Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File: Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier: Ydng6bbi7DTGSxrbh867P/LZHIrDAlwKPizJ39hq13c=
Subject key identifier: 40:FA:98:9E:69:7D:F6:43:36:0E:C1:84:83:99:47:5C:31:EA:A2:42
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer: /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial: 01A13DB7CA99F4E8F5785E3149CEA8F3A274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number: 19EF
Signing time: Thu 15 Oct 2026 04:00:17 +0000
Manifest this update: Thu 15 Oct 2026 04:00:17 +0000
Manifest next update: Fri 16 Oct 2026 04:00:17 +0000
Files and hashes: 1: 9xaM71e9BMRFYv27V5xbMjdqOgI.roa (hash: D9u9E0DcXMocRKo5Wg6KGFp6zb0+RH3c9pC/yeH8pSY=)
2: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: bSQdOlHPcmxVxhbJIBxYe2MkqLfc5FGdh5JSqYm+VpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:ca:99:f4:e8:f5:78:5e:31:49:ce:a8:f3:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Validity
Not Before: Oct 15 04:00:17 2026 GMT
Not After : Oct 16 04:00:17 2026 GMT
Subject: CN=40fa989e697df643360ec1848399475c31eaa242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:20:a5:7b:30:d1:0f:aa:25:21:13:be:b8:
6e:92:99:25:e5:a5:ec:84:4a:0a:c5:78:90:02:8a:
d6:d5:0f:0b:04:93:7e:75:ea:68:2b:79:63:9f:60:
5d:4c:91:3e:4d:12:f4:9c:ec:de:79:74:5c:51:72:
27:e6:3e:b7:32:fb:bb:e2:33:14:a0:ef:0d:95:49:
10:23:21:4c:2c:5c:63:a7:48:2f:7c:f9:eb:5f:d3:
0d:c5:72:f0:23:11:38:3b:64:06:d5:82:fa:a0:7f:
fe:c1:2a:36:3c:2b:6b:0d:44:6e:6b:e7:f4:c8:b3:
33:4b:41:4b:f5:96:32:c1:73:73:5d:04:a0:c9:51:
66:ac:aa:21:de:e8:b3:89:d9:c7:24:9b:e7:33:8a:
04:e8:76:91:15:4c:62:b0:57:a9:fb:70:5a:d8:9b:
08:ad:c8:c9:d2:dc:57:18:ff:17:65:fe:22:3a:c3:
5f:ed:5c:41:e9:35:6f:e0:d9:fc:30:b5:21:e7:01:
ea:df:ac:db:c4:48:f1:ef:9a:39:90:cc:76:01:1e:
ee:ce:d0:f0:ac:43:2b:b8:c4:7d:a9:24:94:6b:b5:
6f:a8:e9:3e:ff:b8:73:ad:70:31:f7:4f:1c:da:9d:
38:f2:f7:4f:6a:a7:71:22:c6:98:37:aa:18:2f:c4:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:98:9E:69:7D:F6:43:36:0E:C1:84:83:99:47:5C:31:EA:A2:42
X509v3 Authority Key Identifier:
keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f9:bd:44:ba:9a:e2:3f:ef:63:8b:82:b8:be:ad:74:b0:0f:
3c:36:96:00:47:50:8e:40:05:85:8d:c4:c1:47:32:d1:40:6d:
05:b4:f7:98:54:18:c5:9b:7d:a3:9b:57:1c:ee:76:f2:cc:cf:
de:ec:2a:f2:2b:a4:52:de:0b:ea:fe:91:1b:2a:69:01:b7:8a:
87:d4:1f:5a:a7:f3:1d:8a:2b:0f:f2:da:6a:b1:0f:0b:fc:dd:
62:e2:51:fb:57:52:14:64:52:c2:ae:e0:03:b6:33:77:a9:d1:
b7:dc:e3:b0:04:8e:f7:44:12:8e:36:99:6a:94:e0:bf:0a:aa:
ed:4b:a7:85:f8:d3:de:70:64:88:45:4a:29:e9:12:97:ba:6a:
5a:e0:c6:16:33:e8:d7:58:1a:27:2c:46:18:81:3d:ae:6c:8a:
8f:9d:06:8b:3b:6f:58:3b:0f:51:3b:04:db:f8:3a:0c:36:35:
ac:f5:45:00:11:b8:01:43:83:d7:4a:02:a2:46:dc:24:34:03:
0e:02:45:8a:8e:64:a7:7b:7a:3d:40:a5:f1:a4:c2:d4:c5:40:
7b:7b:53:f3:e3:52:c9:8e:7f:0d:59:f2:f0:7e:f1:86:02:22:
a5:ac:bb:e3:d8:73:76:b7:b6:98:4c:30:05:97:ec:9e:53:9b:
53:d6:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:02 2026 by rpki-client