Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: Ef1QjF1rO/i2UXatYFJJboCzHMbqyqsURb4QZ3uTPCk=
Subject key identifier: 9A:31:A9:06:BA:EC:01:6B:20:7B:D7:BA:88:B1:B1:72:E5:94:CC:33
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 019D27A891C55B9160024E52AB6313ECBE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0E87
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: Di75lZfaAEr8QzgxQaKHcFHDqCTW1RYIDVxE8U54hwY=)
2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:91:c5:5b:91:60:02:4e:52:ab:63:13:ec:be:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=9a31a906baec016b207bd7ba88b1b172e594cc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:58:b1:b9:a1:11:83:de:11:8d:14:b3:ab:
58:6a:00:b6:00:e1:d6:b9:f5:a5:bc:2d:03:b1:90:
31:26:b5:38:b0:6a:73:90:a2:bd:9b:86:c6:f6:b0:
a6:d3:d6:66:9f:cc:70:1c:71:ed:69:76:3f:f3:c8:
30:0b:08:64:66:b6:b9:01:d7:d7:bc:37:0d:05:37:
01:d3:ea:cb:91:69:0c:33:2a:7c:de:f5:04:fe:56:
ed:54:ee:ac:e2:d4:ea:4d:cc:f4:f4:82:9a:d8:4b:
b1:f6:f2:37:5b:ac:85:aa:da:87:0a:21:19:4a:e5:
61:ee:d2:c6:ae:ea:25:e7:50:d1:45:72:25:7d:63:
a6:ff:c8:52:e3:ef:3f:26:c7:07:36:75:f0:e9:51:
f4:5b:32:74:56:9a:39:85:32:16:35:e3:5c:85:d3:
9d:48:6a:e3:94:9e:8d:84:89:70:85:b0:e9:8b:a4:
93:ac:cf:df:be:b8:1e:5b:0f:ac:f3:2a:42:fa:63:
47:0f:53:78:00:f8:a3:a4:77:a4:6e:bd:0d:5e:eb:
86:ac:71:55:ac:9e:a9:16:75:9d:f3:54:4c:c4:02:
3d:04:0f:a5:88:41:7e:59:58:dd:fe:93:2c:72:17:
8d:7e:26:e8:ee:97:78:fa:c2:4f:b4:b2:68:8f:5d:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:A9:06:BA:EC:01:6B:20:7B:D7:BA:88:B1:B1:72:E5:94:CC:33
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a4:2b:07:b0:75:e0:4f:98:75:e7:23:fc:d4:d2:85:b3:1e:
e5:35:9b:68:59:13:1b:d2:10:5c:cd:e6:b1:80:0c:bb:b6:17:
01:d0:fa:7c:9c:b8:b3:1b:81:7c:e0:ff:ff:e4:c3:a9:e8:e6:
52:ab:ed:85:dd:6f:d8:e0:f8:ac:7a:3c:cc:da:1c:d6:5e:f6:
28:ae:a3:1d:39:ca:5b:7e:35:49:78:2b:3f:b6:12:c5:ee:0e:
de:84:65:b0:5d:15:17:47:de:97:f7:db:96:57:03:61:17:bb:
67:65:1b:6a:1f:fa:41:ea:cb:95:4a:78:ad:5b:bb:cd:e3:de:
79:e3:a3:3a:2c:31:c8:30:8a:13:12:79:95:ac:1d:14:ce:85:
13:8f:ec:a0:27:6f:aa:18:10:f1:53:4f:12:74:df:ab:c1:b0:
3f:84:ac:ee:db:05:90:fa:23:11:d4:52:1d:f5:a7:2f:ba:07:
c3:1c:64:44:c9:d2:90:00:9f:08:63:d7:f0:c8:39:ba:db:9f:
2c:a2:a9:36:3f:22:e3:a0:36:9a:45:86:de:3c:de:2f:d7:33:
d5:6f:be:24:2e:7b:91:c7:d4:e6:46:7c:c2:55:17:02:11:b9:
cb:2d:05:36:2d:d3:8c:47:b0:8f:4f:b1:9f:a2:e3:8c:07:19:
c6:c4:49:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJHFW5FgAk5Sq2MT7L5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1
MjJjN2YwHhcNMjYwMzI2MDEwMDUxWhcNMjYwMzI3MDEwMDUxWjAzMTEwLwYDVQQD
Eyg5YTMxYTkwNmJhZWMwMTZiMjA3YmQ3YmE4OGIxYjE3MmU1OTRjYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHNYsbmhEYPeEY0Us6tYagC2AOHW
ufWlvC0DsZAxJrU4sGpzkKK9m4bG9rCm09Zmn8xwHHHtaXY/88gwCwhkZra5AdfX
vDcNBTcB0+rLkWkMMyp83vUE/lbtVO6s4tTqTcz09IKa2Eux9vI3W6yFqtqHCiEZ
SuVh7tLGruol51DRRXIlfWOm/8hS4+8/JscHNnXw6VH0WzJ0Vpo5hTIWNeNchdOd
SGrjlJ6NhIlwhbDpi6STrM/fvrgeWw+s8ypC+mNHD1N4APijpHekbr0NXuuGrHFV
rJ6pFnWd81RMxAI9BA+liEF+WVjd/pMscheNfibo7pd4+sJPtLJoj12FVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoxqQa67AFrIHvXuoixsXLllMwzMB8GA1UdIwQY
MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt
ZjcwZDVlZjg3NWMzLzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz
LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6QrB7B1
4E+Ydecj/NTShbMe5TWbaFkTG9IQXM3msYAMu7YXAdD6fJy4sxuBfOD//+TDqejm
Uqvthd1v2OD4rHo8zNoc1l72KK6jHTnKW341SXgrP7YSxe4O3oRlsF0VF0fel/fb
llcDYRe7Z2Ubah/6QerLlUp4rVu7zePeeeOjOiwxyDCKExJ5lawdFM6FE4/soCdv
qhgQ8VNPEnTfq8GwP4Ss7tsFkPojEdRSHfWnL7oHwxxkRMnSkACfCGPX8Mg5utuf
LKKpNj8i46A2mkWG3jzeL9cz1W++JC57kcfU5kZ8wlUXAhG5yy0FNi3TjEewj0+x
n6LjjAcZxsRJaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:21 2026 by rpki-client