
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: +ZSlXlrjsTvho+oZBlHqZTqR+ZblYYiJjCcYhznR0NE=
Subject key identifier: 50:EA:F2:B9:A0:C7:94:17:96:04:96:60:82:E0:43:43:68:3E:13:AD
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019E30E0FB807EAE723067B678D5BC8603C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1531
Signing time: Sat 16 May 2026 13:01:51 +0000
Manifest this update: Sat 16 May 2026 13:01:51 +0000
Manifest next update: Sun 17 May 2026 13:01:51 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: 4+9Decz7tSe8Nkw+vWqSQOM9UM9eSaFpBtTw1QkyydA=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:fb:80:7e:ae:72:30:67:b6:78:d5:bc:86:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: May 16 13:01:51 2026 GMT
Not After : May 17 13:01:51 2026 GMT
Subject: CN=50eaf2b9a0c794179604966082e04343683e13ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:82:e1:cc:76:47:9f:4f:26:2c:6d:cc:07:
08:4c:41:ad:6e:34:14:8c:84:70:75:44:4d:9b:7c:
dc:5c:81:ef:ec:19:e9:e4:d8:89:19:86:93:0d:e3:
18:6e:9b:4d:9f:b8:39:d2:7f:34:05:2b:8f:66:24:
3c:08:d4:1f:35:ae:a5:8b:ac:f1:25:fb:4c:d9:8a:
47:c7:06:3d:13:47:4c:5f:db:fc:bf:59:4f:1d:e4:
38:71:c2:34:85:10:d3:a6:eb:2b:02:1f:09:5b:e4:
54:5c:77:a4:84:49:7b:28:0d:c6:c5:f9:b5:a5:ce:
3d:ab:3b:47:74:44:16:0f:e9:1b:65:ce:c4:32:aa:
8a:70:0b:e8:9a:19:b0:fd:f7:7e:38:4c:78:0e:d1:
77:ea:d7:51:cd:2e:7e:f3:8a:50:ef:14:3f:42:cf:
9e:e1:3c:ef:b5:08:b6:85:a3:45:15:9b:11:c5:ab:
fc:73:67:06:2c:66:71:9d:e7:aa:a7:b7:1b:99:e6:
a1:75:3b:ec:9c:3e:13:e6:c9:a5:8f:40:32:f9:2b:
02:2d:d6:b7:20:84:a2:b1:1b:ac:85:95:85:15:9a:
8a:67:85:a8:61:c1:fa:8f:60:57:78:4c:5f:62:d8:
a7:c5:fe:6c:a2:47:9a:94:9e:ee:45:44:0f:03:56:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:F2:B9:A0:C7:94:17:96:04:96:60:82:E0:43:43:68:3E:13:AD
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:f0:cd:17:20:03:1d:e0:4a:7a:c3:6e:c0:46:7a:d6:17:
a0:e5:92:ba:12:ed:bf:a7:52:a4:c1:6e:03:01:99:37:f0:db:
c2:08:b8:31:77:fd:34:64:6c:03:f2:82:62:3d:5c:b4:ab:cf:
cd:03:be:28:fb:ff:93:b9:d0:0f:21:57:89:9f:1b:05:80:da:
7b:5a:33:9b:da:7c:31:6e:a4:ca:fd:c3:86:09:48:8a:e1:c1:
cc:f9:97:2f:f0:b6:d5:49:d3:f1:12:27:ae:84:4b:e7:a8:a7:
9b:22:f1:64:f0:0c:d0:d2:df:aa:1a:17:3c:75:e0:9d:68:e9:
bc:6b:6e:2a:6d:9d:26:47:4d:ae:1f:a1:6d:2a:1b:72:24:ce:
b6:55:bc:c6:fa:20:50:11:d8:38:c1:c2:02:5d:2d:b9:0c:5e:
52:d9:78:15:69:6b:9f:b1:4e:1d:d9:bd:7e:b0:36:70:1f:ed:
3f:ca:d2:f2:57:d4:23:5c:83:bf:f2:c4:72:50:32:1e:95:d0:
d0:f2:6f:29:00:58:53:fb:7d:21:91:dd:b2:a0:a9:96:ca:f4:
7a:af:f8:ae:25:40:ef:72:af:54:6b:a3:4b:3b:e9:17:23:5b:
e7:61:f3:c6:41:cc:9f:97:d7:95:fa:8a:20:03:65:e3:16:fc:
1a:11:4f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4PuAfq5yMGe2eNW8hgPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjYwNTE2MTMwMTUxWhcNMjYwNTE3MTMwMTUxWjAzMTEwLwYDVQQD
Eyg1MGVhZjJiOWEwYzc5NDE3OTYwNDk2NjA4MmUwNDM0MzY4M2UxM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+iC4cx2R59PJixtzAcITEGtbjQU
jIRwdURNm3zcXIHv7Bnp5NiJGYaTDeMYbptNn7g50n80BSuPZiQ8CNQfNa6li6zx
JftM2YpHxwY9E0dMX9v8v1lPHeQ4ccI0hRDTpusrAh8JW+RUXHekhEl7KA3Gxfm1
pc49qztHdEQWD+kbZc7EMqqKcAvomhmw/fd+OEx4DtF36tdRzS5+84pQ7xQ/Qs+e
4TzvtQi2haNFFZsRxav8c2cGLGZxneeqp7cbmeahdTvsnD4T5smlj0Ay+SsCLda3
IISisRushZWFFZqKZ4WoYcH6j2BXeExfYtinxf5sokealJ7uRUQPA1bL/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDq8rmgx5QXlgSWYILgQ0NoPhOtMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8rwzRcg
Ax3gSnrDbsBGetYXoOWSuhLtv6dSpMFuAwGZN/Dbwgi4MXf9NGRsA/KCYj1ctKvP
zQO+KPv/k7nQDyFXiZ8bBYDae1ozm9p8MW6kyv3DhglIiuHBzPmXL/C21UnT8RIn
roRL56inmyLxZPAM0NLfqhoXPHXgnWjpvGtuKm2dJkdNrh+hbSobciTOtlW8xvog
UBHYOMHCAl0tuQxeUtl4FWlrn7FOHdm9frA2cB/tP8rS8lfUI1yDv/LEclAyHpXQ
0PJvKQBYU/t9IZHdsqCplsr0eq/4riVA73KvVGujSzvpFyNb52HzxkHMn5fXlfqK
IANl4xb8GhFP3w==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:35 2026 by rpki-client