Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File: drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier: wBCxhUagO6Hxmtc6PEEJNiUuiHIVwgLk8pkqf0YWfqU=
Subject key identifier: CD:9C:12:18:83:BE:30:9F:C9:6C:04:FA:6C:C4:22:6A:5E:B4:E8:80
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial: 01A17E4F7BEE388F47967173957257CC0A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number: 057A
Signing time: Tue 27 Oct 2026 17:01:40 +0000
Manifest this update: Tue 27 Oct 2026 17:01:40 +0000
Manifest next update: Wed 28 Oct 2026 17:01:40 +0000
Files and hashes: 1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: P3tIEGhrR/ddm8GPwzj+YTFzA4w7jEB750XYnNLp7d0=)
2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:7b:ee:38:8f:47:96:71:73:95:72:57:cc:0a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Validity
Not Before: Oct 27 17:01:40 2026 GMT
Not After : Oct 28 17:01:40 2026 GMT
Subject: CN=cd9c121883be309fc96c04fa6cc4226a5eb4e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:5e:66:c9:c0:80:f7:e4:0f:07:c4:86:84:
7d:72:ce:e6:ba:24:74:6d:46:b6:72:0a:3d:13:59:
0f:61:38:15:03:f8:23:94:e4:6b:85:58:c6:ad:2f:
7f:a6:57:37:6d:e0:6a:46:e2:08:4e:62:d1:70:94:
ec:d9:1b:e5:58:4c:55:68:03:a2:c1:4d:dd:b0:55:
33:94:a4:ad:bd:a5:8a:d6:02:16:e8:00:0c:e2:70:
42:e9:0b:e7:3c:c1:f0:e8:23:59:16:a1:39:57:6b:
83:bc:c3:98:a8:99:c7:7a:4f:e8:17:53:2e:e3:d7:
a8:11:a1:71:f7:a6:d0:0e:80:3f:3b:35:82:1f:06:
0a:83:07:24:23:c0:ba:9e:f2:c0:f9:b1:48:ef:07:
13:24:67:48:81:d4:1d:1d:36:32:58:3a:3c:0f:45:
3a:4d:3b:8f:a8:d1:9f:fa:58:21:80:6f:d8:4c:9d:
65:17:39:d6:ab:ea:bd:b1:3f:38:27:a3:e7:0d:76:
ef:cf:5d:d0:62:a0:cc:be:93:ec:c8:37:04:d4:90:
3d:0d:81:87:f5:28:fa:90:da:35:8a:9d:94:8f:f9:
77:d7:67:25:e1:de:15:cd:e6:37:ed:4a:a6:5a:99:
03:76:93:3a:52:a7:d5:68:bd:e5:10:1a:43:46:8b:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:12:18:83:BE:30:9F:C9:6C:04:FA:6C:C4:22:6A:5E:B4:E8:80
X509v3 Authority Key Identifier:
keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:63:dd:8d:ab:73:bf:64:71:85:d8:b6:08:5d:76:12:76:0e:
83:bd:4e:99:9b:fc:8f:6c:ea:c8:96:90:8f:50:7f:36:b0:87:
49:ec:87:15:2b:b2:f9:87:84:ee:c9:72:d9:5a:bd:61:c9:21:
18:bd:d1:d3:58:0f:0d:70:dc:c3:3d:3a:07:e6:3c:ba:4c:23:
9b:1e:56:86:17:56:6e:43:98:6b:37:72:09:e3:13:82:b1:ee:
12:f2:36:37:83:71:43:21:b2:b8:16:09:f8:61:21:e1:44:dc:
1f:e4:64:fe:f1:07:28:53:6c:0c:6d:29:6d:ad:9d:67:2a:46:
03:c2:1e:c3:38:07:a4:fd:8b:8e:25:68:f9:d6:f9:84:2d:82:
da:30:2d:dc:7b:b1:ab:b7:5b:8b:39:db:bd:98:74:7b:dc:4e:
71:62:aa:de:ac:29:32:79:ee:c1:3c:3c:74:93:ba:8f:cd:b1:
60:91:c8:7e:67:bb:d3:57:a7:d9:70:ea:dc:0c:0f:be:b3:a2:
5b:73:89:b7:fc:98:50:19:cf:4d:b7:4a:87:43:51:f5:4d:44:
9e:9b:9b:d4:52:cf:0c:83:a1:e4:88:89:44:82:19:13:7e:d2:
12:74:9c:dd:2b:35:ca:db:ad:17:54:d4:1c:06:4f:08:dd:2b:
58:dd:de:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+T3vuOI9HlnFzlXJXzAp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI1OWQ4YWI0YWI1Mjc3Y2VlZTVmZjA5ODIwODQzMzA2
MjdiMWYwHhcNMjYxMDI3MTcwMTQwWhcNMjYxMDI4MTcwMTQwWjAzMTEwLwYDVQQD
EyhjZDljMTIxODgzYmUzMDlmYzk2YzA0ZmE2Y2M0MjI2YTVlYjRlODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqNeZsnAgPfkDwfEhoR9cs7muiR0
bUa2cgo9E1kPYTgVA/gjlORrhVjGrS9/plc3beBqRuIITmLRcJTs2RvlWExVaAOi
wU3dsFUzlKStvaWK1gIW6AAM4nBC6QvnPMHw6CNZFqE5V2uDvMOYqJnHek/oF1Mu
49eoEaFx96bQDoA/OzWCHwYKgwckI8C6nvLA+bFI7wcTJGdIgdQdHTYyWDo8D0U6
TTuPqNGf+lghgG/YTJ1lFznWq+q9sT84J6PnDXbvz13QYqDMvpPsyDcE1JA9DYGH
9Sj6kNo1ip2Uj/l312cl4d4VzeY37UqmWpkDdpM6UqfVaL3lEBpDRotNVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2cEhiDvjCfyWwE+mzEImpetOiAMB8GA1UdIwQY
MBaAFHa7WdirSrUnfO7l/wmCCEMwYnsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUt
NGQzYTVjMDQyZTYxLzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUtNGQzYTVjMDQyZTYx
LzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2Pdjatz
v2Rxhdi2CF12EnYOg71OmZv8j2zqyJaQj1B/NrCHSeyHFSuy+YeE7sly2Vq9Yckh
GL3R01gPDXDcwz06B+Y8ukwjmx5WhhdWbkOYazdyCeMTgrHuEvI2N4NxQyGyuBYJ
+GEh4UTcH+Rk/vEHKFNsDG0pba2dZypGA8IewzgHpP2LjiVo+db5hC2C2jAt3Hux
q7dbiznbvZh0e9xOcWKq3qwpMnnuwTw8dJO6j82xYJHIfme701en2XDq3AwPvrOi
W3OJt/yYUBnPTbdKh0NR9U1Enpub1FLPDIOh5IiJRIIZE37SEnSc3Ss1ytutF1TU
HAZPCN0rWN3ecQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:21 2026 by rpki-client