Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
File: DRjKnIs9feaqzD0ULHfe9l2dmhM.mft (raw, json)
Hash identifier: vomKFhf4/QRq976N1wtkUp670eiRWALqjf6TK7wL6tk=
Subject key identifier: D5:CE:A1:79:CE:68:FF:69:66:87:C8:C6:FF:CD:20:00:BB:35:51:C7
Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
Certificate issuer: /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Certificate serial: 019D390A3EB9AA45AC363667EC0CE32F1446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
Manifest number: B9
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: DRjKnIs9feaqzD0ULHfe9l2dmhM.crl (hash: +WIfXWNnKMsSQvv9/HtQPGxT8BFJA2Q1XDFM4+/dqD4=)
2: ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa (hash: ZGB8JxWLMriUzpJGh2DaBjMMjMXaanV6HNWfgfO/KEc=)
3: Jxxd5aNDgIwuXw-fe_JV9RJ9Vsk.roa (hash: ZyYRE97Gj5xlNTvz04w5Yl/LKVZnUZ+i5Xl5eo6U8Qo=)
4: fENZ45chq7I0lirDj-NqEzfJV48.asa (hash: Oziqs0HzmzOziXtI95DiC50goIAtPYUpO9KwNqQbRR8=)
5: pfh1mEMWGqfMBsjXKJm7o71cR4U.roa (hash: +3H4MNFNTpOXbo6c9xASz6EPy+aohNw/Bgmf/lrX1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3e:b9:aa:45:ac:36:36:67:ec:0c:e3:2f:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=d5cea179ce68ff696687c8c6ffcd2000bb3551c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:95:80:9a:15:0c:a9:f6:12:e8:cb:84:86:
0d:28:24:6d:ac:ac:43:5c:bc:3c:cf:0a:78:00:2e:
f9:86:ad:c0:b2:41:99:b0:87:4f:ad:93:44:c3:30:
56:2b:ee:a7:03:97:c0:24:0f:54:a7:21:5e:66:8b:
1e:9e:1f:26:48:80:6c:a3:49:90:93:97:61:b1:e3:
4c:25:b8:6e:60:56:84:09:ca:35:57:0c:08:b3:29:
12:c5:2f:33:1d:75:f1:38:4b:d8:67:6b:d8:4f:08:
d0:06:a6:f3:ee:74:b9:7a:cf:5e:61:c6:37:ad:4d:
ef:a4:ac:d6:ad:d2:c2:eb:63:4b:9b:a3:fb:6b:66:
42:32:77:b1:9f:9e:22:d6:a0:0b:7a:ba:03:e6:0f:
01:9a:08:39:72:e0:83:a3:26:e0:ca:05:5f:a2:fe:
99:35:50:d8:f8:dd:24:cc:4e:3c:6e:fd:0b:d1:99:
16:a4:1c:ad:3c:f5:34:eb:99:18:aa:b9:aa:d8:fd:
7b:a3:3a:bd:ab:47:c8:c6:03:a5:75:9b:51:84:05:
f8:c8:43:a8:32:c7:a3:f1:f6:5b:ce:da:e4:ed:9c:
1e:1e:74:fc:a5:2c:f2:61:c6:4a:e0:e7:41:6e:c5:
7a:80:8f:34:3b:b3:24:a4:4a:0e:a6:90:9d:45:79:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CE:A1:79:CE:68:FF:69:66:87:C8:C6:FF:CD:20:00:BB:35:51:C7
X509v3 Authority Key Identifier:
keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:b4:63:e8:2f:28:d9:7e:82:bb:45:1b:78:81:35:88:92:
6d:37:4d:8a:c4:e1:04:0f:e2:b9:d9:7c:d0:84:77:a6:ca:e5:
01:5a:87:c5:f3:69:a2:5b:1c:18:0c:7a:27:fc:ab:2b:79:2c:
9f:f5:7c:36:1f:57:47:33:d5:03:0b:5f:8b:85:8f:36:5f:89:
97:1b:2e:7a:ea:63:0e:93:a2:27:bb:af:1e:22:88:05:76:31:
3a:d9:f7:e5:08:f4:fa:7b:8a:3f:05:95:84:a0:78:6c:56:a3:
9e:f0:89:e4:47:c7:bd:26:9f:a8:4b:48:d5:33:01:49:11:e1:
a3:ac:28:ec:68:ba:19:1b:26:69:06:b3:4c:9f:d6:a3:88:e7:
74:58:fa:46:98:c0:73:58:7c:ac:c7:f4:c0:1a:79:cf:2d:bd:
46:ba:fd:f1:1f:2b:65:b6:da:25:17:84:fa:02:91:2f:bf:1c:
52:ea:c1:84:50:7f:d0:77:13:1d:95:fe:3c:39:12:e1:eb:62:
4f:e9:d6:db:04:12:f4:ba:2f:03:9d:fc:a3:29:01:44:45:0d:
f5:b1:26:49:e7:28:5a:e2:f7:27:74:e5:31:33:dd:8e:45:75:
82:bc:b3:4b:62:8b:e2:6c:5e:03:90:4e:54:0f:36:2e:76:b6:
d5:06:2a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cj65qkWsNjZn7AzjLxRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMThjYTljOGIzZDdkZTZhYWNjM2QxNDJjNzdkZWY2NWQ5
ZDlhMTMwHhcNMjYwMzI5MTAwMTA1WhcNMjYwMzMwMTAwMTA1WjAzMTEwLwYDVQQD
EyhkNWNlYTE3OWNlNjhmZjY5NjY4N2M4YzZmZmNkMjAwMGJiMzU1MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhuVgJoVDKn2EujLhIYNKCRtrKxD
XLw8zwp4AC75hq3AskGZsIdPrZNEwzBWK+6nA5fAJA9UpyFeZosenh8mSIBso0mQ
k5dhseNMJbhuYFaECco1VwwIsykSxS8zHXXxOEvYZ2vYTwjQBqbz7nS5es9eYcY3
rU3vpKzWrdLC62NLm6P7a2ZCMnexn54i1qALeroD5g8Bmgg5cuCDoybgygVfov6Z
NVDY+N0kzE48bv0L0ZkWpBytPPU065kYqrmq2P17ozq9q0fIxgOldZtRhAX4yEOo
Msej8fZbztrk7ZweHnT8pSzyYcZK4OdBbsV6gI80O7MkpEoOppCdRXkAewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXOoXnOaP9pZofIxv/NIAC7NVHHMB8GA1UdIwQY
MBaAFA0YypyLPX3mqsw9FCx33vZdnZoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZDhjZDEtY2Y1MS00YzE2LWEzODYt
N2Y1MDQyNzFjZjkwLzEvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81ZDhjZDEtY2Y1MS00YzE2LWEzODYtN2Y1MDQyNzFjZjkw
LzEvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmy0Y+gv
KNl+grtFG3iBNYiSbTdNisThBA/iudl80IR3psrlAVqHxfNpolscGAx6J/yrK3ks
n/V8Nh9XRzPVAwtfi4WPNl+JlxsueupjDpOiJ7uvHiKIBXYxOtn35Qj0+nuKPwWV
hKB4bFajnvCJ5EfHvSafqEtI1TMBSRHho6wo7Gi6GRsmaQazTJ/Wo4jndFj6RpjA
c1h8rMf0wBp5zy29Rrr98R8rZbbaJReE+gKRL78cUurBhFB/0HcTHZX+PDkS4eti
T+nW2wQS9LovA538oykBREUN9bEmSecoWuL3J3TlMTPdjkV1gryzS2KL4mxeA5BO
VA82Lna21QYqwQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:34 2026 by rpki-client