Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: ex2tjhWNQZM6Y6ISaEDSXpyHTmL1ilEU2x7G3C2MSd4=
Subject key identifier: 39:0F:FB:2A:2E:44:ED:CC:A1:BB:F2:9A:B5:E2:46:9C:D8:FA:83:FB
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019D39AE80CBFF2421A5E9D24A7914BF77BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 14B1
Signing time: Sun 29 Mar 2026 13:00:30 +0000
Manifest this update: Sun 29 Mar 2026 13:00:30 +0000
Manifest next update: Mon 30 Mar 2026 13:00:30 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: 69iCS9Y4qmToH2wNJ2+/H9EpjHdn+jP8puMat4nCu74=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:80:cb:ff:24:21:a5:e9:d2:4a:79:14:bf:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Mar 29 13:00:30 2026 GMT
Not After : Mar 30 13:00:30 2026 GMT
Subject: CN=390ffb2a2e44edcca1bbf29ab5e2469cd8fa83fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:44:52:2e:aa:8b:34:ac:04:86:11:e2:81:6f:
d9:33:3c:4d:1b:13:68:ba:81:9f:38:62:c0:f8:c1:
46:0e:f1:3d:4e:a0:b0:f3:80:32:e2:d1:6b:1d:eb:
d6:05:9a:a1:a7:74:90:a3:d3:44:eb:65:45:a3:79:
e8:74:9f:fd:87:86:4d:85:9c:46:d6:fa:a8:b4:5c:
ce:37:2d:1a:46:8c:1f:f9:2f:aa:b0:97:00:f0:c0:
f8:ff:4b:6a:b5:34:49:6d:1b:e8:6f:df:93:51:6d:
c7:ee:2c:51:d0:60:aa:14:e1:70:0b:3e:4f:ed:c7:
50:70:3b:83:52:7e:e9:bf:40:4c:0e:29:a6:c4:80:
0d:58:d3:ef:d8:c3:9e:7d:79:b1:52:32:e6:95:df:
2e:cc:c5:24:17:65:a7:15:0a:bf:45:4c:56:6b:08:
2e:c2:88:30:88:37:4f:01:c4:0d:bb:5b:c2:01:22:
be:11:22:a3:45:52:16:8a:f5:df:f3:c3:98:bf:f6:
4e:99:fd:d5:ac:da:23:d9:78:99:72:0e:5f:39:85:
88:f8:de:b6:c9:3f:98:8e:e7:b0:3b:9f:d9:9b:5b:
72:7c:f2:09:e4:e8:03:79:d4:f4:49:22:e5:08:02:
ef:ef:53:86:8c:78:fe:92:08:eb:2e:17:3a:16:ad:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:FB:2A:2E:44:ED:CC:A1:BB:F2:9A:B5:E2:46:9C:D8:FA:83:FB
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:91:22:7e:37:92:74:39:eb:a8:6d:f4:48:53:54:41:b1:
8b:54:a3:0f:58:33:9e:a9:6d:9b:77:f3:df:c0:42:cf:8b:26:
70:8f:e9:d8:78:1d:79:cd:cf:1a:ae:a5:5a:ea:6c:01:d3:31:
4f:f2:36:73:9a:e3:5a:39:42:22:39:f9:11:a1:7f:15:22:b6:
77:a7:89:b5:27:fb:3d:cd:06:9f:34:96:ad:3f:d6:d8:e8:15:
2e:b8:eb:78:f3:0f:25:84:5d:6e:ea:cd:11:ca:85:f7:ae:5c:
70:be:8c:cf:7f:64:54:b8:06:6e:9d:c7:f9:b2:7b:35:b4:24:
fe:e6:88:1b:ad:fe:ae:8f:09:ef:19:0c:db:57:7c:1e:b5:ad:
ed:e9:e3:c6:7c:36:e4:b7:96:16:c1:cf:27:e2:3a:35:1d:89:
35:41:85:53:d9:00:ff:e1:ad:4c:18:f5:5b:66:b4:38:59:94:
bc:95:eb:23:e9:61:a6:82:57:a7:4d:87:24:26:f3:f9:4f:99:
1f:60:67:73:91:4a:23:59:c6:c0:5b:7f:4c:b6:2e:c7:14:5c:
65:6f:1c:01:1b:b1:69:ca:f5:5a:05:cb:54:ca:df:12:02:0d:
8e:ee:0d:21:f0:1a:25:2e:e1:05:37:77:e8:4e:64:d8:23:92:
12:a7:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:24 2026 by rpki-client