Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: R8NqeNcnX6OHpwTOV5Fo2zpepr+o8KJBNPg22DCfqqk=
Subject key identifier: F6:2F:FF:F1:06:77:56:D3:05:D1:38:0D:46:97:0A:B7:91:D5:BA:1C
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019D382E51909B8EF6B8D30F5CBC1FD14B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 05A8
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: ZunePO8L6lCLFRtakQPP2+PF2RMQuVmTtoaki6LyVME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:51:90:9b:8e:f6:b8:d3:0f:5c:bc:1f:d1:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=f62ffff1067756d305d1380d46970ab791d5ba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4c:08:c0:38:66:c7:bd:51:a9:1a:6d:26:84:
0b:8c:cd:01:0c:75:37:6a:e3:e3:8f:e7:3d:e0:2b:
a8:36:0e:20:62:2a:bb:7a:9a:68:e7:2e:ad:78:b5:
f9:62:8e:32:41:79:9a:45:aa:e1:1c:a6:b5:12:9c:
cb:12:01:b1:6a:98:b8:2c:68:c0:ab:8d:e7:79:c5:
c9:51:5f:44:04:c5:ab:08:bb:c7:5a:6a:af:8f:28:
01:90:a1:6c:d6:28:8f:2a:45:d8:c0:9e:08:9b:36:
33:0d:6c:e9:0f:ba:37:c7:67:0b:67:88:7b:24:a6:
18:87:28:59:13:b9:d6:23:e9:7b:c4:6c:7c:65:9a:
52:b6:bd:a0:3d:02:58:f2:41:73:d7:16:d4:8d:c0:
8e:f0:09:f2:dd:78:67:ee:43:a4:ba:a0:c9:63:44:
ef:2a:57:e3:44:e6:f2:ff:d1:14:60:d6:59:72:67:
ad:f7:da:8f:8b:f8:c6:62:1d:86:3d:7e:3d:68:7c:
68:54:8c:7a:c1:a1:9d:a8:d4:f8:7b:e3:9c:d0:7e:
8c:82:ad:0a:13:f7:09:bf:ad:ba:2f:df:c5:49:c7:
c8:62:30:39:33:8f:5d:63:a5:09:af:4d:26:18:82:
fd:0f:1d:a3:77:af:e6:77:28:3a:4f:81:96:22:e9:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:FF:F1:06:77:56:D3:05:D1:38:0D:46:97:0A:B7:91:D5:BA:1C
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:18:fd:58:87:f9:dc:26:47:38:87:9c:78:20:ff:ac:3e:d6:
1a:2b:6e:9a:4f:96:17:18:20:4c:26:ae:1f:07:77:22:93:33:
06:40:60:33:be:47:a6:71:0c:bc:04:93:bf:56:5c:bb:fd:79:
d8:40:75:6f:d4:83:12:f0:66:51:d1:42:19:7a:75:f0:57:dd:
b6:19:87:8d:5f:8a:e6:f5:77:7d:cc:ff:80:93:16:8d:51:f1:
ac:11:41:8b:7e:ee:53:49:9b:37:ce:25:41:d8:0d:c1:e0:3b:
36:09:08:fe:a9:af:21:b7:b7:c7:4e:15:93:43:9a:f5:b1:fd:
05:de:66:1a:a4:1e:95:6f:22:b5:4e:75:34:5a:3b:31:22:66:
54:0b:c1:1d:62:1f:12:87:ee:d1:01:44:a7:d4:16:c4:a1:e7:
67:6c:2f:98:10:fc:49:07:48:ca:3b:7f:58:d3:c8:1d:ac:69:
4c:da:44:97:c3:47:d3:b8:41:64:f9:77:b7:75:d3:37:3d:0a:
5b:a6:54:81:89:aa:b6:86:49:d7:7b:89:70:2c:e4:9c:4e:e6:
19:23:b5:22:6c:6f:d3:93:14:55:87:72:f8:9f:8a:84:4f:64:
2e:01:d7:b5:92:21:dc:1b:f0:c4:2b:1a:0d:66:e2:38:49:ad:
32:8d:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:16 2026 by rpki-client