Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier: +4L0yX4x03LfSgvjwJA0cXb0P92Fjmop8NAN37RoJCo=
Subject key identifier: 68:A0:F1:7C:E8:C4:A2:BB:3A:F3:75:71:3F:EC:A7:2E:47:9F:15:08
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer: /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial: 019CBA393245BBDD380B2CE5EF245D1CA2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number: 07E3
Signing time: Wed 04 Mar 2026 19:00:36 +0000
Manifest this update: Wed 04 Mar 2026 19:00:36 +0000
Manifest next update: Thu 05 Mar 2026 19:00:36 +0000
Files and hashes: 1: 0PbPEQsG-kj7SoehWuyEm8KHUSs.roa (hash: PSFO3oJW97UfWkTdnQLs8C6Bk6abk9LmfHzrgXAaZBA=)
2: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: OCpaGkwmugj5ip/7Cw+qWibQ5LzZcJA9P8tR2B9f674=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:32:45:bb:dd:38:0b:2c:e5:ef:24:5d:1c:a2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Validity
Not Before: Mar 4 19:00:36 2026 GMT
Not After : Mar 5 19:00:36 2026 GMT
Subject: CN=68a0f17ce8c4a2bb3af375713feca72e479f1508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:ac:07:5a:7d:6a:a8:ee:21:80:fd:6f:62:
ef:ea:ce:2f:53:4e:d6:57:41:d3:35:1a:42:89:a6:
51:5a:50:4f:49:bb:d3:61:40:f9:01:56:17:a3:c1:
6f:e7:f1:4a:7b:1b:a7:de:dd:e6:3e:f8:0c:c1:a6:
e2:5a:cc:a8:a6:d2:27:5a:a2:6e:ce:5d:2b:e9:a0:
be:c4:e8:ae:87:d1:fd:90:63:7e:89:bd:e9:8b:7c:
40:a1:a9:ba:e9:8b:7f:1a:1d:5d:6e:0a:d6:c9:99:
37:d5:ad:cf:8c:73:4b:94:94:c7:76:f3:c0:17:2b:
99:b5:29:7d:05:14:9c:22:3b:b3:e9:17:75:f8:1c:
9f:0b:47:b1:e2:5f:fb:9e:a4:1e:7a:89:b8:00:b0:
2d:8f:28:0e:5e:77:0a:ec:00:48:af:0c:b5:95:7e:
ec:b6:df:25:2d:4a:3b:a5:4e:6c:19:fc:22:9c:fa:
44:a8:8b:08:67:2f:83:eb:ea:49:50:07:9a:7f:9f:
65:6c:6d:c4:c4:80:cb:27:98:c7:31:a2:4b:f7:32:
c2:cb:cc:7f:64:32:71:c6:66:dc:bd:fe:1a:53:54:
aa:15:4a:4b:66:b0:4b:5a:35:0f:c3:22:4a:c8:f9:
05:1d:6c:1c:47:d3:26:ab:98:b0:7d:6d:ab:ca:d4:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:F1:7C:E8:C4:A2:BB:3A:F3:75:71:3F:EC:A7:2E:47:9F:15:08
X509v3 Authority Key Identifier:
keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:d5:f1:f5:57:0d:7a:f1:88:28:3f:3f:88:47:f6:03:99:
85:1d:51:01:c3:c1:3d:65:e0:b2:10:11:83:d9:45:f7:b8:e1:
c0:cc:1b:62:57:0f:80:01:84:86:43:3e:55:53:9a:64:07:8d:
b4:d6:aa:8c:f5:00:d2:a6:01:f2:e8:40:6b:8d:a0:b1:bb:55:
bb:2a:2f:0e:45:18:ea:3c:d5:b0:9b:a5:d5:61:42:6d:0c:69:
5a:90:88:f5:3f:fc:8c:49:21:77:7e:60:1e:48:29:b2:26:69:
f5:a5:03:7e:2b:35:c3:28:f9:54:09:20:91:12:65:06:7c:a1:
e1:fb:68:df:4e:2b:3e:ec:71:f7:be:c1:ff:43:dc:16:cf:fc:
a9:14:55:07:29:6f:88:b3:50:bf:09:66:2a:de:66:d3:3d:12:
26:25:5c:ec:14:40:49:3a:00:e0:ec:2d:ed:f4:c7:d9:d6:83:
ff:dd:f9:7d:73:ec:78:ce:e0:bb:94:03:fb:65:80:d9:78:d2:
00:38:66:da:98:7a:84:a0:57:32:00:9b:da:94:8f:73:01:01:
b1:58:df:d1:32:b3:fd:ca:33:6a:0a:16:c9:c8:19:5d:7f:c9:
f4:3f:3f:6f:2d:21:e3:97:14:bc:5e:aa:10:75:f7:88:a0:91:
aa:1f:76:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy6OTJFu904Cyzl7yRdHKL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWRiYTU2Y2YxZmZjMmNmYzFkMDVmNGZhODMzMTE3ZWZk
N2M3OGEwHhcNMjYwMzA0MTkwMDM2WhcNMjYwMzA1MTkwMDM2WjAzMTEwLwYDVQQD
Eyg2OGEwZjE3Y2U4YzRhMmJiM2FmMzc1NzEzZmVjYTcyZTQ3OWYxNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjmsB1p9aqjuIYD9b2Lv6s4vU07W
V0HTNRpCiaZRWlBPSbvTYUD5AVYXo8Fv5/FKexun3t3mPvgMwabiWsyoptInWqJu
zl0r6aC+xOiuh9H9kGN+ib3pi3xAoam66Yt/Gh1dbgrWyZk31a3PjHNLlJTHdvPA
FyuZtSl9BRScIjuz6Rd1+ByfC0ex4l/7nqQeeom4ALAtjygOXncK7ABIrwy1lX7s
tt8lLUo7pU5sGfwinPpEqIsIZy+D6+pJUAeaf59lbG3ExIDLJ5jHMaJL9zLCy8x/
ZDJxxmbcvf4aU1SqFUpLZrBLWjUPwyJKyPkFHWwcR9Mmq5iwfW2rytTiBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGig8XzoxKK7OvN1cT/spy5HnxUIMB8GA1UdIwQY
MBaAFHRdulbPH/ws/B0F9PqDMRfv18eKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4Zjgt
MGEzMjcxMTY2NWFkLzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4ZjgtMGEzMjcxMTY2NWFk
LzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYfV8fVX
DXrxiCg/P4hH9gOZhR1RAcPBPWXgshARg9lF97jhwMwbYlcPgAGEhkM+VVOaZAeN
tNaqjPUA0qYB8uhAa42gsbtVuyovDkUY6jzVsJul1WFCbQxpWpCI9T/8jEkhd35g
HkgpsiZp9aUDfis1wyj5VAkgkRJlBnyh4fto304rPuxx977B/0PcFs/8qRRVBylv
iLNQvwlmKt5m0z0SJiVc7BRASToA4Owt7fTH2daD/935fXPseM7gu5QD+2WA2XjS
ADhm2ph6hKBXMgCb2pSPcwEBsVjf0TKz/cozagoWycgZXX/J9D8/by0h45cUvF6q
EHX3iKCRqh92XQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:29 2026 by rpki-client