Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: g1xkcuhTKuVcvVr2MHgNo5EeYMk7SZF2zXNUSJYKS4A=
Subject key identifier: 30:CD:3D:15:65:63:69:14:D2:70:20:56:8B:2A:B5:29:57:C5:A8:FE
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 019E1F7E90041EE0B0F75846FB6EB7FFC79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 027F
Signing time: Wed 13 May 2026 04:00:48 +0000
Manifest this update: Wed 13 May 2026 04:00:48 +0000
Manifest next update: Thu 14 May 2026 04:00:48 +0000
Files and hashes: 1: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: i8oFcBmhzZ0mE/iS3QsddxxmOttBnBAIBIM5iDcXWR8=)
2: i5v8Z7TLwK1d1522dak6QJo-ZdI.roa (hash: dORF0I0Mm7ul7rA3/PIS0cDu8jhdXdBq0BX2+YuQ/kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:90:04:1e:e0:b0:f7:58:46:fb:6e:b7:ff:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: May 13 04:00:48 2026 GMT
Not After : May 14 04:00:48 2026 GMT
Subject: CN=30cd3d1565636914d27020568b2ab52957c5a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:0a:98:ed:52:0a:ae:1b:43:c4:2a:2b:65:
16:69:a9:6b:8a:d1:aa:1f:9b:07:dc:93:94:9c:27:
4e:83:73:32:cf:65:c7:be:f4:52:76:fa:e6:f4:75:
6e:8d:a7:08:a2:8a:87:5d:6a:f0:0e:b4:f6:36:95:
44:e1:cb:03:5b:8b:ea:f4:b1:4e:91:6f:18:7a:39:
e0:64:3d:73:d8:fb:bf:34:54:9b:00:06:24:43:c0:
dc:6d:c2:32:17:57:b4:34:00:ce:e5:21:c5:ce:eb:
e0:91:5d:42:fa:8d:37:22:e5:d6:fc:48:a6:cf:30:
dc:07:6d:7c:18:c7:1d:58:3a:c1:43:ec:37:b4:94:
b7:e7:a7:b3:a3:e2:ea:f9:a4:33:4c:96:61:7a:0f:
62:fd:38:b2:d9:b7:5c:41:e2:a9:94:88:37:0c:bc:
a2:41:3e:1b:b7:b3:76:b1:b1:56:97:b7:6f:91:6f:
89:50:6a:4e:b7:1a:fe:d2:3f:bd:7c:98:95:4c:e2:
42:a4:1d:4f:af:b6:45:a8:7b:c9:ed:a8:e9:be:78:
66:98:54:0d:60:22:dd:b7:6a:08:90:07:45:54:5f:
e4:4d:22:16:c3:6b:96:e8:14:ef:22:30:f8:6d:6a:
49:be:cf:76:08:a3:88:05:73:b1:9e:11:af:61:4d:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:3D:15:65:63:69:14:D2:70:20:56:8B:2A:B5:29:57:C5:A8:FE
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:34:f1:aa:bb:b3:96:e3:4a:07:7a:ba:1f:b1:c8:c8:d1:87:
fc:8f:8f:7b:71:eb:72:a5:56:86:99:8f:d8:69:be:b5:69:49:
1d:5e:bc:ec:4d:24:ec:9f:10:4f:7f:a4:06:d8:51:9e:82:cb:
42:9d:3d:d7:b5:49:de:f2:00:64:ba:69:02:2f:fa:d5:a5:8c:
db:1f:67:81:48:9c:06:ad:f3:83:5e:c6:c4:e6:99:1c:e7:d0:
ff:2d:18:b1:f1:df:d1:a1:7e:8b:97:eb:47:9e:5e:b4:a6:80:
8a:3c:e6:8a:fb:d9:a3:48:3c:e1:09:dd:b0:0e:47:b3:a3:38:
c2:58:c0:6f:d3:9b:c0:86:f8:bc:9a:c4:07:b8:9b:a0:9e:d8:
9a:2c:b3:57:38:b4:f7:ab:c6:8a:95:ab:f6:82:76:0d:c0:63:
33:75:c4:fc:62:f1:15:7a:8c:41:5b:30:aa:50:b5:c8:40:b6:
6a:dd:57:53:3b:9b:b2:c2:dd:31:d1:e5:cf:ba:d5:b3:50:4e:
9b:2d:2c:6d:d5:9c:12:bf:6e:d4:5c:d0:8a:08:d5:85:f5:f4:
f1:6c:24:be:ce:64:ad:5d:ca:73:14:b2:50:07:53:7f:68:03:
4e:d5:75:1a:56:27:74:d4:a6:14:fc:37:eb:e4:c0:c1:8c:23:
00:ae:ee:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffpAEHuCw91hG+263/8efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OWQ4YTQzMjg5MzBiOTM4ZmE4NjAxOGIxZTQ0N2VlNGQ4
ZGE4ZjkwHhcNMjYwNTEzMDQwMDQ4WhcNMjYwNTE0MDQwMDQ4WjAzMTEwLwYDVQQD
EygzMGNkM2QxNTY1NjM2OTE0ZDI3MDIwNTY4YjJhYjUyOTU3YzVhOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsngKmO1SCq4bQ8QqK2UWaalritGq
H5sH3JOUnCdOg3Myz2XHvvRSdvrm9HVujacIooqHXWrwDrT2NpVE4csDW4vq9LFO
kW8YejngZD1z2Pu/NFSbAAYkQ8DcbcIyF1e0NADO5SHFzuvgkV1C+o03IuXW/Eim
zzDcB218GMcdWDrBQ+w3tJS356ezo+Lq+aQzTJZheg9i/Tiy2bdcQeKplIg3DLyi
QT4bt7N2sbFWl7dvkW+JUGpOtxr+0j+9fJiVTOJCpB1Pr7ZFqHvJ7ajpvnhmmFQN
YCLdt2oIkAdFVF/kTSIWw2uW6BTvIjD4bWpJvs92CKOIBXOxnhGvYU0wIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDNPRVlY2kU0nAgVosqtSlXxaj+MB8GA1UdIwQY
MBaAFHSdikMokwuTj6hgGLHkR+5Njaj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZmEyMTctODVmNS00ZjE5LWI5MWUt
MDg4OWUzZWNkMWY2LzEvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zZmEyMTctODVmNS00ZjE5LWI5MWUtMDg4OWUzZWNkMWY2
LzEvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDTxqruz
luNKB3q6H7HIyNGH/I+Pe3HrcqVWhpmP2Gm+tWlJHV687E0k7J8QT3+kBthRnoLL
Qp0917VJ3vIAZLppAi/61aWM2x9ngUicBq3zg17GxOaZHOfQ/y0YsfHf0aF+i5fr
R55etKaAijzmivvZo0g84QndsA5Hs6M4wljAb9ObwIb4vJrEB7iboJ7YmiyzVzi0
96vGipWr9oJ2DcBjM3XE/GLxFXqMQVswqlC1yEC2at1XUzubssLdMdHlz7rVs1BO
my0sbdWcEr9u1FzQigjVhfX08Wwkvs5krV3KcxSyUAdTf2gDTtV1GlYndNSmFPw3
6+TAwYwjAK7uiA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:45 2026 by rpki-client