Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: x/blQfqxtZRYLUIRwQoRr8ye4skK0hZ05JQSG/BlORw=
Subject key identifier: 8A:68:93:EB:26:07:5F:A1:6D:95:05:5B:49:A9:73:05:85:06:6B:1A
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019E314E4F894AE333F0847C26BEB445FE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0629
Signing time: Sat 16 May 2026 15:01:16 +0000
Manifest this update: Sat 16 May 2026 15:01:16 +0000
Manifest next update: Sun 17 May 2026 15:01:16 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: q3aJNOY3vYQyw4em+ddeer/ARELFOMD0gL12YKrGtj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:4f:89:4a:e3:33:f0:84:7c:26:be:b4:45:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: May 16 15:01:16 2026 GMT
Not After : May 17 15:01:16 2026 GMT
Subject: CN=8a6893eb26075fa16d95055b49a9730585066b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:ed:8e:d8:19:f0:e3:1f:3f:4b:a2:ab:81:
b2:9d:84:7a:95:1f:40:fc:bc:49:ad:80:4e:95:ec:
a6:4b:ac:94:ef:ed:9b:a5:3b:99:4e:f8:3a:b1:86:
44:94:72:b9:27:90:85:d9:23:9b:8e:66:5c:f9:24:
98:83:17:92:f3:25:18:3b:7b:8a:fb:0f:3d:f5:ff:
89:90:64:22:72:d6:52:56:27:43:de:e9:5d:f1:4a:
d2:89:58:72:fa:c2:24:47:bb:60:9b:6a:9c:0a:cd:
65:bd:b3:6d:4b:5e:3f:5a:00:b7:4b:97:a3:f5:ff:
c8:57:89:36:cd:96:20:06:33:78:20:3f:7c:f7:c1:
c1:21:1a:54:67:43:36:29:5d:7a:cb:c9:a3:ad:35:
d4:f6:d5:b4:d1:ed:29:a2:f6:d3:60:b3:64:39:e6:
8a:4a:5c:ad:ad:df:ff:e8:e1:ce:03:6d:29:6f:d6:
dc:2a:1e:7e:95:f0:cd:e4:a6:cd:15:49:85:ce:f9:
4c:2d:29:bb:d8:7b:9d:40:c9:55:e8:03:c8:a6:2d:
f9:49:a9:1a:be:d6:83:6b:e3:5c:be:4d:68:db:fb:
68:fd:e8:16:01:1b:b7:0d:1c:95:88:4e:b2:53:44:
10:94:76:b3:05:1b:51:a2:65:c1:cc:06:e4:7f:a8:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:68:93:EB:26:07:5F:A1:6D:95:05:5B:49:A9:73:05:85:06:6B:1A
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a7:4f:72:33:ec:5b:e6:5b:1a:e6:0f:fc:a8:5b:27:fe:8e:
6c:de:c7:13:5a:b3:c3:3a:b4:ec:d4:47:cc:eb:34:47:bf:2a:
5e:49:33:13:ca:e4:42:26:c8:e2:93:4a:fe:65:b4:ac:1b:f0:
04:62:f1:09:d0:28:f8:9d:a9:12:97:ab:59:8b:50:6a:3e:8d:
cf:6a:96:63:e0:97:e8:57:a7:6e:62:05:de:2c:c7:7c:06:88:
87:b4:c6:a8:b6:0b:1e:8a:e4:3d:b5:96:cb:1d:a8:19:b2:6d:
49:60:1b:42:e6:d1:12:94:8d:74:c1:e9:d6:db:71:ca:41:af:
91:49:a9:c6:88:59:1c:bd:ec:a7:1d:e9:60:15:50:c1:0e:68:
2e:37:eb:ec:1e:07:d1:5d:9b:3c:da:f5:dc:c3:71:f6:2d:36:
e9:58:59:15:e8:a2:e9:f7:28:a5:d3:d4:95:fc:e1:68:cb:70:
ee:c4:78:05:a4:09:4e:95:0a:1a:3d:36:04:64:52:c3:e2:2f:
9a:72:18:c2:15:70:62:a0:5a:6e:d0:1d:7b:58:51:23:57:3f:
4c:91:f8:d4:47:b3:69:0e:64:0f:96:cd:61:30:21:df:80:41:
7a:59:6b:fd:27:a6:41:7a:7d:93:04:ab:07:c9:5b:44:68:32:
9a:c8:ed:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTk+JSuMz8IR8Jr60Rf6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjFiZDMwZDMxOTFhODdjN2QwYTQ2MmU2NzkzMjQzMTYz
M2RkMWUwHhcNMjYwNTE2MTUwMTE2WhcNMjYwNTE3MTUwMTE2WjAzMTEwLwYDVQQD
Eyg4YTY4OTNlYjI2MDc1ZmExNmQ5NTA1NWI0OWE5NzMwNTg1MDY2YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBLtjtgZ8OMfP0uiq4GynYR6lR9A
/LxJrYBOleymS6yU7+2bpTuZTvg6sYZElHK5J5CF2SObjmZc+SSYgxeS8yUYO3uK
+w899f+JkGQictZSVidD3uld8UrSiVhy+sIkR7tgm2qcCs1lvbNtS14/WgC3S5ej
9f/IV4k2zZYgBjN4ID9898HBIRpUZ0M2KV16y8mjrTXU9tW00e0povbTYLNkOeaK
Slytrd//6OHOA20pb9bcKh5+lfDN5KbNFUmFzvlMLSm72HudQMlV6APIpi35Saka
vtaDa+Ncvk1o2/to/egWARu3DRyViE6yU0QQlHazBRtRomXBzAbkf6hDuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpok+smB1+hbZUFW0mpcwWFBmsaMB8GA1UdIwQY
MBaAFA6xvTDTGRqHx9CkYuZ5MkMWM90eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQt
NGUzMzQyN2Y3MzRlLzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQtNGUzMzQyN2Y3MzRl
LzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6dPcjPs
W+ZbGuYP/KhbJ/6ObN7HE1qzwzq07NRHzOs0R78qXkkzE8rkQibI4pNK/mW0rBvw
BGLxCdAo+J2pEperWYtQaj6Nz2qWY+CX6FenbmIF3izHfAaIh7TGqLYLHorkPbWW
yx2oGbJtSWAbQubREpSNdMHp1ttxykGvkUmpxohZHL3spx3pYBVQwQ5oLjfr7B4H
0V2bPNr13MNx9i026VhZFeii6fcopdPUlfzhaMtw7sR4BaQJTpUKGj02BGRSw+Iv
mnIYwhVwYqBabtAde1hRI1c/TJH41EezaQ5kD5bNYTAh34BBellr/SemQXp9kwSr
B8lbRGgymsjtiQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:48 2026 by rpki-client