Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: PBBVXj3RLvQINGcLTVf35tvl0Oj8Pk6GgXZ5k8H9vJw=
Subject key identifier: 78:B3:C3:80:7D:D8:83:1B:23:AF:4C:3A:DD:03:2A:9F:07:95:6A:1F
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 01A17BF2284E7C1746289B7A98950641D444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 06:00:29 +0000
Manifest this update: Tue 27 Oct 2026 06:00:29 +0000
Manifest next update: Wed 28 Oct 2026 06:00:29 +0000
Files and hashes: 1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: GGuQaN/2BaJSO19hnvi7ptzdbS2hQ4CCk+SL6JZvRPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:28:4e:7c:17:46:28:9b:7a:98:95:06:41:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Oct 27 06:00:29 2026 GMT
Not After : Oct 28 06:00:29 2026 GMT
Subject: CN=78b3c3807dd8831b23af4c3add032a9f07956a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:99:e3:93:82:07:46:89:73:f1:c3:24:7d:
df:1b:94:54:6a:d5:d9:c8:3c:12:42:fa:71:4c:39:
b8:81:61:88:ca:a2:ed:04:c5:48:14:e8:a6:03:a2:
70:85:44:db:d7:06:ed:8c:c3:33:a6:50:3d:e7:d6:
99:b4:17:f1:ef:49:f8:6c:21:4c:58:71:ce:04:a9:
98:7f:20:b7:6c:f0:30:3b:00:3a:0e:d5:32:35:fc:
0e:73:39:49:7d:f7:58:5a:79:cf:b9:40:cf:25:b3:
0e:da:be:17:fb:cc:51:cb:1e:60:30:64:36:58:64:
f1:39:cc:f8:df:c3:e1:b8:48:a4:23:92:a1:5c:39:
47:df:c6:62:02:d6:84:d1:61:7b:36:75:02:91:3d:
43:8d:d8:e5:d8:6c:6f:e3:59:15:e9:3e:87:e2:d4:
18:35:ed:2b:e3:6c:e4:87:39:9f:4a:cc:68:f6:de:
40:3a:27:33:33:22:60:df:35:fe:a2:a1:e0:ff:06:
70:81:a0:21:9c:e2:41:c9:9f:5d:d9:2d:98:ab:8d:
56:6f:5c:10:bb:e6:98:0a:9e:45:38:f8:3b:11:93:
82:df:f7:88:65:cd:a1:88:1a:58:55:54:19:48:d2:
2f:a9:61:ce:02:af:71:bb:f6:f7:5d:52:2f:64:55:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:C3:80:7D:D8:83:1B:23:AF:4C:3A:DD:03:2A:9F:07:95:6A:1F
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:30:3f:62:9a:02:fb:71:2e:a3:79:1d:f9:e1:24:ab:d6:06:
f2:42:e6:98:b7:11:ed:0b:80:ba:05:e1:18:2d:20:75:63:9e:
99:6b:09:bd:11:60:c9:c1:1f:26:72:12:f4:43:75:ce:ed:bc:
2c:21:74:8c:08:05:3e:8e:e9:c1:20:66:c6:e0:a0:09:48:2c:
1b:20:28:ad:0a:b4:7d:4f:0f:85:99:31:70:46:35:4b:fe:fa:
b7:66:72:d6:6c:9b:67:17:42:c5:30:f1:76:c2:5e:76:e3:fb:
b2:79:1c:6b:ca:10:7a:e7:3e:88:69:7e:c2:f7:ec:ec:0d:68:
5c:a6:59:eb:34:09:dd:a7:dd:95:47:2a:46:41:4d:92:09:0b:
53:a3:f2:78:31:11:74:b7:00:99:11:8a:76:a6:e9:17:85:93:
f2:ae:64:1d:4f:d4:fd:1e:7e:2f:75:b4:55:94:9f:05:de:4d:
96:9f:75:50:bc:8d:8a:37:a4:57:ae:14:f5:15:09:63:02:1e:
e4:f4:f8:83:51:b1:a8:65:2e:68:5a:bd:99:75:04:03:5b:93:
e2:dd:5a:bc:45:11:60:2f:a9:db:6f:c8:47:42:66:b9:a1:a5:
bb:51:63:0b:c8:0d:66:a6:c7:91:e3:3c:dd:49:9d:4b:8a:81:
23:85:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:05 2026 by rpki-client