Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: K5qAUbOmnjiCoF6vG+q45EflPnYnA/zzg5pFhyoXm8U=
Subject key identifier: 3E:84:28:96:70:9C:9A:BB:18:DA:2E:35:F1:28:4A:6B:29:D5:7D:1B
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 01A14C86933BFD252D6D0F37169EB14980AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 16CD
Signing time: Sun 18 Oct 2026 01:00:50 +0000
Manifest this update: Sun 18 Oct 2026 01:00:50 +0000
Manifest next update: Mon 19 Oct 2026 01:00:50 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: TOJ2DmdENyM09XYtTDuHl1EMB3lF0sZxqaaxVLnDzSo=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:93:3b:fd:25:2d:6d:0f:37:16:9e:b1:49:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Oct 18 01:00:50 2026 GMT
Not After : Oct 19 01:00:50 2026 GMT
Subject: CN=3e842896709c9abb18da2e35f1284a6b29d57d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ee:ca:30:9c:df:25:81:41:e1:f0:7a:6f:c0:
24:85:e9:0a:b9:37:a0:29:90:09:3d:1c:d7:eb:f5:
15:b5:d7:84:95:b4:d4:a5:2b:dc:d9:2b:f6:19:9e:
58:50:d5:0b:6f:95:26:d9:2e:f1:2b:19:07:ac:4d:
a4:55:92:ca:8b:6d:89:c5:13:06:64:e4:c1:62:2b:
43:82:79:3f:13:d0:a3:3a:3d:6b:f5:68:e5:18:eb:
d5:e9:3e:69:87:0c:7c:bb:71:05:19:e8:7b:f8:7e:
10:9f:a3:d3:cf:cb:16:42:97:63:7e:64:a1:e8:d1:
37:07:14:d9:db:20:50:91:65:3e:47:d7:83:ef:c5:
4d:fb:23:01:1c:11:e4:cf:9d:c4:ef:16:e1:e3:ea:
c2:88:12:cd:fe:9e:2c:59:a1:4a:b9:2f:6a:3c:d0:
f1:70:ea:1c:dd:22:b4:eb:1c:9f:de:d2:d1:ba:98:
41:7f:bf:90:81:fc:71:c1:48:ec:9d:d6:c0:96:ed:
c0:e1:22:67:1e:f0:8a:35:65:79:e6:90:2e:ba:72:
4c:e2:cd:ae:74:cd:1b:24:a6:c3:40:37:9d:08:c3:
9f:2b:64:1a:4f:8e:92:db:d2:29:49:d9:e0:ba:cc:
b4:53:46:0a:14:72:3a:50:ef:4c:c4:75:a2:eb:f5:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:28:96:70:9C:9A:BB:18:DA:2E:35:F1:28:4A:6B:29:D5:7D:1B
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:af:0d:f4:25:18:49:32:aa:9a:e7:82:8f:e4:e3:39:0e:
3b:b5:48:4a:16:4e:55:08:f5:7a:24:bd:f7:81:cd:bd:5d:25:
4b:1e:1d:a3:dd:68:68:dc:05:fd:8f:34:29:d0:27:3e:a3:d7:
f1:dc:f5:ce:c8:4a:f9:e0:db:99:d4:dc:17:c8:e4:57:d1:05:
40:7f:e6:3a:cb:07:2a:13:b9:84:ea:79:4f:94:b9:ff:c7:35:
22:70:48:f5:49:1d:25:5f:75:81:15:75:7a:a9:52:d4:f8:0a:
aa:50:07:53:dc:48:31:7b:b1:e6:f7:5b:8f:97:9d:bf:87:a3:
68:d4:14:eb:7e:0f:01:9f:0d:31:a0:03:fb:ea:03:38:86:a9:
90:d7:ab:51:b2:a9:3a:85:0d:46:af:8c:87:a8:de:74:c6:91:
39:28:9b:18:01:b9:d8:45:cd:a9:94:3c:5f:c5:13:7a:27:c6:
c9:54:04:a4:61:bb:fe:47:df:5f:b4:d2:42:e0:08:92:15:48:
c6:8d:26:e5:e1:d3:45:89:95:46:17:61:43:67:e9:c2:12:da:
f6:f1:dc:d5:e5:5f:cf:f8:6f:89:06:b2:ec:0a:6a:5e:4c:25:
77:cd:4f:92:8f:bd:c7:ce:05:2c:9d:ec:20:9b:97:20:fe:2c:
1a:e2:79:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMhpM7/SUtbQ83Fp6xSYCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjYxMDE4MDEwMDUwWhcNMjYxMDE5MDEwMDUwWjAzMTEwLwYDVQQD
EygzZTg0Mjg5NjcwOWM5YWJiMThkYTJlMzVmMTI4NGE2YjI5ZDU3ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e7KMJzfJYFB4fB6b8AkhekKuTeg
KZAJPRzX6/UVtdeElbTUpSvc2Sv2GZ5YUNULb5Um2S7xKxkHrE2kVZLKi22JxRMG
ZOTBYitDgnk/E9CjOj1r9WjlGOvV6T5phwx8u3EFGeh7+H4Qn6PTz8sWQpdjfmSh
6NE3BxTZ2yBQkWU+R9eD78VN+yMBHBHkz53E7xbh4+rCiBLN/p4sWaFKuS9qPNDx
cOoc3SK06xyf3tLRuphBf7+QgfxxwUjsndbAlu3A4SJnHvCKNWV55pAuunJM4s2u
dM0bJKbDQDedCMOfK2QaT46S29IpSdngusy0U0YKFHI6UO9MxHWi6/V1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6EKJZwnJq7GNouNfEoSmsp1X0bMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqWvDfQl
GEkyqprngo/k4zkOO7VIShZOVQj1eiS994HNvV0lSx4do91oaNwF/Y80KdAnPqPX
8dz1zshK+eDbmdTcF8jkV9EFQH/mOssHKhO5hOp5T5S5/8c1InBI9UkdJV91gRV1
eqlS1PgKqlAHU9xIMXux5vdbj5edv4ejaNQU634PAZ8NMaAD++oDOIapkNerUbKp
OoUNRq+Mh6jedMaROSibGAG52EXNqZQ8X8UTeifGyVQEpGG7/kffX7TSQuAIkhVI
xo0m5eHTRYmVRhdhQ2fpwhLa9vHc1eVfz/hviQay7ApqXkwld81Pko+9x84FLJ3s
IJuXIP4sGuJ5Ww==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:34:47 2026 by rpki-client