Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: k5cmmIFXfnHLhzBo7U2PwtKOXfkVX3kOErOPtGqzjQY=
Subject key identifier: 51:64:48:96:EF:48:21:2E:7F:A4:29:43:5F:7C:B4:24:AE:3D:96:3E
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 019D38D3C1F282FD5B70FB87A2EE905779DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: YUZowKQWoOHHQODl+NOSp9gFAcOCKUIQ7mQAzmymbVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c1:f2:82:fd:5b:70:fb:87:a2:ee:90:57:79:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=51644896ef48212e7fa429435f7cb424ae3d963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:e0:a5:43:41:3d:ac:54:8a:75:fd:bb:d7:
da:f5:6a:e4:ed:d1:b6:ba:d0:46:97:e6:19:f1:41:
dc:05:12:be:55:e1:5e:2f:f3:b5:ab:60:80:a5:ea:
13:14:21:50:6a:1a:4f:3d:a6:5c:b4:ca:bc:a2:77:
e7:08:b1:8d:d3:81:4e:89:75:c4:b5:52:1b:16:4f:
a6:91:c0:f9:ba:b3:72:cb:79:44:c6:02:cb:d5:ac:
02:cc:0b:92:cb:b1:28:06:f0:f1:ac:c4:30:e4:51:
64:dc:0f:0e:03:61:2a:73:e3:1d:be:f1:3c:a4:59:
d4:83:e9:9f:53:97:b0:f1:ab:4e:3d:73:92:07:c2:
7b:05:95:26:e2:a6:99:a6:de:e1:11:06:92:dd:da:
ea:b9:e1:a5:88:17:46:52:4b:49:6c:13:f5:56:eb:
af:1b:1b:a3:76:3d:97:52:9e:be:56:1b:b9:48:87:
4b:37:22:bc:73:da:95:6e:4a:d0:cd:58:e8:31:9c:
c4:3e:bd:bc:2c:b6:52:57:b5:d4:f1:49:ea:fe:d0:
64:e7:0c:d5:48:3b:95:fe:f1:09:b1:58:59:73:b8:
6f:a2:d5:c7:b7:15:09:d1:0b:a3:eb:33:c8:4d:24:
98:41:2f:82:eb:b7:d0:9d:cf:de:dc:7c:7b:62:34:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:48:96:EF:48:21:2E:7F:A4:29:43:5F:7C:B4:24:AE:3D:96:3E
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:dc:81:dd:8b:47:65:01:88:2f:13:0f:f1:bf:f3:10:e9:21:
0e:cb:41:a3:63:79:48:e7:06:79:e6:e7:48:e1:66:7c:97:c3:
62:e5:03:5c:d6:09:13:7d:12:eb:c4:63:ce:fa:79:c7:fd:2f:
ae:02:ee:74:a1:88:fc:31:b7:e1:05:8d:52:a4:53:fc:37:8e:
6f:45:61:5e:a5:f4:50:52:71:af:ae:67:9d:94:07:09:a3:b3:
8c:de:96:44:6b:df:81:b6:e1:27:95:2c:85:da:44:ed:9c:97:
70:07:a8:a5:30:f6:3e:15:89:9e:24:2b:d9:c5:d3:87:23:ec:
f9:24:be:5c:73:2b:40:0a:8f:c7:74:a8:7c:45:33:cb:a3:81:
c3:29:5d:4e:a8:bf:f1:3e:a7:27:5a:4d:82:49:35:d5:c7:a3:
44:65:05:eb:ca:82:8b:67:47:b4:6c:b0:08:c7:08:8c:0d:4f:
1b:a3:7a:7e:e3:11:06:3f:be:12:f4:cd:c4:6b:c9:c0:e5:f7:
b6:cf:87:65:1b:1a:a7:14:b2:b4:53:40:a6:94:da:00:86:2b:
47:86:cc:ca:2c:76:40:f2:e4:38:8e:95:16:ec:d5:53:86:61:
5a:1f:c1:91:d9:be:f9:76:cb:1b:c9:7f:4c:e3:a2:dd:8a:4c:
57:90:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:07 2026 by rpki-client