Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: 4fh6istXhswBIQbcYW575o2nSGMk5Ot7gYas08iZ/u0=
Subject key identifier: 58:E3:77:A1:AB:AA:3D:F0:7F:8D:9E:E1:60:4E:AA:43:64:1F:5A:DC
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019D2771FD85EF0068BB28153F019F89E9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 027A
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: 0kKgJM1bM9a7Tp1o11aWigpckIVnKhg5s2bAf4ITWZc=)
2: P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa (hash: ZmxTADBDBcdVSd0ydXvKv1zAmFoyy7NrjZN7xgCiqr8=)
3: RsQ2F1hR8H3i7qc1K-1py98Y2oE.roa (hash: uYjJFeCzfVAYecHpU37zMUj8OmOaI8Jw7yaqtpm+414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fd:85:ef:00:68:bb:28:15:3f:01:9f:89:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=58e377a1abaa3df07f8d9ee1604eaa43641f5adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:7c:94:96:59:c3:f0:00:ff:eb:a6:2a:70:
00:a0:8d:3e:12:9a:c9:af:63:86:02:84:0c:55:9e:
f0:09:da:75:b9:e0:78:8a:b8:c6:4c:4b:70:68:df:
fc:74:c3:79:d4:be:a4:bf:76:0f:30:da:14:ba:7f:
b9:cd:4f:1b:1c:49:40:e1:77:79:ef:0e:e6:42:43:
64:53:f9:c5:f0:09:36:ef:5c:ef:4d:39:b8:b2:8c:
04:de:40:01:00:55:42:33:54:04:33:f5:d6:b9:22:
ea:33:26:e5:e7:09:6e:e9:df:6d:91:64:8f:16:ff:
99:2d:5a:eb:c7:7d:2b:c2:be:52:5f:c0:5b:4c:a2:
62:49:4e:d2:26:8e:f8:30:b5:e9:5e:be:7d:37:ee:
db:36:06:2c:20:6b:0f:d9:23:a4:48:eb:48:69:d8:
55:fa:78:b9:8b:62:46:4c:c6:94:6d:eb:f3:88:7b:
ed:83:1e:2a:d7:02:4b:42:a5:1d:3d:94:85:cc:cf:
76:7a:80:ec:1a:ae:d1:9e:77:6f:70:e5:de:2d:ea:
a0:50:34:0b:33:4c:0a:11:a9:4c:a5:66:f1:52:5a:
4f:11:5b:8e:9b:e7:1e:d3:69:e2:22:d7:d2:45:4c:
04:a0:41:35:33:73:8c:a3:d5:a0:57:31:12:1c:6d:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:77:A1:AB:AA:3D:F0:7F:8D:9E:E1:60:4E:AA:43:64:1F:5A:DC
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:ab:b9:88:3f:d9:cb:a2:57:b7:de:32:eb:9b:a2:da:f2:
43:19:8e:fc:3a:19:d7:59:69:bf:1e:8f:21:68:c1:07:17:aa:
3e:a0:cb:9e:4e:af:4b:6b:f8:50:cc:b0:e3:16:fc:27:59:5d:
79:4c:20:eb:a6:db:c9:53:d0:b6:da:eb:70:e1:40:ba:a8:9a:
60:de:e9:63:0f:7c:40:87:bb:d3:bb:ae:77:66:79:42:cf:88:
aa:cf:8c:6c:24:73:dc:5e:42:6f:b5:71:06:8a:46:73:1d:1e:
f1:f7:43:11:42:4c:7a:09:29:1c:9c:5b:3d:67:38:7d:2c:db:
e9:e3:01:b8:76:d4:2e:90:6e:22:7a:8a:da:95:d7:60:49:c3:
26:de:36:d8:3a:2a:a1:58:b1:9f:41:c4:5a:ca:a9:32:8c:68:
10:ad:86:80:56:99:d3:08:da:67:93:a7:a3:d7:ff:16:40:cf:
de:be:2b:e0:1d:46:1b:37:0d:31:d4:59:9b:3e:c0:b6:b1:f0:
8c:1b:f5:65:1c:62:ba:30:2a:a7:dd:00:c1:59:a4:ff:e4:70:
39:86:75:0c:1c:25:37:98:f6:c7:b7:60:ff:72:d0:ff:d1:8a:
97:f2:1d:d9:03:0e:57:b9:8b:99:dd:23:41:38:b0:05:69:2f:
74:fd:bb:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ncf2F7wBouygVPwGfienQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Yjc2MDBlNzgxZjkzMDViODhjYTQ5MzFhN2RiMDA5Zjhj
NzJiM2EwHhcNMjYwMzI2MDAwMTE0WhcNMjYwMzI3MDAwMTE0WjAzMTEwLwYDVQQD
Eyg1OGUzNzdhMWFiYWEzZGYwN2Y4ZDllZTE2MDRlYWE0MzY0MWY1YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qJ8lJZZw/AA/+umKnAAoI0+EprJ
r2OGAoQMVZ7wCdp1ueB4irjGTEtwaN/8dMN51L6kv3YPMNoUun+5zU8bHElA4Xd5
7w7mQkNkU/nF8Ak271zvTTm4sowE3kABAFVCM1QEM/XWuSLqMybl5wlu6d9tkWSP
Fv+ZLVrrx30rwr5SX8BbTKJiSU7SJo74MLXpXr59N+7bNgYsIGsP2SOkSOtIadhV
+ni5i2JGTMaUbevziHvtgx4q1wJLQqUdPZSFzM92eoDsGq7RnndvcOXeLeqgUDQL
M0wKEalMpWbxUlpPEVuOm+ce02niItfSRUwEoEE1M3OMo9WgVzESHG392wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFjjd6Grqj3wf42e4WBOqkNkH1rcMB8GA1UdIwQY
MBaAFPi3YA54H5MFuIykkxp9sAn4xys6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MZGdEbmdma3dXNGpLU1RHbjJ3Q2ZqSEt6by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlh
LWU1YWZlMjYzZjBhMi8xLzEtTGRnRG5nZmt3VzRqS1NUR24yd0NmakhLem8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzEyL2IzZmVjZS05MDVmLTRjYjMtOWE5YS1lNWFmZTI2M2Yw
YTIvMS8xLUxkZ0RuZ2Zrd1c0aktTVEduMndDZmpIS3pvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0mr
uYg/2cuiV7feMuubotryQxmO/DoZ11lpvx6PIWjBBxeqPqDLnk6vS2v4UMyw4xb8
J1ldeUwg66bbyVPQttrrcOFAuqiaYN7pYw98QIe707uud2Z5Qs+Iqs+MbCRz3F5C
b7VxBopGcx0e8fdDEUJMegkpHJxbPWc4fSzb6eMBuHbULpBuInqK2pXXYEnDJt42
2DoqoVixn0HEWsqpMoxoEK2GgFaZ0wjaZ5Ono9f/FkDP3r4r4B1GGzcNMdRZmz7A
trHwjBv1ZRxiujAqp90AwVmk/+RwOYZ1DBwlN5j2x7dg/3LQ/9GKl/Id2QMOV7mL
md0jQTiwBWkvdP27xw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:56 2026 by rpki-client