Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: Yk4Y4TNDKGfYsy640yawZRwr5P+CorOZZk0AMYJav+E=
Subject key identifier: 21:DE:76:BD:B5:51:E1:37:B2:4A:0E:4A:CE:FC:12:E9:C4:1A:52:93
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019D269678A6550CF1ACB3B4C815A272BB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 08ED
Signing time: Wed 25 Mar 2026 20:01:28 +0000
Manifest this update: Wed 25 Mar 2026 20:01:28 +0000
Manifest next update: Thu 26 Mar 2026 20:01:28 +0000
Files and hashes: 1: DQYoTEX-x8cjYmvb3bOaTtlqK-o.roa (hash: kvQYDQBkZ3WehVJeMmEkmsNV2/eI8PigHmwQeG9g+Eg=)
2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: MPgWXEqSwNKR0IBCFS94LQ8ZN5+hFyIdTR0/INWZ6TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:78:a6:55:0c:f1:ac:b3:b4:c8:15:a2:72:bb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Mar 25 20:01:28 2026 GMT
Not After : Mar 26 20:01:28 2026 GMT
Subject: CN=21de76bdb551e137b24a0e4acefc12e9c41a5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:c7:1a:27:84:5f:15:b6:bc:86:fb:7b:ee:
f7:5c:37:b8:b7:7a:cd:81:d6:1f:f7:5e:7f:b7:55:
e9:cb:7a:86:7a:38:75:c5:f3:ad:29:82:9f:e6:7e:
97:0e:e8:d3:46:4e:3f:dc:09:8a:98:46:b4:f4:b3:
66:cc:b3:9d:b1:28:57:3b:26:25:50:89:aa:73:4f:
97:6c:b8:e0:2a:1b:44:c7:79:f4:18:ab:8a:8a:c7:
73:08:56:8c:b3:84:cb:80:ce:20:3e:f9:00:01:03:
c0:8d:5e:f2:c1:a4:89:a8:fd:87:cd:f0:76:6b:ec:
06:11:c2:55:a9:66:ee:d1:ec:6e:60:51:ad:51:38:
e1:5d:9c:69:82:69:eb:ca:2f:4c:6b:e0:d9:fb:24:
56:bf:71:e9:9c:d6:86:13:d5:ac:b9:bc:b1:1c:4d:
c1:b9:a5:c4:79:e4:9e:72:7a:1b:c9:a7:ac:69:bb:
ed:c3:6a:2f:3a:ac:ab:ff:82:05:d2:8c:70:b2:40:
32:77:d5:3a:f0:27:f5:f1:3b:0d:10:70:b9:66:cc:
9a:b2:a9:b8:dc:a3:27:74:cb:53:0a:87:73:c9:d8:
48:c1:8e:0b:0b:9b:64:81:64:dd:61:7b:23:d5:06:
2b:b4:32:87:81:fd:5f:a6:b1:38:d2:1c:1c:f1:92:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:76:BD:B5:51:E1:37:B2:4A:0E:4A:CE:FC:12:E9:C4:1A:52:93
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:18:ee:0d:91:e6:cd:31:f7:5b:da:e3:50:23:c0:55:c7:
92:28:68:5c:0f:68:4b:9d:7f:1b:52:4a:d6:44:77:35:e3:0a:
b1:31:6b:4f:c5:31:d0:78:4f:2f:7c:36:69:00:d0:c6:9f:ec:
99:aa:0c:cd:c2:81:9d:0e:1e:a5:76:8b:a8:12:3f:c8:6f:66:
f1:51:d1:3a:a2:87:4b:f4:de:a4:71:5a:d3:fa:16:72:9a:b3:
49:7e:a5:ed:56:85:84:dd:6f:0b:27:e5:05:99:94:14:3c:c5:
5e:cb:a3:b6:a4:3b:0d:f0:2d:df:b9:72:a9:1a:a0:58:60:50:
4d:a9:ad:a1:b2:ec:9c:64:e1:03:27:51:4f:a5:ba:f5:ce:e1:
7d:1f:17:24:1d:f0:d0:2d:1c:84:f0:81:fa:bc:08:42:15:f7:
a1:21:32:f3:02:22:72:b6:3c:2b:d7:6b:18:df:4c:06:ba:39:
f3:d5:2f:10:84:c0:10:21:a8:9a:34:e8:e9:2d:5e:f1:ee:bd:
61:fb:7d:c1:a2:98:66:39:9c:38:7b:0e:4a:0f:34:0d:50:91:
cb:40:0a:81:d5:d1:90:fe:74:3e:50:d3:a1:69:7b:95:96:ec:
5e:20:56:e2:be:71:f4:13:27:76:38:1e:68:dd:78:96:25:9e:
00:0f:4d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlnimVQzxrLO0yBWicrshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjYwMzI1MjAwMTI4WhcNMjYwMzI2MjAwMTI4WjAzMTEwLwYDVQQD
EygyMWRlNzZiZGI1NTFlMTM3YjI0YTBlNGFjZWZjMTJlOWM0MWE1MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswfHGieEXxW2vIb7e+73XDe4t3rN
gdYf915/t1Xpy3qGejh1xfOtKYKf5n6XDujTRk4/3AmKmEa09LNmzLOdsShXOyYl
UImqc0+XbLjgKhtEx3n0GKuKisdzCFaMs4TLgM4gPvkAAQPAjV7ywaSJqP2HzfB2
a+wGEcJVqWbu0exuYFGtUTjhXZxpgmnryi9Ma+DZ+yRWv3HpnNaGE9WsubyxHE3B
uaXEeeSecnobyaesabvtw2ovOqyr/4IF0oxwskAyd9U68Cf18TsNEHC5Zsyasqm4
3KMndMtTCodzydhIwY4LC5tkgWTdYXsj1QYrtDKHgf1fprE40hwc8ZKoowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHedr21UeE3skoOSs78EunEGlKTMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF0Y7g2R
5s0x91va41AjwFXHkihoXA9oS51/G1JK1kR3NeMKsTFrT8Ux0HhPL3w2aQDQxp/s
maoMzcKBnQ4epXaLqBI/yG9m8VHROqKHS/TepHFa0/oWcpqzSX6l7VaFhN1vCyfl
BZmUFDzFXsujtqQ7DfAt37lyqRqgWGBQTamtobLsnGThAydRT6W69c7hfR8XJB3w
0C0chPCB+rwIQhX3oSEy8wIicrY8K9drGN9MBro589UvEITAECGomjTo6S1e8e69
Yft9waKYZjmcOHsOSg80DVCRy0AKgdXRkP50PlDToWl7lZbsXiBW4r5x9BMndjge
aN14liWeAA9NQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:14 2026 by rpki-client