
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: 9eQCrMsZZJ2C6sEpoAP8FEeDIpxsd2LH6E4V820VdXg=
Subject key identifier: C4:9C:8E:22:9A:10:FA:AD:CA:0A:1F:67:00:75:F4:AF:0D:6F:7F:4D
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 019D27A8F4920B41FACE6815DD7A1CB2B8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:17 +0000
Manifest this update: Thu 26 Mar 2026 01:01:17 +0000
Manifest next update: Fri 27 Mar 2026 01:01:17 +0000
Files and hashes: 1: IjagGyFWurObl2pWMvY0N09uD1o.roa (hash: hWJUOuTqtYv/o+T0eJBFqPEt0KW/yUBcSYg2LFL48DQ=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: mb45Q86ehu5DlcsKQwDp4DATqJQMCMUEROyCHZUYo+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f4:92:0b:41:fa:ce:68:15:dd:7a:1c:b2:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Mar 26 01:01:17 2026 GMT
Not After : Mar 27 01:01:17 2026 GMT
Subject: CN=c49c8e229a10faadca0a1f670075f4af0d6f7f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:58:24:7b:af:e8:16:2b:c4:e9:a1:e1:f0:
64:e6:58:47:3a:39:f3:00:99:ef:bd:0e:13:f6:8f:
67:8d:a9:09:44:76:38:40:97:6b:af:eb:e5:10:1c:
c2:eb:2c:38:cc:9a:3f:ef:d3:2d:fd:9e:28:14:18:
ba:e0:8e:bc:a9:9d:d5:ae:c0:74:16:d6:35:9c:da:
ff:43:de:8f:f2:b0:4c:52:e5:8a:48:ca:c8:cb:00:
98:8f:eb:41:89:d4:25:28:6e:21:b3:e3:22:2f:cf:
51:e0:bf:64:01:1c:dd:b7:58:6d:6c:b0:a3:c4:df:
4a:4e:af:87:0b:04:8f:46:99:06:71:73:00:12:f1:
93:6f:bd:44:63:87:83:eb:9d:c4:2a:2e:4e:6e:e7:
f1:5b:77:91:55:d4:04:65:bd:16:cd:b9:df:19:92:
3d:b0:b2:a7:eb:22:a7:d6:ae:8d:ef:1b:95:46:24:
16:84:3e:45:a8:d7:1a:7b:49:87:ee:a0:44:8e:3a:
61:80:d7:fb:11:8f:4f:13:0b:de:9d:a3:11:7d:11:
d2:cf:d7:da:f1:35:36:54:f4:e3:0a:4b:a1:45:9b:
42:95:de:ab:d7:75:bd:66:2c:c1:07:cd:8e:32:68:
70:96:23:2b:7c:54:12:d1:7f:a2:14:27:11:73:98:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:8E:22:9A:10:FA:AD:CA:0A:1F:67:00:75:F4:AF:0D:6F:7F:4D
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:10:18:2c:91:ed:ca:30:24:a3:84:7a:5d:6d:5f:d7:1e:
46:5a:46:fe:c0:53:00:36:cf:eb:05:5d:78:51:2a:2b:f7:1e:
00:01:ee:24:be:a1:c8:c5:88:81:c4:64:24:27:5e:24:c8:09:
85:c2:54:25:67:70:d5:47:0b:12:5e:d8:20:e0:5a:8d:50:b8:
aa:b6:8b:e6:7d:e3:f4:4e:04:c2:c9:ab:07:53:1e:0c:bb:cd:
4b:99:db:dc:f2:bb:c5:20:b9:0b:9b:24:de:52:27:55:90:b9:
e0:03:a6:46:eb:d1:86:69:a9:3a:58:0e:4a:d6:c0:75:96:5d:
b2:83:0d:33:81:65:26:ef:8b:90:97:67:37:82:d3:48:22:61:
3f:c4:1a:4b:ef:26:31:7a:3d:ca:37:a8:3d:a4:67:a0:60:dd:
d1:75:2c:24:dc:bb:e3:ce:28:ba:62:9d:56:1b:18:d1:bf:8c:
7f:d1:94:a6:ba:d6:8b:f0:88:32:73:50:47:8a:fa:3a:90:2f:
09:13:c6:e5:10:77:38:9a:ea:11:00:57:5c:83:ba:03:2f:b8:
7b:b8:f0:15:57:aa:8b:d9:21:4e:9d:9a:37:6f:4b:38:c4:bf:
b4:4c:4c:14:9c:8a:4e:dd:59:6d:cb:87:38:a0:c9:70:23:1d:
1b:27:72:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPSSC0H6zmgV3XocsrjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2
YTM4NmUwHhcNMjYwMzI2MDEwMTE3WhcNMjYwMzI3MDEwMTE3WjAzMTEwLwYDVQQD
EyhjNDljOGUyMjlhMTBmYWFkY2EwYTFmNjcwMDc1ZjRhZjBkNmY3ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QtYJHuv6BYrxOmh4fBk5lhHOjnz
AJnvvQ4T9o9njakJRHY4QJdrr+vlEBzC6yw4zJo/79Mt/Z4oFBi64I68qZ3VrsB0
FtY1nNr/Q96P8rBMUuWKSMrIywCYj+tBidQlKG4hs+MiL89R4L9kARzdt1htbLCj
xN9KTq+HCwSPRpkGcXMAEvGTb71EY4eD653EKi5ObufxW3eRVdQEZb0WzbnfGZI9
sLKn6yKn1q6N7xuVRiQWhD5FqNcae0mH7qBEjjphgNf7EY9PEwvenaMRfRHSz9fa
8TU2VPTjCkuhRZtCld6r13W9ZizBB82OMmhwliMrfFQS0X+iFCcRc5jMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMScjiKaEPqtygofZwB19K8Nb39NMB8GA1UdIwQY
MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt
YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw
LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxkQGCyR
7cowJKOEel1tX9ceRlpG/sBTADbP6wVdeFEqK/ceAAHuJL6hyMWIgcRkJCdeJMgJ
hcJUJWdw1UcLEl7YIOBajVC4qraL5n3j9E4EwsmrB1MeDLvNS5nb3PK7xSC5C5sk
3lInVZC54AOmRuvRhmmpOlgOStbAdZZdsoMNM4FlJu+LkJdnN4LTSCJhP8QaS+8m
MXo9yjeoPaRnoGDd0XUsJNy7484oumKdVhsY0b+Mf9GUprrWi/CIMnNQR4r6OpAv
CRPG5RB3OJrqEQBXXIO6Ay+4e7jwFVeqi9khTp2aN29LOMS/tExMFJyKTt1ZbcuH
OKDJcCMdGydyWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:57 2026 by rpki-client