Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier: YLWz3O64c/GJ0GDgcDwRKt27r3pt0z08Ac7QUN4ffWo=
Subject key identifier: 2B:70:04:AC:E2:F6:91:3D:37:F6:8E:00:E6:E2:2D:82:0F:1B:49:1E
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019D29CEE1DC8A975913AB8B910122EEE9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number: 1387
Signing time: Thu 26 Mar 2026 11:01:57 +0000
Manifest this update: Thu 26 Mar 2026 11:01:57 +0000
Manifest next update: Fri 27 Mar 2026 11:01:57 +0000
Files and hashes: 1: 0afuwwpSylnqyi1KRwMRDOM6r7k.roa (hash: z3MlidMuuLgNR1mdxxRmyn3fh5T6uAJcGz1Z1osDBjI=)
2: 4gGd7LcQ6qQ6avnurf3xejB1t0s.roa (hash: j3iW+b3EiZhGw5mm3ly7V+FoiiHAPGatR1ru3J1J6Vg=)
3: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: Sj78eaf23qTqbsf5675Ucm4mioH1KOpDd6khdHOw590=)
4: zNm5Qj7aAnNhn0PPXpRiZPpb-Cc.roa (hash: aecWS2V1Qv9HVqql7W0x5HQGtiHaZA7TdAFG/WsALog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:e1:dc:8a:97:59:13:ab:8b:91:01:22:ee:e9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Mar 26 11:01:57 2026 GMT
Not After : Mar 27 11:01:57 2026 GMT
Subject: CN=2b7004ace2f6913d37f68e00e6e22d820f1b491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:b0:59:23:d5:2c:52:31:3a:08:cd:04:99:
a0:5d:73:d8:77:1f:59:5d:d2:04:73:c6:82:4b:79:
c7:11:70:64:cf:94:8c:f7:cb:2d:04:c4:28:c4:d8:
d5:b0:15:04:a5:f3:fd:fb:7b:f3:2b:ef:05:7a:9e:
1f:d4:86:ff:fa:68:36:04:e2:99:4f:f0:36:28:2e:
6e:d1:35:6e:38:ad:22:b1:7a:6c:61:9f:ce:38:52:
1e:66:66:9f:2b:1f:d8:18:f5:a9:1f:ce:c9:88:b7:
fc:05:47:8e:54:1e:ed:6f:66:5f:39:7e:e8:ad:11:
bf:c9:e4:90:c1:7a:99:1a:b1:9d:b3:dc:e4:be:97:
c0:32:d3:71:e4:d8:23:25:5c:a3:ea:af:c3:b5:8d:
81:1c:b0:54:1a:e4:43:16:ab:71:83:09:7d:a8:39:
97:6c:a7:40:7f:22:59:e2:31:f9:73:4a:dc:4f:2d:
d7:74:d0:9e:ed:f2:fd:cc:0f:66:a2:58:2a:e3:5e:
dd:ee:89:45:df:aa:12:2b:41:de:14:35:1b:3e:92:
3d:24:3a:d6:b2:c2:c6:13:3c:54:d7:5a:82:29:cc:
45:07:c3:c7:63:b5:34:cb:d9:e7:4d:af:d2:09:61:
fd:3a:6e:5b:1c:fd:e5:a3:f5:f6:1b:05:cc:d1:26:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:04:AC:E2:F6:91:3D:37:F6:8E:00:E6:E2:2D:82:0F:1B:49:1E
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:24:1a:26:cd:17:e7:06:12:c6:1b:74:76:87:21:5f:fe:96:
88:c2:c8:14:3a:00:12:73:e8:35:02:73:21:13:d7:0b:07:2e:
d6:e2:39:b5:38:af:28:5e:e2:39:68:20:89:04:8e:9f:69:68:
16:4a:52:b5:aa:33:ae:2b:a7:f0:a6:98:0b:0e:2b:7a:c8:f7:
1c:1c:03:cc:cb:50:b4:bc:c9:c2:2a:8e:5f:88:f6:af:cc:b2:
b1:1d:5a:20:10:3d:45:53:69:51:00:9e:d2:d1:ca:47:ff:6a:
60:a3:cd:13:86:43:0c:a9:97:0d:f1:1e:d2:c3:bf:ee:30:b5:
89:27:b1:6a:02:4c:08:3f:0b:29:7b:76:7f:54:a0:55:c9:73:
8e:fe:16:9e:ef:03:f6:a3:0e:40:32:bf:bd:bc:2a:88:a5:c5:
20:f4:0f:c8:e3:6a:e6:c6:ae:bf:b4:d2:7c:7b:90:7e:e5:87:
87:7c:19:11:f1:64:ce:b9:d4:d9:e4:e1:08:a0:85:3b:5c:78:
25:80:de:4a:98:03:7e:3d:95:ee:9e:3b:7b:a9:de:a9:ad:38:
b3:20:2c:26:ff:66:32:5a:9e:6a:25:ab:fc:4b:13:76:ae:0d:
97:7a:e6:10:b6:68:c8:00:97:f9:e8:a6:a5:28:00:25:ee:4e:
a3:25:8d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzuHcipdZE6uLkQEi7umnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh
NTk0NTYwHhcNMjYwMzI2MTEwMTU3WhcNMjYwMzI3MTEwMTU3WjAzMTEwLwYDVQQD
EygyYjcwMDRhY2UyZjY5MTNkMzdmNjhlMDBlNmUyMmQ4MjBmMWI0OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGywWSPVLFIxOgjNBJmgXXPYdx9Z
XdIEc8aCS3nHEXBkz5SM98stBMQoxNjVsBUEpfP9+3vzK+8Fep4f1Ib/+mg2BOKZ
T/A2KC5u0TVuOK0isXpsYZ/OOFIeZmafKx/YGPWpH87JiLf8BUeOVB7tb2ZfOX7o
rRG/yeSQwXqZGrGds9zkvpfAMtNx5NgjJVyj6q/DtY2BHLBUGuRDFqtxgwl9qDmX
bKdAfyJZ4jH5c0rcTy3XdNCe7fL9zA9molgq417d7olF36oSK0HeFDUbPpI9JDrW
ssLGEzxU11qCKcxFB8PHY7U0y9nnTa/SCWH9Om5bHP3lo/X2GwXM0SZ5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtwBKzi9pE9N/aOAObiLYIPG0keMB8GA1UdIwQY
MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt
NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl
LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSQaJs0X
5wYSxht0dochX/6WiMLIFDoAEnPoNQJzIRPXCwcu1uI5tTivKF7iOWggiQSOn2lo
FkpStaozriun8KaYCw4resj3HBwDzMtQtLzJwiqOX4j2r8yysR1aIBA9RVNpUQCe
0tHKR/9qYKPNE4ZDDKmXDfEe0sO/7jC1iSexagJMCD8LKXt2f1SgVclzjv4Wnu8D
9qMOQDK/vbwqiKXFIPQPyONq5sauv7TSfHuQfuWHh3wZEfFkzrnU2eThCKCFO1x4
JYDeSpgDfj2V7p47e6neqa04syAsJv9mMlqeaiWr/EsTdq4Nl3rmELZoyACX+eim
pSgAJe5OoyWN4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:01 2026 by rpki-client