Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: b8D3GXx/RKTYlOCmWcuRSdQrrQJaRm81CAaSUkkPiBc=
Subject key identifier: 02:39:62:87:20:8B:D9:53:E8:3B:44:96:7C:76:92:A2:C2:FB:25:C3
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 019D2628585D73E9F4D463214ED2146E546C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 15AC
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: QvgaY2EiB3w+C5Sk6qwtfbr+LOxYZgRCdcwSLZY5UA8=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:58:5d:73:e9:f4:d4:63:21:4e:d2:14:6e:54:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=02396287208bd953e83b44967c7692a2c2fb25c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:1c:03:77:9a:91:4b:0e:61:d6:3e:76:48:
f2:15:43:13:45:c5:28:c9:bb:f1:ce:96:a4:93:08:
45:d7:05:7c:c7:7d:d5:db:91:fc:a0:3f:78:7f:33:
8c:f5:ea:65:b2:d9:54:81:5c:b8:1d:4a:d0:d7:08:
a3:b0:a4:00:c0:d8:cf:16:df:be:c6:25:a0:b8:74:
eb:36:93:f4:f8:7d:9b:f5:98:7c:97:d0:f2:6c:3b:
c0:d6:2f:16:be:6c:3e:64:df:96:c9:2a:54:9d:46:
de:d1:82:82:af:36:35:a9:69:ee:e5:9b:7d:5c:1a:
04:95:14:35:88:a1:86:95:75:71:a7:ae:42:8b:d9:
9a:db:db:d3:5a:59:0b:67:fa:fd:07:fd:e5:c7:14:
0e:af:9a:53:b8:ae:3a:b0:04:55:dd:a9:65:1f:34:
12:95:ec:1a:55:f1:7f:30:85:69:17:c1:fa:71:c6:
a7:7d:8d:19:d4:e4:1f:1f:7b:de:3a:0b:8f:6d:df:
7d:b4:ae:d1:92:e6:dd:77:c2:22:44:d6:35:10:be:
81:5d:22:75:27:47:f8:10:64:e3:5c:ff:bf:28:83:
6c:6e:20:42:e5:1a:51:60:ec:9e:5d:e3:9e:7c:f9:
f5:d6:6b:33:b0:3b:81:94:5e:07:fb:c6:46:12:e3:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:62:87:20:8B:D9:53:E8:3B:44:96:7C:76:92:A2:C2:FB:25:C3
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c6:7c:18:11:01:49:75:b7:16:d7:60:f8:68:c5:27:98:b8:
3b:ad:b5:0a:5b:2d:62:2b:87:63:20:7a:0c:7d:6d:a3:e9:6f:
ad:d0:60:60:49:b6:21:f7:74:18:0b:0b:28:7c:5b:61:d2:36:
f6:4a:0d:7a:7c:95:d6:6b:c7:70:66:4d:50:04:cd:a2:48:f6:
ea:97:29:e7:c1:2c:87:37:12:22:84:04:59:0f:9b:99:bd:3c:
f2:29:14:70:ee:c9:1b:7b:45:df:ce:c2:cd:11:2c:69:a0:03:
16:95:43:9e:9a:df:a2:54:f7:92:f7:49:9a:9c:c0:73:36:be:
40:6e:2f:d3:a4:20:c7:0d:96:08:78:a7:ce:33:74:22:4d:e9:
71:ee:bc:af:27:c2:44:90:c4:03:66:82:0a:2e:80:f0:56:9c:
ca:ec:a1:88:1c:6a:f2:68:be:df:f9:17:71:34:e1:d4:5d:13:
f9:5e:22:5f:af:1a:a7:3c:ac:e0:a1:05:5d:16:9a:7f:e4:7d:
7f:a9:6c:86:14:cb:ff:e8:4a:01:9a:a2:07:4a:0b:91:90:82:
95:95:46:35:ae:49:66:a9:73:ba:75:c0:02:46:55:23:cf:18:
99:3d:5c:08:6b:f3:42:f7:97:63:54:8d:a6:a5:aa:89:f9:cf:
4f:0e:25:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFhdc+n01GMhTtIUblRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NmZhZTQzZjczZGEzNWZlMWEyZTQyOTY2MmFlMGI5MTc1
MWUzZmIwHhcNMjYwMzI1MTgwMTExWhcNMjYwMzI2MTgwMTExWjAzMTEwLwYDVQQD
EygwMjM5NjI4NzIwOGJkOTUzZTgzYjQ0OTY3Yzc2OTJhMmMyZmIyNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEgcA3eakUsOYdY+dkjyFUMTRcUo
ybvxzpakkwhF1wV8x33V25H8oD94fzOM9eplstlUgVy4HUrQ1wijsKQAwNjPFt++
xiWguHTrNpP0+H2b9Zh8l9DybDvA1i8Wvmw+ZN+WySpUnUbe0YKCrzY1qWnu5Zt9
XBoElRQ1iKGGlXVxp65Ci9ma29vTWlkLZ/r9B/3lxxQOr5pTuK46sARV3allHzQS
lewaVfF/MIVpF8H6ccanfY0Z1OQfH3veOguPbd99tK7Rkubdd8IiRNY1EL6BXSJ1
J0f4EGTjXP+/KINsbiBC5RpRYOyeXeOefPn11mszsDuBlF4H+8ZGEuNGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI5Yocgi9lT6DtElnx2kqLC+yXDMB8GA1UdIwQY
MBaAFHdvrkP3PaNf4aLkKWYq4LkXUeP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQt
NGUwY2M1ODE2M2IwLzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQtNGUwY2M1ODE2M2Iw
LzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8Z8GBEB
SXW3Ftdg+GjFJ5i4O621ClstYiuHYyB6DH1to+lvrdBgYEm2Ifd0GAsLKHxbYdI2
9koNenyV1mvHcGZNUATNokj26pcp58EshzcSIoQEWQ+bmb088ikUcO7JG3tF387C
zREsaaADFpVDnprfolT3kvdJmpzAcza+QG4v06Qgxw2WCHinzjN0Ik3pce68ryfC
RJDEA2aCCi6A8FacyuyhiBxq8mi+3/kXcTTh1F0T+V4iX68apzys4KEFXRaaf+R9
f6lshhTL/+hKAZqiB0oLkZCClZVGNa5JZqlzunXAAkZVI88YmT1cCGvzQveXY1SN
pqWqifnPTw4ltQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:52 2026 by rpki-client