Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: NfrBNDNIVyrzeAPxYj4/gfsH71xPVzb5ut9E4daez6w=
Subject key identifier: 61:D7:1E:7A:6C:01:D2:34:66:B9:1A:B7:58:B8:72:B7:C5:3F:32:0F
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 019D371B80C4115FBAD0559A08E1E6E06E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 0690
Signing time: Sun 29 Mar 2026 01:00:42 +0000
Manifest this update: Sun 29 Mar 2026 01:00:42 +0000
Manifest next update: Mon 30 Mar 2026 01:00:42 +0000
Files and hashes: 1: Zgdla8WpljXwuiMywIAE2FoIesw.roa (hash: FyzW8LxvYeY4vlB6mW6T6bkS1rwFxCcKZpG6s/QT25o=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: KlJrb0ekBiYJE6/BjpOLBtjWHm2VYI8TflqHJRgY2Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:80:c4:11:5f:ba:d0:55:9a:08:e1:e6:e0:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Mar 29 01:00:42 2026 GMT
Not After : Mar 30 01:00:42 2026 GMT
Subject: CN=61d71e7a6c01d23466b91ab758b872b7c53f320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:54:a2:31:82:d9:3c:56:71:d2:59:24:70:
27:cb:d0:19:42:e3:75:2d:4b:f9:71:cf:cb:ee:31:
fe:56:2d:29:8c:95:08:92:97:2c:00:bf:19:95:22:
d4:c5:ef:bc:a1:11:86:41:3b:6d:23:c8:d3:c8:57:
58:53:fe:14:39:3a:a4:8b:9d:0f:15:b0:f2:1a:6f:
11:88:c3:6b:9d:44:2e:90:d9:d9:c8:2f:73:3d:38:
97:4c:63:79:95:79:6d:3b:b2:2c:db:f1:c3:bb:50:
a9:63:c0:c7:a4:6c:2a:88:07:b4:e7:fb:98:37:d8:
0f:dd:55:a4:8c:6d:25:95:4e:01:0f:ad:e1:cf:92:
61:56:9e:d8:ab:8a:3e:f3:db:b4:af:cd:e4:3d:d9:
8f:2b:3f:44:a2:de:07:b4:a5:49:cd:85:f8:3a:4d:
08:f2:1d:36:b8:d2:f0:57:69:4b:40:dc:40:b6:75:
f2:fd:76:c2:a0:97:8a:c8:88:33:65:e2:29:10:5a:
6a:e0:ee:48:de:a2:04:34:44:01:9f:46:ba:19:57:
55:97:1d:2d:b2:b4:1b:da:b2:f7:d8:57:ee:1f:92:
9e:5e:21:4c:1d:7e:62:62:e2:f4:c6:05:10:6a:ec:
77:df:ef:99:1c:86:e6:b0:d2:3b:55:8d:2e:04:13:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:1E:7A:6C:01:D2:34:66:B9:1A:B7:58:B8:72:B7:C5:3F:32:0F
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:82:fd:37:9a:2e:31:e5:8e:5a:d8:6c:81:fa:52:50:f1:
66:1c:e4:bd:de:d4:f8:23:d8:dc:ec:28:62:80:56:05:2f:43:
75:fe:8d:ba:ae:40:cb:90:77:46:69:ed:ce:dd:19:84:68:9e:
5a:b2:4e:86:61:54:0b:3f:de:53:47:fa:72:42:a1:84:06:b4:
0f:9a:0c:c6:17:b5:5a:02:98:a0:a6:c1:57:34:64:89:b4:4d:
c5:ac:3d:9a:62:2e:45:6b:30:5d:92:b3:ad:16:3d:dc:3e:77:
84:9f:2d:e6:88:cd:5e:85:7c:24:c4:a4:c5:79:43:0f:28:57:
f5:0b:f0:aa:40:0c:09:52:c8:f6:67:00:55:19:2e:71:f9:b4:
4d:3e:16:25:a8:c6:97:f2:2d:8b:0a:24:b6:2d:ce:f4:18:4b:
9f:2c:69:8b:c9:cf:84:e1:38:34:16:5f:d4:71:f1:5c:1e:87:
0b:3d:df:55:34:b5:f7:b0:cf:b6:64:2d:ff:cf:0a:12:e3:0a:
49:84:af:a2:3e:e1:ec:59:3c:18:81:61:7c:cf:b2:de:ff:34:
56:b5:f1:30:68:68:0b:42:ce:f7:fb:f6:fd:7e:95:a4:4b:16:
00:95:e6:41:05:bd:92:da:b1:89:78:44:ec:a2:f5:56:09:d8:
3b:9c:01:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4DEEV+60FWaCOHm4G58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx
MWEzMGEwHhcNMjYwMzI5MDEwMDQyWhcNMjYwMzMwMDEwMDQyWjAzMTEwLwYDVQQD
Eyg2MWQ3MWU3YTZjMDFkMjM0NjZiOTFhYjc1OGI4NzJiN2M1M2YzMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa1UojGC2TxWcdJZJHAny9AZQuN1
LUv5cc/L7jH+Vi0pjJUIkpcsAL8ZlSLUxe+8oRGGQTttI8jTyFdYU/4UOTqki50P
FbDyGm8RiMNrnUQukNnZyC9zPTiXTGN5lXltO7Is2/HDu1CpY8DHpGwqiAe05/uY
N9gP3VWkjG0llU4BD63hz5JhVp7Yq4o+89u0r83kPdmPKz9Eot4HtKVJzYX4Ok0I
8h02uNLwV2lLQNxAtnXy/XbCoJeKyIgzZeIpEFpq4O5I3qIENEQBn0a6GVdVlx0t
srQb2rL32FfuH5KeXiFMHX5iYuL0xgUQaux33++ZHIbmsNI7VY0uBBO0pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHXHnpsAdI0Zrkat1i4crfFPzIPMB8GA1UdIwQY
MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt
MTg5ZDUzYWU0ZTNlLzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl
LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8SC/Tea
LjHljlrYbIH6UlDxZhzkvd7U+CPY3OwoYoBWBS9Ddf6Nuq5Ay5B3Rmntzt0ZhGie
WrJOhmFUCz/eU0f6ckKhhAa0D5oMxhe1WgKYoKbBVzRkibRNxaw9mmIuRWswXZKz
rRY93D53hJ8t5ojNXoV8JMSkxXlDDyhX9QvwqkAMCVLI9mcAVRkucfm0TT4WJajG
l/Itiwokti3O9BhLnyxpi8nPhOE4NBZf1HHxXB6HCz3fVTS197DPtmQt/88KEuMK
SYSvoj7h7Fk8GIFhfM+y3v80VrXxMGhoC0LO9/v2/X6VpEsWAJXmQQW9ktqxiXhE
7KL1VgnYO5wBdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:20 2026 by rpki-client