Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: OugroFpYX7PGOd/QR8MvbWxMEL+X1+h9eFzPusQyo2g=
Subject key identifier: B5:83:2A:10:07:79:70:DD:D1:DE:EF:94:88:2D:F1:3D:36:42:95:66
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019D29299818338FD0E37EA256853D6BDEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 02DD
Signing time: Thu 26 Mar 2026 08:01:24 +0000
Manifest this update: Thu 26 Mar 2026 08:01:24 +0000
Manifest next update: Fri 27 Mar 2026 08:01:24 +0000
Files and hashes: 1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: Ex/fKJDvzxoyKiuozJRB6v/F4vP0kpSBS9AxGvBuXog=)
5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:98:18:33:8f:d0:e3:7e:a2:56:85:3d:6b:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Mar 26 08:01:24 2026 GMT
Not After : Mar 27 08:01:24 2026 GMT
Subject: CN=b5832a10077970ddd1deef94882df13d36429566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:ae:09:b6:21:f6:ae:05:98:02:58:35:e9:
48:bf:55:c9:76:89:da:55:cc:a6:cb:72:c3:35:67:
d7:ea:c5:ec:96:9b:38:78:68:97:60:31:7b:3f:09:
9e:26:a4:ae:5f:e8:53:19:fb:c2:21:57:b7:83:e8:
55:5c:f5:fc:95:78:48:92:8b:a8:75:c8:d6:4e:26:
52:7e:2d:f9:5e:c1:b2:08:15:68:84:cd:20:fb:43:
8e:90:dc:cf:01:ac:22:c6:e7:2d:3a:ef:26:c8:81:
0b:6f:82:95:6a:ea:88:4d:31:b2:45:e7:00:3a:1e:
4d:0e:60:76:da:8b:5a:33:8b:a6:e3:ab:51:67:cd:
c4:f8:03:30:30:b7:a5:b0:81:ad:a9:fb:17:71:88:
cc:36:56:5b:ce:a1:0f:cb:93:64:88:f7:e2:ef:df:
af:20:12:31:b2:c1:fa:76:16:dc:ad:76:86:5c:96:
fa:63:b6:04:74:e3:4d:df:cd:5a:ef:39:84:be:a3:
e7:8b:40:33:24:e6:8c:14:ee:47:7d:45:27:10:bc:
96:b1:e1:e4:18:88:2e:d3:62:ef:32:86:b6:7a:ba:
6b:6c:de:1f:ea:5d:6f:86:0c:fb:00:94:b1:27:54:
0d:67:97:6e:b5:9d:50:a2:28:37:a5:e1:cf:3b:e8:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:2A:10:07:79:70:DD:D1:DE:EF:94:88:2D:F1:3D:36:42:95:66
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:10:c9:15:3a:9c:8b:85:a6:d8:78:19:13:af:76:85:03:66:
91:42:67:b3:54:74:96:4a:66:15:a1:10:c2:91:3c:0e:e0:ec:
e9:f0:ab:68:99:fc:57:36:82:e1:c6:62:0a:da:cd:c6:55:14:
cb:30:52:f2:14:e6:f5:96:0f:40:ae:cb:3e:f0:ed:65:80:72:
96:32:42:ca:ac:91:77:1b:97:65:b4:c9:b0:47:9b:df:cd:aa:
bc:92:ac:f4:a5:c2:a6:84:9e:c0:ec:b4:a1:04:02:8d:6b:42:
26:27:f2:15:5f:7e:ea:08:2a:91:64:f2:7e:64:fb:76:a1:b1:
64:82:30:c9:91:b9:57:d3:13:75:08:81:7c:30:1b:9f:04:dd:
33:41:ee:03:59:1b:9e:aa:df:ed:2e:29:96:22:67:30:74:01:
07:79:d0:c0:57:32:8f:6f:65:46:42:40:0f:35:61:82:44:98:
f8:5e:cd:b6:41:e5:d8:0c:f7:23:a8:45:51:bd:ee:41:d9:28:
65:c0:ec:62:23:23:8d:9a:0f:80:4c:e0:d7:74:53:c3:0e:4d:
92:42:3e:02:dc:da:de:1c:15:fc:6b:34:03:1b:d4:a6:ef:b7:
87:c3:b6:fe:76:1c:c4:a6:cf:f5:43:61:bf:71:b4:1f:9b:ab:
b9:0f:03:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKZgYM4/Q436iVoU9a97cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm
NTNkYjIwHhcNMjYwMzI2MDgwMTI0WhcNMjYwMzI3MDgwMTI0WjAzMTEwLwYDVQQD
EyhiNTgzMmExMDA3Nzk3MGRkZDFkZWVmOTQ4ODJkZjEzZDM2NDI5NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic6uCbYh9q4FmAJYNelIv1XJdona
Vcymy3LDNWfX6sXslps4eGiXYDF7PwmeJqSuX+hTGfvCIVe3g+hVXPX8lXhIkouo
dcjWTiZSfi35XsGyCBVohM0g+0OOkNzPAawixuctOu8myIELb4KVauqITTGyRecA
Oh5NDmB22otaM4um46tRZ83E+AMwMLelsIGtqfsXcYjMNlZbzqEPy5NkiPfi79+v
IBIxssH6dhbcrXaGXJb6Y7YEdONN381a7zmEvqPni0AzJOaMFO5HfUUnELyWseHk
GIgu02LvMoa2erprbN4f6l1vhgz7AJSxJ1QNZ5dutZ1Qoig3peHPO+ieOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWDKhAHeXDd0d7vlIgt8T02QpVmMB8GA1UdIwQY
MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt
ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh
LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRDJFTqc
i4Wm2HgZE692hQNmkUJns1R0lkpmFaEQwpE8DuDs6fCraJn8VzaC4cZiCtrNxlUU
yzBS8hTm9ZYPQK7LPvDtZYByljJCyqyRdxuXZbTJsEeb382qvJKs9KXCpoSewOy0
oQQCjWtCJifyFV9+6ggqkWTyfmT7dqGxZIIwyZG5V9MTdQiBfDAbnwTdM0HuA1kb
nqrf7S4pliJnMHQBB3nQwFcyj29lRkJADzVhgkSY+F7NtkHl2Az3I6hFUb3uQdko
ZcDsYiMjjZoPgEzg13RTww5NkkI+Atza3hwV/Gs0AxvUpu+3h8O2/nYcxKbP9UNh
v3G0H5uruQ8DwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:34:21 2026 by rpki-client