
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: w+qaf1KS5Dtx+MACyx1RikUx0FS0gYSJGyKfALQC2kM=
Subject key identifier: E4:39:E9:8D:20:22:B4:7B:7F:F9:45:70:4D:31:BF:D5:D7:E5:12:E7
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 01A14082F477DA6C126473682BF90ECB760E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 17:01:26 +0000
Manifest this update: Thu 15 Oct 2026 17:01:26 +0000
Manifest next update: Fri 16 Oct 2026 17:01:26 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: 2jvoDDkVonF8QIvsBGFPPr3ldEONiemCZt6v161x5Co=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:f4:77:da:6c:12:64:73:68:2b:f9:0e:cb:76:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Oct 15 17:01:26 2026 GMT
Not After : Oct 16 17:01:26 2026 GMT
Subject: CN=e439e98d2022b47b7ff945704d31bfd5d7e512e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:47:7d:ef:9c:01:b0:29:76:5e:45:ae:d6:
3b:b5:b4:da:0a:6e:1d:25:75:04:cd:e4:c8:ba:cd:
e3:ae:99:51:b7:d3:1f:ee:f1:6d:cf:ce:f0:8e:fa:
15:9a:bd:eb:4f:04:a7:14:6b:40:49:1e:db:00:f4:
6b:18:44:d9:3a:a8:86:56:42:2c:84:63:95:31:9a:
80:71:a6:63:98:51:68:39:14:22:62:8c:48:cc:81:
8a:db:7b:47:11:97:21:6e:bf:e4:33:4c:0f:c9:47:
01:b6:fc:bc:67:23:c5:a6:49:92:c4:0b:b0:7e:4b:
b0:5b:62:c1:1d:2a:07:46:68:bd:75:71:3b:22:fa:
ca:7d:5d:65:03:da:53:9f:dc:14:40:fe:18:68:d3:
18:c3:9b:03:de:e6:1a:ff:1b:f2:35:82:79:4d:0c:
de:0a:62:4f:d8:fd:5d:48:11:73:39:31:62:4d:fa:
1e:6c:33:96:c2:95:a2:64:9b:3e:b0:c4:25:69:5e:
c6:98:73:4b:a3:04:fb:79:e0:c5:0c:37:13:c1:ff:
93:1c:a2:41:d0:63:38:87:64:a9:c5:cc:8d:69:e9:
bb:ac:4c:d7:8a:2e:c5:ff:31:a5:39:31:94:d2:dc:
17:20:31:1c:da:4b:cc:63:45:1f:e9:fc:7d:30:86:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:E9:8D:20:22:B4:7B:7F:F9:45:70:4D:31:BF:D5:D7:E5:12:E7
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b3:ce:5d:a8:4b:4c:5e:c2:f0:9f:10:ee:fc:17:20:fb:79:
80:b6:91:1c:2e:c1:7a:b0:16:fe:17:51:aa:52:4e:2d:80:79:
c5:bd:ba:ce:fb:96:b2:6f:aa:1f:52:d9:77:36:5d:7d:27:eb:
62:40:7a:5a:a0:f2:d7:5e:ea:62:fb:8a:6e:1d:56:3e:c5:e7:
69:be:8e:75:29:fd:6d:cc:06:62:58:9c:9d:05:e2:1e:c1:54:
07:8c:a0:64:25:e9:51:ba:4a:8a:ab:53:92:f7:29:b8:b3:72:
28:f9:5f:94:56:48:fa:e5:77:51:54:92:8d:f4:07:c2:05:1b:
e4:a9:a8:ec:19:09:5d:c8:51:79:b7:05:0f:89:44:e2:d0:ff:
e6:a2:39:76:af:08:b5:53:47:b8:b1:20:ae:f2:98:34:8d:80:
da:de:fe:9f:33:74:62:94:12:0d:33:8d:f7:16:49:e1:f3:dc:
15:8a:b0:8f:7a:a1:b7:d9:ca:c1:09:4a:03:7b:3f:92:26:0c:
a9:3c:e3:cd:e2:5b:b1:8e:2e:e6:05:3f:7f:36:61:16:d1:3a:
d5:08:ae:30:fe:16:41:f3:3e:86:16:e4:7e:b5:e1:d2:29:e5:
29:3d:08:f5:ac:9f:36:de:41:56:f5:54:b7:ca:28:f2:1d:f0:
ae:0a:96:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgvR32mwSZHNoK/kOy3YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi
NzI3MjcwHhcNMjYxMDE1MTcwMTI2WhcNMjYxMDE2MTcwMTI2WjAzMTEwLwYDVQQD
EyhlNDM5ZTk4ZDIwMjJiNDdiN2ZmOTQ1NzA0ZDMxYmZkNWQ3ZTUxMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmClHfe+cAbApdl5FrtY7tbTaCm4d
JXUEzeTIus3jrplRt9Mf7vFtz87wjvoVmr3rTwSnFGtASR7bAPRrGETZOqiGVkIs
hGOVMZqAcaZjmFFoORQiYoxIzIGK23tHEZchbr/kM0wPyUcBtvy8ZyPFpkmSxAuw
fkuwW2LBHSoHRmi9dXE7IvrKfV1lA9pTn9wUQP4YaNMYw5sD3uYa/xvyNYJ5TQze
CmJP2P1dSBFzOTFiTfoebDOWwpWiZJs+sMQlaV7GmHNLowT7eeDFDDcTwf+THKJB
0GM4h2SpxcyNaem7rEzXii7F/zGlOTGU0twXIDEc2kvMY0Uf6fx9MIbaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ56Y0gIrR7f/lFcE0xv9XX5RLnMB8GA1UdIwQY
MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt
M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5
LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzbPOXahL
TF7C8J8Q7vwXIPt5gLaRHC7BerAW/hdRqlJOLYB5xb26zvuWsm+qH1LZdzZdfSfr
YkB6WqDy117qYvuKbh1WPsXnab6OdSn9bcwGYlicnQXiHsFUB4ygZCXpUbpKiqtT
kvcpuLNyKPlflFZI+uV3UVSSjfQHwgUb5Kmo7BkJXchRebcFD4lE4tD/5qI5dq8I
tVNHuLEgrvKYNI2A2t7+nzN0YpQSDTON9xZJ4fPcFYqwj3qht9nKwQlKA3s/kiYM
qTzjzeJbsY4u5gU/fzZhFtE61QiuMP4WQfM+hhbkfrXh0inlKT0I9ayfNt5BVvVU
t8oo8h3wrgqW3A==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:03:17 2026 by rpki-client