
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File: drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier: en3cE0zJbd+KPCZUaxkCc2hoVgVT4NJfz6At+ZafbTs=
Subject key identifier: E9:30:32:BB:DD:22:C8:46:60:10:9D:37:1F:FD:9B:D6:14:7E:B8:13
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer: /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial: 019DCED00E30854D76F9A3A537A3B0472346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 12:00:34 +0000
Manifest this update: Mon 27 Apr 2026 12:00:34 +0000
Manifest next update: Tue 28 Apr 2026 12:00:34 +0000
Files and hashes: 1: 4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa (hash: QUBmzyJjWkqAkNmxTIkOKj9TlJBpwjA6voy4B8LR2j0=)
2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: 5bTvOxF8MIuhgd+Y//n0HdMNX86hWs31ZmlS3MWnprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:0e:30:85:4d:76:f9:a3:a5:37:a3:b0:47:23:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Validity
Not Before: Apr 27 12:00:34 2026 GMT
Not After : Apr 28 12:00:34 2026 GMT
Subject: CN=e93032bbdd22c84660109d371ffd9bd6147eb813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:9e:92:5b:73:0e:59:0b:6f:f7:f1:27:29:
7c:32:06:7b:18:28:ba:6c:c0:bb:e7:d6:67:70:22:
79:fa:bb:66:fe:67:ed:a2:b5:59:ed:bb:ba:0c:22:
06:87:fd:e8:ba:1f:df:c7:27:ed:d4:ec:ec:cc:24:
ef:8a:78:3c:77:e9:b8:39:71:e7:e6:a1:40:09:7b:
2d:18:14:f8:1c:46:a2:50:9a:c8:41:61:94:6a:6b:
70:2f:28:96:3c:00:77:52:8c:22:ca:28:e9:fc:a1:
37:e3:f5:51:82:d1:1d:27:59:81:b6:89:32:d5:8f:
ee:8d:93:83:41:b7:74:22:5c:4b:4a:96:19:cf:40:
1c:ed:85:eb:d1:e2:48:df:0b:ec:b9:d8:26:bf:04:
fc:be:3a:27:b0:ec:fe:65:6f:12:81:b7:a0:23:21:
05:99:f3:ff:eb:e6:49:fe:af:ce:8a:36:07:30:64:
a0:ca:ad:31:af:09:73:24:71:47:90:e5:91:e0:ae:
9e:ad:34:2e:3d:cd:71:6e:8c:39:c6:aa:2d:d1:83:
44:1e:a6:46:03:52:7e:60:f8:9c:06:b0:de:c2:71:
b2:b5:ba:dc:d5:02:1e:2d:81:4e:b2:c3:c1:52:d8:
65:97:42:30:8f:97:a0:10:10:92:6b:2d:70:b5:b6:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:32:BB:DD:22:C8:46:60:10:9D:37:1F:FD:9B:D6:14:7E:B8:13
X509v3 Authority Key Identifier:
keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:0a:b2:28:45:e7:e6:62:24:be:f1:04:0a:df:b7:e1:d2:
d7:0d:f9:b2:c9:96:9d:fd:ce:89:34:95:47:11:13:bf:26:ba:
52:7a:f6:e0:4c:b6:1b:49:7e:34:e3:8b:ca:5a:00:be:ac:a3:
69:3b:18:61:5f:30:5f:d8:f4:be:c2:aa:9f:ff:1f:99:e2:11:
fa:e1:43:89:44:2c:04:99:fc:87:34:5e:c4:f2:2c:a2:13:99:
e3:f4:74:38:bb:58:c9:b6:34:6f:22:20:8c:db:78:ad:10:a6:
35:40:91:97:70:99:78:ae:00:2e:b8:06:05:b5:af:34:08:97:
97:da:bb:d8:29:09:dd:4b:56:11:0a:c2:9f:78:56:fa:05:ca:
90:88:3a:aa:9a:02:e7:95:29:5a:d4:cf:d5:6f:fa:a3:16:6f:
0a:99:2d:61:c9:f3:aa:5b:67:15:17:33:64:df:eb:0c:f9:43:
34:d7:ad:27:fc:d1:77:b6:f8:78:d6:e4:05:b6:41:90:bd:56:
fe:c2:8c:de:79:3f:45:a9:10:85:71:99:5f:d9:2a:a7:91:cd:
5f:0c:cb:63:5b:dd:9b:6b:27:5e:e9:a7:45:5d:1c:d3:8c:1e:
56:e4:da:be:f7:02:ca:11:11:de:e9:ae:21:28:1b:6b:c5:08:
09:aa:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:36 2026 by rpki-client