Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: xsQ2kWIgHTgUByOacyQzQuaMtgqV/JgLDGuOSYYL/E8=
Subject key identifier: 07:B0:8F:8A:49:C0:7A:6E:33:43:D3:37:3E:35:AB:73:7C:D1:10:BF
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 01A0CE5A6CC1966EA9AA81BDBBF64025B797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 17D8
Signing time: Wed 23 Sep 2026 13:00:27 +0000
Manifest this update: Wed 23 Sep 2026 13:00:27 +0000
Manifest next update: Thu 24 Sep 2026 13:00:27 +0000
Files and hashes: 1: MbNlUQjdzpnQDNMCae9f42WE5pY.roa (hash: n9mXyj62N2Bl5BqH7SgmfSMdlY5E0hGp40Rxg/eQn60=)
2: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: rfG4YxY5WKDkMpM/h99TsRpSx7WuNmvcsTWrFOcCLtI=)
3: juiIPjLer9vbdJkXSU-SEN0CUs8.roa (hash: ubXvY3uPSZ0bvw91XDHx5DvGnkRcxXW06wCBOpNLH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:6c:c1:96:6e:a9:aa:81:bd:bb:f6:40:25:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Sep 23 13:00:27 2026 GMT
Not After : Sep 24 13:00:27 2026 GMT
Subject: CN=07b08f8a49c07a6e3343d3373e35ab737cd110bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:59:03:86:f5:f1:f8:5d:cf:9e:58:5e:77:
5a:43:15:44:2a:5e:5a:52:c9:61:ef:21:96:d3:f1:
7f:ed:bb:14:ca:67:f2:84:c5:7e:68:e5:3c:e5:8c:
0f:89:ee:d6:48:4f:84:ca:80:98:f5:18:4a:9c:6b:
10:5a:20:4e:9f:6a:c0:61:27:1d:59:ef:aa:17:d1:
48:f4:60:fe:b2:0c:fd:0c:2a:93:af:77:fc:ea:58:
ca:52:4e:4b:33:2c:3d:0b:fc:7f:b3:ad:9f:0d:f9:
10:0c:55:0a:92:5b:fa:2e:36:85:32:48:b9:fc:97:
7c:34:a1:c8:45:ac:03:03:01:ff:41:97:11:d5:91:
df:96:5d:b7:cf:f9:7a:7b:3a:90:88:18:31:7e:52:
1b:56:5c:c1:a2:b7:6a:95:f2:03:2e:6c:e5:45:cc:
89:a3:dd:bd:16:c6:a7:c9:c0:b1:09:f3:9a:da:34:
1c:1c:07:bd:e2:25:9f:39:de:d1:36:3e:8b:1a:27:
35:e9:96:1d:f2:72:01:a6:86:16:81:f1:f5:cd:e4:
0b:28:d5:23:b8:8b:27:40:79:9d:03:ea:3d:32:b3:
a5:32:b8:eb:05:94:9f:e1:56:39:24:06:90:0f:3f:
c8:48:1b:27:9d:3d:f6:87:a9:59:ca:48:45:7c:72:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B0:8F:8A:49:C0:7A:6E:33:43:D3:37:3E:35:AB:73:7C:D1:10:BF
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ea:ad:7d:4f:b9:41:3a:36:87:5a:8c:d1:1e:08:a8:f5:c3:
87:d1:04:63:24:c3:93:86:25:37:84:69:4d:91:34:34:43:ad:
d9:aa:a2:f0:3c:00:82:b5:eb:e4:f7:ce:06:93:47:7a:cd:3b:
73:c0:58:01:50:67:b0:8b:be:f9:13:8f:bf:70:27:47:86:06:
8d:b4:61:37:13:ef:42:d9:be:dc:22:4c:7b:2a:78:e4:f2:4a:
62:73:62:46:9a:1c:d7:d9:76:29:f5:38:1a:51:a4:96:69:cf:
10:47:21:5c:ef:58:c3:11:cb:20:60:9b:2b:81:6d:37:b5:b7:
04:3f:e2:14:54:b3:ba:8d:6f:a9:36:48:35:9a:00:78:ae:3b:
f2:10:69:ec:f1:a5:05:d9:cb:13:d7:f4:70:4f:93:90:de:b2:
73:6b:b2:e0:cb:b9:8d:4a:de:df:d6:72:1b:02:5f:05:c1:34:
33:e5:13:e5:cc:3a:69:67:e7:c3:51:c2:8b:fe:91:29:5e:fb:
d0:0a:c0:45:2b:6e:34:ce:c5:b6:2c:d7:95:f0:a1:5f:19:65:
9b:fb:5b:a7:0b:99:04:9c:2a:5b:f9:70:b6:60:a4:70:c2:c3:
bc:79:1d:b5:0c:3f:4e:f9:91:35:03:c0:29:d0:08:26:18:07:
86:5e:b1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWmzBlm6pqoG9u/ZAJbeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTgzOWVhNTliOTc1ODI0ZmQ3MDhhMGFkNzM1NTUwMDE3
Y2JmN2MwHhcNMjYwOTIzMTMwMDI3WhcNMjYwOTI0MTMwMDI3WjAzMTEwLwYDVQQD
EygwN2IwOGY4YTQ5YzA3YTZlMzM0M2QzMzczZTM1YWI3MzdjZDExMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKxZA4b18fhdz55YXndaQxVEKl5a
Uslh7yGW0/F/7bsUymfyhMV+aOU85YwPie7WSE+EyoCY9RhKnGsQWiBOn2rAYScd
We+qF9FI9GD+sgz9DCqTr3f86ljKUk5LMyw9C/x/s62fDfkQDFUKklv6LjaFMki5
/Jd8NKHIRawDAwH/QZcR1ZHfll23z/l6ezqQiBgxflIbVlzBordqlfIDLmzlRcyJ
o929FsanycCxCfOa2jQcHAe94iWfOd7RNj6LGic16ZYd8nIBpoYWgfH1zeQLKNUj
uIsnQHmdA+o9MrOlMrjrBZSf4VY5JAaQDz/ISBsnnT32h6lZykhFfHIoTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAewj4pJwHpuM0PTNz41q3N80RC/MB8GA1UdIwQY
MBaAFHfoOepZuXWCT9cIoK1zVVABfL98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUt
Yzc5YTNmYTcxZDM0LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUtYzc5YTNmYTcxZDM0
LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOqtfU+5
QTo2h1qM0R4IqPXDh9EEYyTDk4YlN4RpTZE0NEOt2aqi8DwAgrXr5PfOBpNHes07
c8BYAVBnsIu++ROPv3AnR4YGjbRhNxPvQtm+3CJMeyp45PJKYnNiRpoc19l2KfU4
GlGklmnPEEchXO9YwxHLIGCbK4FtN7W3BD/iFFSzuo1vqTZINZoAeK478hBp7PGl
BdnLE9f0cE+TkN6yc2uy4Mu5jUre39ZyGwJfBcE0M+UT5cw6aWfnw1HCi/6RKV77
0ArARStuNM7FtizXlfChXxllm/tbpwuZBJwqW/lwtmCkcMLDvHkdtQw/TvmRNQPA
KdAIJhgHhl6xig==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:53 2026 by rpki-client