Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: KKFfoSbz8t+tCM2F1WGJuGXBVbbyTKtoXYuej4rj5hk=
Subject key identifier: 0E:0F:EA:25:2A:17:35:65:2D:46:27:F8:5E:27:BC:23:D5:79:56:75
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 019D38D37DB2D1DBF5CA834879B1FDD4AD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 129F
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: GRQibr18mvAtFQUlZf2-LSDjO00.roa (hash: uHEAFGUIa+w818s33SMz8sos1XEYiW4NZhUvG/v7Vkk=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: Y30taYG7xo3JVGJE6ZJb0uuBW+TVN5Y8xKrOu5htOaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7d:b2:d1:db:f5:ca:83:48:79:b1:fd:d4:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=0e0fea252a1735652d4627f85e27bc23d5795675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:b4:c8:ed:ab:e4:31:2e:93:fe:b7:b3:bd:
cd:eb:e8:da:28:4f:4b:81:d2:9f:ae:77:5f:fa:e8:
5c:40:d7:94:9c:43:71:83:2d:df:e9:e4:7e:af:0e:
ac:c8:fd:6b:1b:ab:bf:cb:ea:06:ad:89:6a:36:6f:
55:62:35:11:e2:e5:7a:cc:d5:0d:06:2e:73:23:27:
ec:4e:ef:4a:e8:20:2b:0a:90:23:6c:c0:c5:41:84:
2e:08:c4:4f:93:46:0c:42:8e:6d:66:2f:1a:ef:9c:
ef:ea:77:fc:68:a2:16:86:86:37:8d:91:d4:2f:88:
c0:10:09:b4:a9:57:97:41:6e:b1:85:21:1a:38:ce:
fa:36:be:5c:81:60:58:2c:7b:e6:ca:63:20:68:fa:
3d:fa:21:4a:f2:da:07:be:94:ea:c7:9e:6b:a4:a0:
ca:3d:a6:bf:b4:15:77:bf:7c:8c:b4:2b:ad:d1:7d:
67:17:01:5b:63:35:83:e4:45:a2:f9:42:ec:0a:81:
f9:4e:3d:0c:f6:1e:52:07:44:15:40:70:39:42:a6:
19:30:29:fd:ab:10:e8:39:50:ce:de:d1:30:99:85:
b1:25:ff:a2:60:78:5e:f7:62:1b:10:4b:16:95:8c:
ae:9a:6a:11:44:a2:f0:c9:04:dd:ae:8d:0f:fb:52:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:EA:25:2A:17:35:65:2D:46:27:F8:5E:27:BC:23:D5:79:56:75
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:f1:0b:a3:24:fb:b2:84:55:5f:48:77:e8:54:b3:57:92:
c6:51:b3:0c:d9:e0:9f:a4:14:d7:19:7c:c0:73:98:a2:e8:d6:
d9:17:07:bd:13:ef:74:cc:b4:de:03:04:7a:3f:8e:1a:a3:d2:
89:0a:d1:6b:db:62:c4:88:b1:2e:69:ca:b5:b1:d8:17:1e:6c:
7b:c6:e0:50:e9:ef:85:35:99:05:bf:6b:74:3f:1c:a6:39:e3:
bf:d8:8c:64:e3:12:83:f0:52:2e:bf:2e:e9:b9:f5:00:de:db:
63:cd:35:33:ec:cc:18:b7:bb:b0:0c:b6:32:91:0c:0b:5d:5a:
62:53:0d:7d:6b:04:a0:3d:30:dc:73:1a:aa:1f:77:e3:99:ee:
6d:8c:d5:ff:45:be:92:68:73:6d:2e:81:c8:56:d0:1d:2c:c0:
6a:2d:24:b4:e1:6c:82:20:61:8f:ea:4d:a5:32:31:b5:e7:98:
16:f2:ed:73:01:57:88:5d:58:96:58:5a:2d:30:5a:e8:e1:f9:
38:29:a1:dd:2e:1c:b7:ff:b3:86:45:4f:30:23:c4:64:b3:35:
b7:9c:55:1e:2b:6a:ba:39:81:8a:03:26:74:f3:9f:0d:b4:57:
16:3a:cb:3d:7f:22:cb:51:10:66:aa:39:10:32:a3:a9:e1:58:
14:38:26:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04032y0dv1yoNIebH91K00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5
YTUyNzcwHhcNMjYwMzI5MDkwMTE3WhcNMjYwMzMwMDkwMTE3WjAzMTEwLwYDVQQD
EygwZTBmZWEyNTJhMTczNTY1MmQ0NjI3Zjg1ZTI3YmMyM2Q1Nzk1Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr20yO2r5DEuk/63s73N6+jaKE9L
gdKfrndf+uhcQNeUnENxgy3f6eR+rw6syP1rG6u/y+oGrYlqNm9VYjUR4uV6zNUN
Bi5zIyfsTu9K6CArCpAjbMDFQYQuCMRPk0YMQo5tZi8a75zv6nf8aKIWhoY3jZHU
L4jAEAm0qVeXQW6xhSEaOM76Nr5cgWBYLHvmymMgaPo9+iFK8toHvpTqx55rpKDK
Paa/tBV3v3yMtCut0X1nFwFbYzWD5EWi+ULsCoH5Tj0M9h5SB0QVQHA5QqYZMCn9
qxDoOVDO3tEwmYWxJf+iYHhe92IbEEsWlYyummoRRKLwyQTdro0P+1IcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4P6iUqFzVlLUYn+F4nvCPVeVZ1MB8GA1UdIwQY
MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et
MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1
LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIPxC6Mk
+7KEVV9Id+hUs1eSxlGzDNngn6QU1xl8wHOYoujW2RcHvRPvdMy03gMEej+OGqPS
iQrRa9tixIixLmnKtbHYFx5se8bgUOnvhTWZBb9rdD8cpjnjv9iMZOMSg/BSLr8u
6bn1AN7bY801M+zMGLe7sAy2MpEMC11aYlMNfWsEoD0w3HMaqh9345nubYzV/0W+
kmhzbS6ByFbQHSzAai0ktOFsgiBhj+pNpTIxteeYFvLtcwFXiF1YllhaLTBa6OH5
OCmh3S4ct/+zhkVPMCPEZLM1t5xVHitqujmBigMmdPOfDbRXFjrLPX8iy1EQZqo5
EDKjqeFYFDgmrQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client