Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: TTHQq9YJnf0TnME/3lRamRoG4+7yjBsIo7/t/aYw6hY=
Subject key identifier: 79:41:8C:1D:AE:F3:63:ED:E6:57:C8:DE:30:71:84:26:87:2E:A5:CA
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019D26CD1000EE8922F98C35C9A916238F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0D28
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: lKk4JM/z8umGFFTVJpEO5/WjSzfDfoBkQCjRIM+pJkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:10:00:ee:89:22:f9:8c:35:c9:a9:16:23:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=79418c1daef363ede657c8de30718426872ea5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:ad:ee:a6:e3:a0:8f:56:44:1a:cd:1e:7f:
7f:5c:4e:98:cb:ca:61:2a:04:ac:32:4a:4b:67:d8:
2f:7b:a5:a0:a7:06:cc:e9:a0:f6:6b:ff:62:e8:3e:
3c:91:e9:e3:74:d5:2f:49:40:71:a9:9f:ce:58:13:
0b:78:6b:83:84:10:2f:28:34:5c:b3:51:68:b9:cd:
2f:1d:37:f3:71:5a:3c:11:33:66:1c:36:c9:c3:0a:
1c:ac:dc:15:c9:4a:6b:5c:4d:b6:17:20:fd:b8:57:
c1:22:92:95:22:19:9a:de:23:1a:43:3a:aa:f3:dd:
ab:bf:30:c6:4e:65:46:96:02:cf:be:55:2e:e0:1d:
51:73:8a:ff:af:2d:0f:91:44:4e:98:f3:3b:d2:2d:
7e:7e:87:b3:58:d8:32:09:91:b8:95:54:27:88:84:
9b:30:32:1b:69:51:15:7e:2e:dc:cd:ea:e1:d5:38:
c5:5b:fd:c4:6a:9d:14:19:4f:11:da:a3:fb:ee:2a:
3c:fe:7a:25:a5:85:3f:83:24:39:3c:4c:3c:56:57:
3c:52:cf:13:c5:fd:10:8b:f8:3e:be:c6:98:48:74:
e4:ad:e4:b6:bd:dc:38:c8:56:95:62:bd:09:36:54:
30:bc:ab:2b:f1:e4:21:ab:95:65:70:9a:fe:5d:66:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:8C:1D:AE:F3:63:ED:E6:57:C8:DE:30:71:84:26:87:2E:A5:CA
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:aa:d1:e0:59:32:f5:a1:c4:fa:ec:2e:fd:82:d0:41:85:31:
ca:d9:4d:c0:02:b5:4d:61:e9:8a:ae:f1:c5:3e:27:41:60:cb:
91:84:ab:c7:0f:17:64:1f:6d:f6:2c:97:79:c6:42:d1:15:19:
b6:2d:20:2a:84:26:17:2e:f2:10:0f:d0:f5:08:5c:58:6a:8b:
f6:a4:5b:65:9f:7a:64:35:31:2c:7a:1a:0d:d1:c4:5f:9d:f3:
b0:d5:86:95:b7:bd:c9:da:47:0c:39:38:b7:1d:f3:98:53:c6:
6b:6a:20:2b:94:00:e1:0f:77:b0:1b:26:1a:ac:e0:ec:43:49:
b1:96:ed:b5:09:a8:e0:ce:b2:b3:8d:cf:e7:ca:32:ea:7f:ac:
bd:54:8a:52:cd:a7:e4:50:24:23:e9:7e:81:21:83:a5:c5:aa:
df:6f:e1:e8:f5:7b:7e:4b:2e:1c:3a:01:05:53:45:2b:5f:19:
30:b5:cf:0e:18:ad:ba:da:b8:00:0e:19:a7:78:f6:ac:83:58:
8f:88:36:f0:3e:b4:83:84:0b:07:e6:79:8a:f2:55:3d:07:f4:
3e:0d:0e:60:7a:63:49:3a:cd:45:6d:9d:b7:ce:6c:9c:4d:b3:
5d:d3:6d:fa:2e:df:1a:c0:9a:b4:b5:d9:37:11:fb:ca:fa:7f:
69:30:d2:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzRAA7oki+Yw1yakWI49+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwMzI1MjEwMTA2WhcNMjYwMzI2MjEwMTA2WjAzMTEwLwYDVQQD
Eyg3OTQxOGMxZGFlZjM2M2VkZTY1N2M4ZGUzMDcxODQyNjg3MmVhNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xKt7qbjoI9WRBrNHn9/XE6Yy8ph
KgSsMkpLZ9gve6WgpwbM6aD2a/9i6D48kenjdNUvSUBxqZ/OWBMLeGuDhBAvKDRc
s1Fouc0vHTfzcVo8ETNmHDbJwwocrNwVyUprXE22FyD9uFfBIpKVIhma3iMaQzqq
892rvzDGTmVGlgLPvlUu4B1Rc4r/ry0PkUROmPM70i1+foezWNgyCZG4lVQniISb
MDIbaVEVfi7czerh1TjFW/3Eap0UGU8R2qP77io8/nolpYU/gyQ5PEw8Vlc8Us8T
xf0Qi/g+vsaYSHTkreS2vdw4yFaVYr0JNlQwvKsr8eQhq5VlcJr+XWYQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlBjB2u82Pt5lfI3jBxhCaHLqXKMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6rR4Fky
9aHE+uwu/YLQQYUxytlNwAK1TWHpiq7xxT4nQWDLkYSrxw8XZB9t9iyXecZC0RUZ
ti0gKoQmFy7yEA/Q9QhcWGqL9qRbZZ96ZDUxLHoaDdHEX53zsNWGlbe9ydpHDDk4
tx3zmFPGa2ogK5QA4Q93sBsmGqzg7ENJsZbttQmo4M6ys43P58oy6n+svVSKUs2n
5FAkI+l+gSGDpcWq32/h6PV7fksuHDoBBVNFK18ZMLXPDhitutq4AA4Zp3j2rINY
j4g28D60g4QLB+Z5ivJVPQf0Pg0OYHpjSTrNRW2dt85snE2zXdNt+i7fGsCatLXZ
NxH7yvp/aTDS0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:45 2026 by rpki-client