhX
UgU46lwPGQOlLdl7CkrNlJE4DWbVH3jYaAttw7QalVJHGXh3uxoZGzXpyrkUK57X
9KayXcg/UDFk11MdhK+GRMyD0iUUaTJDuhPIsyoEN4uQE7FYEsgZinFByUQlCF9z
MPZx63Eg1y4b8GhlABWMHOzWZVlKtWf2VMrQGbH6QopiP6LzyMcBrWzwiLe7znNi
7K75TkBSV7IkY5gkGSGysJFQWinRrN2CyrN5BzUG9oxeNW8huZDBXT2ZtEPM5pCd
B5AMCgiH8k8exA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:55 2026 by rpki-client