Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: 0hp+EWUuPNmdcVirjzOXe33NrB52PPIl1GAXLp+m6sI=
Subject key identifier: E1:14:A7:F8:B4:5A:BA:6D:B8:8D:3D:94:94:89:57:F4:8A:ED:A4:D5
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 019F9F5F5381AB9F36AE8DED2005C1FA710A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: 0651
Signing time: Sun 26 Jul 2026 17:00:52 +0000
Manifest this update: Sun 26 Jul 2026 17:00:52 +0000
Manifest next update: Mon 27 Jul 2026 17:00:52 +0000
Files and hashes: 1: NO_NOdGhUi5NICPHN4YOqAZOhY8.roa (hash: hIEwCBK/f7i0yd0wKuRkHoyv+CruT7SE0rJgvqMAHUw=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: pZWOvFt3vLsXC3imRnHKoF7hww8eeJ69WKhSHD6Ble4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:53:81:ab:9f:36:ae:8d:ed:20:05:c1:fa:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Jul 26 17:00:52 2026 GMT
Not After : Jul 27 17:00:52 2026 GMT
Subject: CN=e114a7f8b45aba6db88d3d94948957f48aeda4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:ef:72:b4:72:67:7b:6f:cc:87:31:0c:ee:
7e:6e:7f:00:6f:e4:37:8c:ec:33:7b:85:c9:52:f1:
16:f6:3c:56:da:2b:1a:a5:fb:0c:57:6b:fc:48:6a:
09:92:b2:9c:a3:f3:a2:5a:43:20:59:45:ad:95:27:
1f:a7:82:64:ce:18:58:21:ac:57:d1:64:97:8f:88:
72:b5:2b:cf:62:7d:74:a0:91:c3:50:d1:30:d1:c3:
ce:28:e0:12:81:9e:b5:cb:45:cc:e6:15:be:3d:98:
64:29:9d:92:eb:a3:ab:84:89:05:a7:d1:06:48:9b:
99:4b:04:ab:ed:33:9f:90:4c:b0:09:48:e0:da:bf:
24:f3:eb:a1:5a:0f:aa:71:d4:d1:e2:a0:f0:0d:82:
0d:4e:33:12:15:0d:ea:c8:92:da:3f:eb:e5:b8:3b:
3f:a8:05:76:ee:48:53:69:95:b1:5c:b4:f2:3f:1e:
43:6f:5a:5c:1f:22:9c:61:94:27:71:e1:c6:f1:a7:
75:19:1b:8b:86:8f:2a:fb:ee:86:d9:a0:b9:af:41:
0b:24:f4:eb:b4:c0:a8:2f:27:63:14:d7:5b:21:04:
0a:13:8c:a6:12:f9:55:36:2b:cf:a1:44:77:bf:93:
0a:63:f9:13:29:e3:e5:bb:33:6d:28:7a:a8:c1:10:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:A7:F8:B4:5A:BA:6D:B8:8D:3D:94:94:89:57:F4:8A:ED:A4:D5
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b5:34:22:ce:5c:df:4a:41:98:ed:2b:6b:2c:71:f0:10:48:
d3:d2:b4:6d:59:c9:3c:2e:5a:0d:24:d6:43:5e:cb:3f:55:c5:
50:4b:63:cf:27:4f:d4:e5:e9:4c:2c:c4:18:f4:a9:77:b3:f3:
23:24:0c:d4:ef:39:02:09:0e:e4:cf:7a:b4:7a:2a:d2:9b:15:
ef:0b:7b:bd:6f:c1:3c:70:44:0a:3e:a7:30:8f:23:0a:b2:55:
35:c5:93:12:e7:3a:38:76:9e:7f:bb:82:dd:c4:fc:7d:c4:fb:
8d:91:68:88:34:6e:84:b9:76:29:3b:49:7c:e1:d1:d6:4c:3c:
8e:cd:31:7c:2c:f3:16:f6:2e:64:e5:58:ed:b0:ae:36:36:dc:
0f:9d:37:62:4f:21:23:95:1b:da:20:d6:2b:a5:12:3b:79:3b:
98:45:52:5b:ff:4c:4e:37:29:94:51:00:b6:f8:54:2c:31:a7:
11:1b:bb:4c:1b:85:44:ef:5f:49:69:02:00:5f:f5:75:b7:5a:
eb:eb:5f:ff:58:4a:25:a4:e3:81:2b:f1:2d:4c:78:03:9b:5c:
eb:41:bf:9f:d0:f3:15:ff:cc:33:ed:ce:a5:09:37:26:02:b6:
b6:27:a9:0b:e0:d7:b3:0d:89:2d:e7:70:2d:77:db:87:64:fe:
b4:66:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:35:37 2026 by rpki-client