Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: 4pkdMpgUoaaIW/wxslyg8dp6YaSSRf1MsRCmmpYXOH8=
Subject key identifier: 3E:FC:5E:1C:48:0C:D7:63:F4:69:79:E4:00:AB:0D:80:5A:56:3D:C1
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019D25BAAB6BC8BCA8E548E581E162C35C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: oNH6kDUJjbs8sJdi0G9xZz+cbkg0N6QjsArNbnDW3T4=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ab:6b:c8:bc:a8:e5:48:e5:81:e1:62:c3:5c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=3efc5e1c480cd763f46979e400ab0d805a563dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:8c:69:7c:b3:97:70:75:24:47:64:b3:29:
43:4c:82:59:73:a7:61:14:45:c8:44:0b:d2:df:96:
b1:b7:27:94:fc:4a:07:4e:bb:b6:0a:a6:f8:5b:b1:
b8:31:42:23:63:e9:d7:20:1b:12:a0:ec:cd:1b:cc:
47:61:8a:2b:8a:5a:16:9e:60:b2:c9:ec:1c:58:39:
38:b7:41:b6:05:6c:55:6a:30:64:41:e7:ca:84:39:
1f:cf:78:f2:17:21:bc:4a:ba:d6:28:1f:bd:54:ae:
a8:7b:ae:52:10:16:29:b8:7d:89:37:2d:48:5e:4d:
85:36:5d:5a:9d:b7:25:8b:44:c6:86:d2:ec:55:b6:
2b:c9:97:1a:a5:17:e7:33:b7:03:8a:cb:3b:c7:7a:
0e:28:17:5c:ab:47:5c:c0:99:7f:88:86:80:70:fd:
6c:18:48:f5:5e:14:6d:19:3c:5e:92:9b:38:eb:5e:
af:77:a3:ef:15:be:a4:0b:5f:59:80:b9:64:90:a1:
30:79:7e:54:d5:c3:c2:0f:ed:a1:87:22:17:74:a4:
59:59:86:05:54:90:51:ec:19:3b:c6:c7:23:b9:f5:
56:ed:03:09:30:2b:34:79:d5:dd:44:0f:fb:a3:b3:
6b:c0:66:dc:05:ec:18:66:f5:32:82:77:89:67:b5:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FC:5E:1C:48:0C:D7:63:F4:69:79:E4:00:AB:0D:80:5A:56:3D:C1
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c5:52:46:0c:b7:c9:f7:6b:f5:34:a0:e8:95:91:ea:55:f4:
2a:69:d8:bc:f3:d4:5c:cf:01:d1:2d:c4:dd:cc:af:95:e8:8c:
78:e1:b4:20:80:69:9d:f2:7b:70:ec:d8:5c:77:20:90:4f:fd:
f4:5a:36:a6:d0:c0:a1:8a:a2:7c:59:30:66:1e:0f:70:13:7c:
03:06:29:ef:2f:47:b3:3c:8f:9a:a9:52:b9:17:8c:d1:e5:a5:
c0:b6:3d:ab:39:7b:9b:45:ca:12:e0:93:92:34:9e:d0:46:75:
0e:f5:95:0a:8d:c3:12:22:0f:6a:8a:56:5b:c2:d1:03:ea:95:
8e:40:06:38:c6:45:f1:d8:ae:f9:86:e2:ea:c6:71:ed:45:a9:
1e:a1:5c:80:e7:46:ba:ff:1f:84:0a:ca:fb:9b:2e:a9:56:82:
a1:ec:76:2c:39:e1:1b:65:92:38:d1:f8:ca:23:4b:c1:a5:55:
92:a8:4e:e2:64:9d:24:90:b5:eb:f9:7c:62:56:70:c5:44:94:
09:e6:f6:3c:f2:a7:b2:68:34:8b:67:e8:c6:f0:b9:eb:10:0a:
52:90:55:40:38:2f:4d:a7:a2:8d:ee:de:3f:13:b3:99:c9:da:
77:6b:0f:16:48:70:3d:fd:1a:9f:a0:ba:f5:94:51:7f:cb:a5:
54:e2:bf:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luqtryLyo5UjlgeFiw1wNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx
ZmQ4YTMwHhcNMjYwMzI1MTYwMTIzWhcNMjYwMzI2MTYwMTIzWjAzMTEwLwYDVQQD
EygzZWZjNWUxYzQ4MGNkNzYzZjQ2OTc5ZTQwMGFiMGQ4MDVhNTYzZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAKMaXyzl3B1JEdksylDTIJZc6dh
FEXIRAvS35axtyeU/EoHTru2Cqb4W7G4MUIjY+nXIBsSoOzNG8xHYYoriloWnmCy
yewcWDk4t0G2BWxVajBkQefKhDkfz3jyFyG8SrrWKB+9VK6oe65SEBYpuH2JNy1I
Xk2FNl1anbcli0TGhtLsVbYryZcapRfnM7cDiss7x3oOKBdcq0dcwJl/iIaAcP1s
GEj1XhRtGTxekps4616vd6PvFb6kC19ZgLlkkKEweX5U1cPCD+2hhyIXdKRZWYYF
VJBR7Bk7xscjufVW7QMJMCs0edXdRA/7o7NrwGbcBewYZvUygneJZ7VBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD78XhxIDNdj9Gl55ACrDYBaVj3BMB8GA1UdIwQY
MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt
NGRkMzg1M2EyMjQxLzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx
LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcVSRgy3
yfdr9TSg6JWR6lX0KmnYvPPUXM8B0S3E3cyvleiMeOG0IIBpnfJ7cOzYXHcgkE/9
9Fo2ptDAoYqifFkwZh4PcBN8AwYp7y9HszyPmqlSuReM0eWlwLY9qzl7m0XKEuCT
kjSe0EZ1DvWVCo3DEiIPaopWW8LRA+qVjkAGOMZF8diu+Ybi6sZx7UWpHqFcgOdG
uv8fhArK+5suqVaCoex2LDnhG2WSONH4yiNLwaVVkqhO4mSdJJC16/l8YlZwxUSU
Ceb2PPKnsmg0i2foxvC56xAKUpBVQDgvTaeije7ePxOzmcnad2sPFkhwPf0an6C6
9ZRRf8ulVOK/0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:42 2026 by rpki-client