Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: xAr8Te1b8VLwX8902rPIf2Eci+0bgN9rwH8wVFlQFJE=
Subject key identifier: B5:1A:46:4E:EE:B2:D2:9E:BD:7D:53:73:BD:AE:9A:40:FB:90:25:5E
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019D26CCF76CABE5437B4D83A1D416BAD193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: ACMwaAvueA5hj2k5vPo_qhJ133c.roa (hash: cdrRftiXvx3VVL7eXRerOEoJNGRyUrwNZfHdITSoxdk=)
2: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: VF3eOMwPcHjlVzEP6EZjiAGXrXTmArw57+AAZOmh0BE=)
3: jnbKsQGegNxjdm1zgvtf-2y2JHU.roa (hash: f0JFyB2CkMNujvorViUmIgNxI65wDl2h0L0eKcz8mXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f7:6c:ab:e5:43:7b:4d:83:a1:d4:16:ba:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=b51a464eeeb2d29ebd7d5373bdae9a40fb90255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:b9:8c:ed:70:a7:cb:06:6c:37:32:95:91:
47:a6:38:05:e6:1d:d4:1b:d1:f5:3d:3f:04:f9:f2:
a7:b1:c9:a6:0d:79:e4:cd:1b:01:15:49:c7:04:4d:
c6:74:8a:06:f3:df:d1:87:a5:f7:48:06:bd:56:9f:
2c:38:44:13:fe:da:17:fc:9a:67:e0:12:e2:61:cc:
38:44:60:83:39:df:59:13:ce:1b:1a:b4:fe:72:23:
23:4b:89:30:b0:bb:28:63:ac:0c:cd:9b:e5:b6:dc:
67:76:56:33:d9:df:ba:2c:e7:65:72:12:3a:73:e0:
de:3a:1e:c7:7c:69:ce:8e:17:55:19:c6:76:39:dd:
5c:43:d6:f1:7a:22:38:7b:1a:47:03:88:e7:67:05:
d8:74:80:5f:2c:b0:56:73:c0:71:6e:88:ab:48:a8:
02:05:ce:57:b7:ab:d2:99:05:33:52:b1:f3:2f:92:
ac:d6:2a:74:6b:59:01:d5:d8:ef:9d:37:19:1f:a4:
fc:94:02:4b:55:df:a1:73:d3:e3:40:e3:45:bd:b1:
42:e3:e0:87:23:9c:40:07:f6:fc:a9:ad:10:5a:03:
ad:94:c4:12:24:78:0a:13:a6:c5:f9:32:df:99:69:
76:7c:36:97:e9:9a:fb:e2:c4:0e:42:5b:c2:00:4f:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:46:4E:EE:B2:D2:9E:BD:7D:53:73:BD:AE:9A:40:FB:90:25:5E
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ab:0b:dc:91:d2:d4:c2:d6:87:66:25:57:bf:3a:4b:d9:b4:
03:8b:73:d2:01:f3:e3:fe:37:b3:4a:93:18:91:02:2d:f6:3f:
bb:23:b3:7c:cb:79:72:aa:d3:10:c5:8f:49:38:5c:9d:2a:b8:
3e:83:dd:d9:0e:b2:41:ae:2e:f0:33:d0:34:0f:d1:1c:c5:bf:
f7:d3:d0:2a:c7:80:ce:56:49:9d:44:37:f3:2e:32:97:83:45:
3b:2e:a1:17:73:6b:9c:17:03:5e:93:89:6e:c1:38:9e:85:1a:
85:52:58:96:4e:8f:d2:73:44:cd:5c:f8:f4:2b:9c:6c:3f:ac:
c8:a1:51:63:e7:21:68:75:ea:b0:1d:8e:bc:78:2d:3f:67:45:
5c:c4:f1:1f:d1:18:d9:7e:e9:6b:d0:48:f3:17:a7:77:31:67:
e4:b1:04:92:bb:ab:d7:1b:75:0f:6e:bf:46:02:fa:c9:6c:cb:
4b:6e:14:31:dd:94:9c:70:06:56:36:dd:a8:5f:b2:01:cc:86:
76:ba:75:92:6c:9d:37:5f:62:23:b7:6e:82:a9:46:aa:93:e3:
d8:62:bf:61:58:8a:14:4b:76:e6:f0:21:f4:16:9b:aa:19:52:
20:44:03:fa:c9:3b:5d:32:9e:3a:fe:63:9a:b3:93:be:64:f4:
07:0d:0e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPdsq+VDe02DodQWutGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MmIwZDcyYmYwNzQzYmYyY2RjNzhiYTFmNTNlOWE5ODhm
OWFmMWUwHhcNMjYwMzI1MjEwMDU5WhcNMjYwMzI2MjEwMDU5WjAzMTEwLwYDVQQD
EyhiNTFhNDY0ZWVlYjJkMjllYmQ3ZDUzNzNiZGFlOWE0MGZiOTAyNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHe5jO1wp8sGbDcylZFHpjgF5h3U
G9H1PT8E+fKnscmmDXnkzRsBFUnHBE3GdIoG89/Rh6X3SAa9Vp8sOEQT/toX/Jpn
4BLiYcw4RGCDOd9ZE84bGrT+ciMjS4kwsLsoY6wMzZvlttxndlYz2d+6LOdlchI6
c+DeOh7HfGnOjhdVGcZ2Od1cQ9bxeiI4expHA4jnZwXYdIBfLLBWc8BxboirSKgC
Bc5Xt6vSmQUzUrHzL5Ks1ip0a1kB1djvnTcZH6T8lAJLVd+hc9PjQONFvbFC4+CH
I5xAB/b8qa0QWgOtlMQSJHgKE6bF+TLfmWl2fDaX6Zr74sQOQlvCAE8L+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUaRk7ustKevX1Tc72umkD7kCVeMB8GA1UdIwQY
MBaAFHUrDXK/B0O/LNx4uh9T6amI+a8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjct
NjkxMjE5MjEzNGU5LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjctNjkxMjE5MjEzNGU5
LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6sL3JHS
1MLWh2YlV786S9m0A4tz0gHz4/43s0qTGJECLfY/uyOzfMt5cqrTEMWPSThcnSq4
PoPd2Q6yQa4u8DPQNA/RHMW/99PQKseAzlZJnUQ38y4yl4NFOy6hF3NrnBcDXpOJ
bsE4noUahVJYlk6P0nNEzVz49CucbD+syKFRY+chaHXqsB2OvHgtP2dFXMTxH9EY
2X7pa9BI8xendzFn5LEEkrur1xt1D26/RgL6yWzLS24UMd2UnHAGVjbdqF+yAcyG
drp1kmydN19iI7dugqlGqpPj2GK/YViKFEt25vAh9BabqhlSIEQD+sk7XTKeOv5j
mrOTvmT0Bw0O4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:24 2026 by rpki-client