Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: hOilcYYsN9YdPyNjD9qAq5UNlBg8qh0qxFsxjfc5HqI=
Subject key identifier: BD:E8:12:4D:F5:2F:65:29:B6:91:A8:E2:F2:E8:97:2E:F1:F0:60:6D
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 019E3072CA3B120C45F1A6CF843EBD0467CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: 0593
Signing time: Sat 16 May 2026 11:01:29 +0000
Manifest this update: Sat 16 May 2026 11:01:29 +0000
Manifest next update: Sun 17 May 2026 11:01:29 +0000
Files and hashes: 1: NO_NOdGhUi5NICPHN4YOqAZOhY8.roa (hash: hIEwCBK/f7i0yd0wKuRkHoyv+CruT7SE0rJgvqMAHUw=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: T3KDD5AuzX5A/ycPA429ddotIsWXAUKFIj783hgAazk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:ca:3b:12:0c:45:f1:a6:cf:84:3e:bd:04:67:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: May 16 11:01:29 2026 GMT
Not After : May 17 11:01:29 2026 GMT
Subject: CN=bde8124df52f6529b691a8e2f2e8972ef1f0606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:af:f1:2d:17:50:4e:0c:04:6b:a1:e0:94:
61:1b:7d:cc:f2:ba:f5:e9:35:df:f0:da:4a:9a:1a:
d0:d1:c8:8f:ae:f6:69:81:4c:df:8e:2c:33:4e:3b:
98:bf:19:53:06:57:19:72:18:b1:1c:57:b7:11:e6:
67:72:6c:41:6f:2d:09:11:b9:4c:60:d7:b7:d8:ba:
57:aa:34:24:a5:90:84:43:83:9a:eb:ad:42:1c:7e:
ef:9d:c0:66:85:eb:be:80:a0:09:1c:51:bc:3d:a4:
30:fa:7b:f9:47:d3:2f:ff:cb:31:32:58:11:f0:46:
e1:d4:f8:87:5c:d5:a0:7e:16:57:00:2b:31:87:13:
da:96:0e:db:65:fb:bb:6a:df:f7:0f:aa:64:59:b6:
b1:05:25:d9:45:fb:9f:44:2f:54:27:2d:ae:96:d5:
99:b1:1b:1a:e4:b8:62:ff:3a:38:2a:10:68:2f:31:
a6:0e:72:d3:7b:d4:65:14:36:93:9e:9c:27:d1:e4:
04:8f:5f:53:a2:f4:6f:c7:07:ab:48:8b:b2:54:dd:
ae:a9:69:6f:1a:fa:e8:e7:8b:cc:75:02:a1:80:7c:
05:af:f8:7d:34:48:f3:ff:36:79:cb:e8:f7:78:bd:
82:93:fd:5b:8c:bf:1e:99:74:c9:e4:b5:ba:98:0f:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:12:4D:F5:2F:65:29:B6:91:A8:E2:F2:E8:97:2E:F1:F0:60:6D
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:da:96:95:bc:74:64:b5:ca:06:27:4c:1b:6a:54:f4:a7:
6f:01:a4:5d:7e:17:64:93:46:39:25:97:c7:46:a0:f2:85:b6:
ef:4b:60:41:3d:5d:32:c3:4f:ba:24:36:1b:a5:ba:c4:d6:54:
21:74:73:a2:b1:cc:c3:ac:ed:8a:c8:5b:87:db:d9:ff:f7:4b:
bd:d1:dc:1f:ae:35:74:ef:00:a9:06:54:3e:b0:59:df:2b:cd:
0e:22:5c:48:65:be:b5:fc:f9:ee:38:3a:d8:5d:b9:71:de:8b:
fb:e2:ca:37:57:8f:5a:91:d3:04:05:71:e3:25:77:88:b0:1c:
2e:7e:df:0e:61:75:b0:0c:27:e0:98:52:81:bc:5c:f4:de:9f:
07:64:63:f5:30:4a:c0:b8:32:75:2a:39:2e:d8:25:3e:06:cb:
21:78:c2:c2:0e:4a:15:21:58:12:e3:3e:19:5f:d5:84:8b:1a:
d3:c8:b8:0a:e9:93:2f:9d:10:4d:5e:cc:65:f6:25:4d:00:f0:
25:2f:29:ba:53:f1:b6:64:25:37:fe:46:c0:a1:78:52:11:4c:
84:1c:3b:c4:13:6d:23:e8:56:0e:3d:10:ff:14:4c:c7:ae:07:
f7:41:e3:0f:d5:34:75:3c:b2:1e:76:54:ca:f5:d0:1a:9b:ff:
96:2f:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:43 2026 by rpki-client