Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: VvTBRvy3G1JZOhQ8rSB5BHWAzeAAmbrOf4kOQgODGO8=
Subject key identifier: FD:20:CE:68:96:40:A4:08:39:26:E5:EB:23:CB:10:41:65:C0:93:02
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 01A0024B094A089942A6D4E15068113C297F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1622
Signing time: Fri 14 Aug 2026 22:01:07 +0000
Manifest this update: Fri 14 Aug 2026 22:01:07 +0000
Manifest next update: Sat 15 Aug 2026 22:01:07 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: GvW4+CUgk7weh2WPIhotjJSHkv27lv56lEerDHTDMwI=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:09:4a:08:99:42:a6:d4:e1:50:68:11:3c:29:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Aug 14 22:01:07 2026 GMT
Not After : Aug 15 22:01:07 2026 GMT
Subject: CN=fd20ce689640a4083926e5eb23cb104165c09302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:3e:e7:a2:ee:81:b6:f3:43:42:c1:f3:96:
04:ff:49:84:2a:0c:ed:26:7d:a0:e3:74:5a:ec:46:
c0:cf:ba:ac:c5:f0:46:cb:78:23:da:ea:ab:1a:a5:
2c:82:97:11:91:a9:0e:78:11:66:2e:a2:3a:ac:6b:
ee:4d:9b:ee:14:35:4d:fd:9e:d4:62:eb:eb:75:56:
65:db:00:26:5f:b6:99:dc:bd:15:37:7a:a0:dc:78:
d4:7c:ab:32:29:1d:01:92:53:45:85:2d:a1:b6:33:
d3:62:fb:be:e0:b4:0a:b8:7d:69:6c:d2:74:3c:41:
ec:e4:1e:6e:35:11:0b:c8:f9:75:1e:08:92:48:86:
9e:80:a6:57:a4:8e:42:62:32:78:a7:58:28:ac:51:
89:63:1d:d3:c1:52:82:7f:39:8c:09:c5:53:8f:f9:
33:83:b9:1f:e5:fe:88:2e:be:be:0e:98:68:c4:62:
78:33:99:28:19:b2:7a:6e:21:75:0a:83:fb:d9:a7:
8e:62:bb:97:3d:23:31:6b:78:90:61:77:57:7d:cf:
e8:25:12:ac:e2:f6:73:4c:5a:8c:e3:ea:5f:a9:30:
75:58:6a:ca:70:c3:d7:b9:9d:3c:1f:91:0a:68:7f:
0a:ba:fd:94:d9:58:30:fe:9b:d5:06:f0:9f:42:8a:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:CE:68:96:40:A4:08:39:26:E5:EB:23:CB:10:41:65:C0:93:02
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8c:d3:6f:99:a6:ab:91:7a:a4:54:ad:e2:d9:0e:5d:fd:8d:
9e:df:21:24:16:a2:b2:10:14:8c:02:3d:b1:59:f6:6a:3c:1b:
c7:60:b8:b7:4a:f8:00:97:0c:0c:b3:40:f7:1d:b1:7a:2a:0f:
4c:ac:6e:f2:c9:ff:66:7b:95:04:32:b5:86:af:9d:06:08:bf:
71:87:b2:48:4e:0f:d1:f3:70:de:af:ec:1c:70:be:d2:e1:3e:
1e:b8:6f:86:f2:ab:48:a3:e7:8c:2f:b1:2f:a5:50:f0:08:eb:
e9:7b:db:bd:35:93:ef:2b:a7:56:b5:cc:74:96:a9:db:df:85:
9b:06:89:64:09:72:d3:16:1d:9f:97:19:e4:ca:1e:73:53:95:
eb:39:5c:63:79:7d:28:1f:cf:37:5f:da:ec:ac:d1:8a:78:61:
b2:eb:db:51:65:60:42:f5:a5:04:f8:74:51:f5:cf:7b:1d:e8:
97:42:8d:57:83:a4:cc:06:5c:b9:7a:47:35:f7:26:65:03:46:
80:05:f4:24:ee:91:7c:5f:98:91:28:44:ed:81:71:62:bd:75:
7d:29:fd:b9:25:f3:0d:05:61:11:e6:7f:d8:99:8f:80:02:e8:
93:51:be:11:fa:d9:d9:1c:e7:fe:51:af:80:88:9c:74:c6:84:
ef:ab:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:47 2026 by rpki-client