Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: QxUJvxmnsHO3TwTAtZDTLwFMfOnhE99D+khk/xQ8/AU=
Subject key identifier: 42:6B:B4:98:1C:9C:5B:D7:7A:CF:37:80:A5:85:7A:EC:20:3E:53:F0
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019D25F121CCC7CCE080AD5948439F8C9DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 134F
Signing time: Wed 25 Mar 2026 17:00:52 +0000
Manifest this update: Wed 25 Mar 2026 17:00:52 +0000
Manifest next update: Thu 26 Mar 2026 17:00:52 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: nJaTw2e6XkkJMupxRW2tMSuYBFgCs8ETGjMnxyW+5So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:21:cc:c7:cc:e0:80:ad:59:48:43:9f:8c:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Mar 25 17:00:52 2026 GMT
Not After : Mar 26 17:00:52 2026 GMT
Subject: CN=426bb4981c9c5bd77acf3780a5857aec203e53f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:3c:a6:52:da:44:4f:6b:22:6a:c1:13:29:
b2:79:dd:66:fa:7e:a0:54:75:78:e6:d6:2e:5c:38:
7a:20:e8:4d:17:32:88:a0:2d:6a:cb:89:85:5b:44:
0d:58:5e:d1:3b:43:45:65:19:a3:3f:98:25:26:fb:
80:cb:4f:1a:56:32:3e:51:fa:57:f5:6d:6a:55:48:
ea:70:ac:c5:9a:5e:20:21:7b:c2:0d:cd:47:20:bb:
e0:14:ff:d1:a7:2b:42:39:63:3d:0c:bb:06:d1:2f:
40:65:a2:99:70:b6:b5:66:9d:28:09:c4:b9:cf:9e:
7e:53:7a:65:6b:f5:d4:5b:09:2f:dc:76:f9:d1:4d:
fa:aa:72:7c:33:27:8a:d4:f7:b6:55:7b:f4:c3:a1:
28:b9:5c:9c:61:01:1b:db:bf:ee:05:0a:df:78:f3:
9b:09:dd:bd:8c:95:9a:4f:d3:fe:37:62:96:42:26:
2c:1f:f8:e6:9f:38:0e:f6:c7:b9:10:33:b8:fe:74:
e4:12:e2:73:d9:d0:84:3f:c5:16:92:fe:0f:49:e6:
e1:12:0e:4b:23:b6:16:ed:78:51:ae:fd:67:59:5f:
67:4c:8a:51:08:c6:e1:53:d6:05:27:0e:00:1a:0c:
81:10:48:f9:22:b7:23:6d:00:11:8c:bc:d9:27:e7:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:B4:98:1C:9C:5B:D7:7A:CF:37:80:A5:85:7A:EC:20:3E:53:F0
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e0:df:6b:c6:6d:99:35:d7:c5:1c:4f:91:ba:eb:13:1b:67:
57:91:fd:2c:a2:5f:00:c6:e2:92:a2:28:79:c5:e8:48:de:a0:
f6:f3:09:3d:11:9f:d9:8c:0f:8a:a4:be:3e:62:a7:f0:0b:1e:
4b:97:cd:06:e4:cf:3e:9f:77:95:6f:67:3b:52:79:87:53:6a:
87:0d:ca:5c:a7:d6:fe:09:57:fc:fc:87:8e:46:25:e3:ce:94:
39:6a:a1:13:05:07:0a:b7:18:dd:48:fe:2f:4d:25:62:4c:1f:
ed:81:2e:eb:76:b3:b5:e3:6b:2f:b9:54:6d:a2:f1:fd:d5:9d:
83:5f:8a:ee:47:dc:59:ba:28:55:e1:94:2c:22:30:77:86:a4:
f9:8e:db:9b:01:08:da:7b:9c:38:a9:89:c2:64:dd:af:39:12:
31:da:a5:1f:2e:1e:a3:ee:d5:ec:02:e0:1c:1e:f9:41:60:2d:
f4:12:ee:2c:2b:29:53:99:17:78:c9:1f:dc:d7:31:57:c6:35:
69:cb:1e:d7:03:92:3a:e6:db:02:40:f2:8d:2b:e7:5e:e8:dd:
08:68:d5:1f:a6:0c:86:4a:a6:22:36:d3:d1:c1:75:fe:52:40:
48:6a:9b:4d:0b:2a:ef:52:19:46:3b:e0:a6:f6:3b:6e:bd:65:
28:05:c7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8SHMx8zggK1ZSEOfjJ3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwMzI1MTcwMDUyWhcNMjYwMzI2MTcwMDUyWjAzMTEwLwYDVQQD
Eyg0MjZiYjQ5ODFjOWM1YmQ3N2FjZjM3ODBhNTg1N2FlYzIwM2U1M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswM8plLaRE9rImrBEymyed1m+n6g
VHV45tYuXDh6IOhNFzKIoC1qy4mFW0QNWF7RO0NFZRmjP5glJvuAy08aVjI+UfpX
9W1qVUjqcKzFml4gIXvCDc1HILvgFP/RpytCOWM9DLsG0S9AZaKZcLa1Zp0oCcS5
z55+U3pla/XUWwkv3Hb50U36qnJ8MyeK1Pe2VXv0w6EouVycYQEb27/uBQrfePOb
Cd29jJWaT9P+N2KWQiYsH/jmnzgO9se5EDO4/nTkEuJz2dCEP8UWkv4PSebhEg5L
I7YW7XhRrv1nWV9nTIpRCMbhU9YFJw4AGgyBEEj5IrcjbQARjLzZJ+eglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJrtJgcnFvXes83gKWFeuwgPlPwMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOODfa8Zt
mTXXxRxPkbrrExtnV5H9LKJfAMbikqIoecXoSN6g9vMJPRGf2YwPiqS+PmKn8Ase
S5fNBuTPPp93lW9nO1J5h1Nqhw3KXKfW/glX/PyHjkYl486UOWqhEwUHCrcY3Uj+
L00lYkwf7YEu63azteNrL7lUbaLx/dWdg1+K7kfcWbooVeGULCIwd4ak+Y7bmwEI
2nucOKmJwmTdrzkSMdqlHy4eo+7V7ALgHB75QWAt9BLuLCspU5kXeMkf3NcxV8Y1
acse1wOSOubbAkDyjSvnXujdCGjVH6YMhkqmIjbT0cF1/lJASGqbTQsq71IZRjvg
pvY7br1lKAXHMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client