Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier: yKBT8ZdB178Y89s1nNZzYMvWWTkEmuHt0AhGl1f7WVA=
Subject key identifier: 80:53:7B:FE:3F:2D:91:C4:9F:6D:78:FA:69:87:77:EA:31:14:D0:E4
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 019D27DFB39B0CF885F8A42E53CE921C360B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number: 0DDF
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: jMSGefmQrGcXlz7uuz8DPxs2AnoiBcElZIXy0H7X9L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b3:9b:0c:f8:85:f8:a4:2e:53:ce:92:1c:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=80537bfe3f2d91c49f6d78fa698777ea3114d0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:8c:49:cd:d0:dc:64:6f:3e:95:bd:61:c1:
f9:cb:c7:15:43:3c:9a:0b:df:43:a5:8f:e6:4c:d6:
0c:3b:4d:d2:02:12:60:41:50:e8:de:15:d4:1c:a1:
19:ad:68:c6:00:43:f1:20:18:52:c4:aa:10:a8:53:
f6:d0:76:16:a5:a8:38:92:28:ed:6a:3e:12:1f:38:
81:33:78:6c:6c:7d:40:05:78:55:80:6d:4e:ca:37:
af:fb:4b:22:40:de:82:b2:83:b7:40:c4:f5:5b:41:
5c:39:c1:1e:d3:10:a8:d4:11:21:00:ea:0e:f2:f7:
2a:db:50:75:2c:cc:d1:a8:26:b7:c4:88:6a:ce:07:
79:7a:ce:30:c9:bc:44:02:92:d7:08:42:01:eb:17:
5e:3e:0e:c6:a5:f7:a6:81:e6:7a:fe:b0:1a:69:37:
70:07:4c:55:d6:15:39:ef:94:f7:75:6a:00:93:a4:
51:75:6e:0c:e1:2a:93:c3:2d:9b:ff:3b:d2:f5:2d:
5a:3f:5d:02:8a:fb:0d:9f:6c:21:b1:79:7b:52:fa:
9c:9d:4e:b6:86:86:f8:39:ca:b2:93:07:b0:8c:a7:
6f:44:af:62:d2:e3:56:08:f1:ed:6a:bb:d9:7e:18:
68:21:b9:af:b1:66:82:d5:1c:28:09:6a:f1:eb:5f:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:53:7B:FE:3F:2D:91:C4:9F:6D:78:FA:69:87:77:EA:31:14:D0:E4
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:98:32:8b:7f:01:80:d1:ae:d9:98:59:ee:9e:05:8b:aa:28:
31:bb:43:cc:c8:be:a9:11:6e:df:79:7d:ad:a1:bd:12:fe:57:
0f:8c:14:36:b4:f6:e0:d1:7d:42:38:32:9a:5f:dc:f2:f5:33:
55:a1:6a:ef:c3:93:48:d8:c6:6f:5a:c3:10:74:c4:80:62:b4:
c7:c8:10:fe:eb:a2:6c:40:69:9c:8b:1b:fe:2f:47:2a:d2:e8:
92:63:3f:32:92:98:28:45:58:fe:64:ac:39:70:3a:45:e2:0f:
59:fd:be:bd:0e:74:2a:48:2c:dc:1a:e5:a0:bb:44:18:b0:93:
07:d2:e2:d4:c4:f1:02:7e:a4:47:15:d0:fd:fe:32:93:9f:00:
38:0a:5b:9d:09:56:39:be:97:a8:81:5f:63:64:a6:4e:1e:66:
0f:4e:42:16:17:87:cd:af:a7:aa:11:ba:d3:69:34:08:27:b1:
b9:03:3a:1c:75:e5:35:69:1c:b1:0f:46:61:c5:9f:3f:51:a5:
88:6e:48:98:c2:44:69:ca:82:7b:69:73:96:cb:73:cc:be:26:
a8:9c:6d:82:44:7c:f0:3c:26:c6:3e:35:41:33:9c:2b:00:03:
a4:27:09:7c:c4:aa:7e:5e:58:3e:a1:a5:9d:cb:c7:5a:5a:94:
c5:e5:78:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n37ObDPiF+KQuU86SHDYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTRlNTIwZTdiYjdlMTNmNTMyY2VjZjA1YTgyZDJiNzk3
OTUyYTIwHhcNMjYwMzI2MDIwMTA1WhcNMjYwMzI3MDIwMTA1WjAzMTEwLwYDVQQD
Eyg4MDUzN2JmZTNmMmQ5MWM0OWY2ZDc4ZmE2OTg3NzdlYTMxMTRkMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFqMSc3Q3GRvPpW9YcH5y8cVQzya
C99DpY/mTNYMO03SAhJgQVDo3hXUHKEZrWjGAEPxIBhSxKoQqFP20HYWpag4kijt
aj4SHziBM3hsbH1ABXhVgG1Oyjev+0siQN6CsoO3QMT1W0FcOcEe0xCo1BEhAOoO
8vcq21B1LMzRqCa3xIhqzgd5es4wybxEApLXCEIB6xdePg7GpfemgeZ6/rAaaTdw
B0xV1hU575T3dWoAk6RRdW4M4SqTwy2b/zvS9S1aP10CivsNn2whsXl7UvqcnU62
hob4OcqykwewjKdvRK9i0uNWCPHtarvZfhhoIbmvsWaC1RwoCWrx61/t7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBTe/4/LZHEn214+mmHd+oxFNDkMB8GA1UdIwQY
MBaAFPNU5SDnu34T9TLOzwWoLSt5eVKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzkt
Y2E1MWZiMzBlZGRmLzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzktY2E1MWZiMzBlZGRm
LzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpgyi38B
gNGu2ZhZ7p4Fi6ooMbtDzMi+qRFu33l9raG9Ev5XD4wUNrT24NF9Qjgyml/c8vUz
VaFq78OTSNjGb1rDEHTEgGK0x8gQ/uuibEBpnIsb/i9HKtLokmM/MpKYKEVY/mSs
OXA6ReIPWf2+vQ50Kkgs3BrloLtEGLCTB9Li1MTxAn6kRxXQ/f4yk58AOApbnQlW
Ob6XqIFfY2SmTh5mD05CFheHza+nqhG602k0CCexuQM6HHXlNWkcsQ9GYcWfP1Gl
iG5ImMJEacqCe2lzlstzzL4mqJxtgkR88Dwmxj41QTOcKwADpCcJfMSqfl5YPqGl
ncvHWlqUxeV44w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:26:07 2026 by rpki-client