Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: 7Y/jTTkj9rpgCTd+x8l4NyDtY/RPdSrA/rZa6Qqp3kA=
Subject key identifier: B0:27:B2:D2:E0:F3:33:A9:12:52:68:89:09:F7:5C:47:5C:48:F4:93
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019F190CD83F9CD8FB02C4A86CDEADAF7DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 06A1
Signing time: Tue 30 Jun 2026 15:01:39 +0000
Manifest this update: Tue 30 Jun 2026 15:01:39 +0000
Manifest next update: Wed 01 Jul 2026 15:01:39 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: 39SGokLFfDgAj85aB9kLIyRLBHjpchrww51M9+T2TL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:d8:3f:9c:d8:fb:02:c4:a8:6c:de:ad:af:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Jun 30 15:01:39 2026 GMT
Not After : Jul 1 15:01:39 2026 GMT
Subject: CN=b027b2d2e0f333a91252688909f75c475c48f493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:bb:0d:d7:8e:2b:ca:ee:75:59:e7:fa:d7:
52:9c:fd:86:72:69:5f:7c:ef:eb:3e:94:ef:22:a6:
c7:c6:73:dd:89:ae:c4:b8:bc:92:38:7f:e4:c1:d9:
2b:c4:14:8d:56:d7:11:45:96:d0:a1:02:96:1a:a4:
d7:04:b9:fa:74:ea:46:81:53:45:d3:ed:60:54:1a:
29:5b:f0:68:6c:53:fa:b6:e2:fc:b8:7a:34:e7:31:
44:43:55:4e:22:a7:42:2b:c5:7e:f2:ac:97:6c:a4:
73:57:cd:13:d6:8f:92:d3:41:c8:eb:70:51:ad:1e:
cc:0a:61:48:b1:97:dc:cb:8b:af:d9:3b:1d:e0:0e:
e6:5c:12:85:57:46:d4:06:7f:e5:24:9f:3d:5b:83:
73:59:16:da:bc:d0:0c:7d:16:6f:e4:d8:db:3e:2c:
42:8c:00:bb:db:b1:17:59:6c:ff:ee:d7:b1:41:35:
1c:77:99:17:e5:b5:59:b6:c0:6c:fe:68:34:f0:05:
62:fa:84:74:1d:e7:ab:2f:32:54:6c:31:8d:71:97:
3e:fe:f0:3f:22:5e:f2:5c:96:09:b9:19:2c:da:1f:
26:49:5a:4e:32:4d:f6:1c:d7:20:cf:11:b7:47:ca:
b7:31:da:f2:b8:d7:af:be:2e:6e:bf:01:48:65:7f:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:B2:D2:E0:F3:33:A9:12:52:68:89:09:F7:5C:47:5C:48:F4:93
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:b5:45:77:68:75:da:1a:6a:80:d8:5e:ff:38:eb:ab:09:
60:f2:4e:ab:6d:00:de:91:3b:25:07:54:f5:93:e5:a2:ab:97:
5a:9b:0c:16:7b:dd:aa:ac:c0:2d:dd:72:d5:f3:bf:72:72:0f:
af:3a:2b:44:75:61:c8:f2:c7:4a:97:86:22:89:56:f9:32:97:
41:73:e8:fe:db:3c:7a:73:7c:1a:a6:26:33:45:ef:4f:5a:80:
f5:21:83:ff:f2:09:56:fb:55:95:9b:e8:d3:c0:35:35:3f:c3:
42:6f:90:cd:81:e1:29:85:5c:2b:04:5c:58:2b:3a:40:0a:dd:
7a:42:00:c3:51:ba:bf:7e:24:36:41:aa:74:2d:19:7e:aa:63:
a8:7b:ee:ea:87:c8:be:b1:d2:c9:f2:b5:c3:b6:00:02:cd:02:
26:5e:45:0d:34:06:07:84:8a:a3:9b:de:ea:6b:cc:9b:1e:b3:
8f:2b:ab:e0:1e:a6:b4:1d:b5:1f:46:7c:df:93:af:29:11:0f:
55:ec:39:cf:2e:d7:95:81:5e:44:ff:4c:98:f1:0b:e4:73:bf:
b4:f2:94:2b:c5:02:fc:65:01:cf:b8:9f:3d:d0:b2:9a:47:90:
06:58:64:de:b5:af:1c:a7:95:81:a4:0e:5a:03:37:e0:dd:35:
13:c3:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:30 2026 by rpki-client