Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier: mIauv3PDKVEzjiwT+Jmoghi4loicwQfyQxl4/r174Us=
Subject key identifier: 09:87:4D:1E:DE:2E:85:9A:29:F1:94:5C:E5:F4:3A:BD:B9:E8:D2:36
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 019DCF3E63713025C319BFFED28F2ED2D3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 14:01:05 +0000
Manifest this update: Mon 27 Apr 2026 14:01:05 +0000
Manifest next update: Tue 28 Apr 2026 14:01:05 +0000
Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: YMRtHksXGRKxlSdYej0IHzt93GZ1xYQ/NzFh/X1IV6s=)
2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:63:71:30:25:c3:19:bf:fe:d2:8f:2e:d2:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Apr 27 14:01:05 2026 GMT
Not After : Apr 28 14:01:05 2026 GMT
Subject: CN=09874d1ede2e859a29f1945ce5f43abdb9e8d236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:04:d1:20:43:07:2e:5e:01:4f:a1:77:e9:
f4:fc:f8:3d:2a:c4:88:66:b9:eb:d5:6c:71:d1:4b:
bc:a3:21:7c:af:4a:25:95:ca:ec:54:5d:4f:a0:4a:
8f:07:f7:8f:20:0d:7b:bc:fc:b4:0c:c8:ff:45:7a:
29:40:58:94:c7:aa:6b:4d:2f:4a:9f:d3:b5:5c:19:
0c:3c:08:92:54:f6:24:8e:3b:0c:ee:0d:05:b0:a8:
8e:58:6e:8f:bd:43:21:4f:92:83:04:7d:9e:32:1d:
26:fc:70:37:5a:73:f2:21:f5:8d:27:97:6b:2e:e2:
30:f6:be:f6:14:1e:b0:27:59:98:4b:0b:46:62:ff:
0b:17:50:67:c0:09:c5:34:47:c7:e8:da:aa:99:71:
6b:63:1f:01:3e:d5:4c:f0:0a:19:a1:cd:89:b5:71:
3a:04:8d:50:68:05:2a:2c:14:4d:c9:f8:9a:6a:79:
da:2d:ba:65:3b:45:5e:76:1d:c6:61:6c:63:46:d9:
83:b4:8e:a7:16:90:3b:c3:e6:74:9e:7e:9f:f7:1b:
97:2c:c2:15:47:75:de:3b:99:77:7e:00:76:16:7f:
7a:81:3f:0c:80:51:00:87:d7:8d:a1:52:2f:8c:31:
53:a2:de:aa:ba:04:58:67:24:27:e7:55:e7:37:51:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:4D:1E:DE:2E:85:9A:29:F1:94:5C:E5:F4:3A:BD:B9:E8:D2:36
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:40:29:f8:dd:39:9a:ce:b9:8f:eb:23:3a:23:7b:cc:19:4d:
dc:13:e9:4e:a6:01:ab:43:6e:be:54:c4:82:0e:9f:74:4a:1a:
0a:e2:38:11:e3:5d:8d:d5:57:ee:32:1f:78:ca:9a:1a:d6:97:
b6:ea:48:08:ce:a2:51:a3:1a:f7:33:c1:ad:27:db:46:6f:27:
68:90:e2:fb:f6:8b:3d:3a:5e:ad:39:aa:94:63:12:af:08:35:
dc:ea:e8:f3:df:be:e6:61:4e:2d:70:c1:73:dc:6f:f3:8c:94:
45:ed:39:d2:8a:f4:7b:b7:1e:f0:55:97:92:c4:e4:a8:10:5c:
b4:10:f4:2d:93:bc:9d:01:bf:fd:3b:bf:21:25:3d:d4:1a:9f:
16:91:29:7d:23:75:7b:31:47:e5:ed:5e:d9:5e:32:15:86:ce:
29:97:a6:4f:b6:ed:87:10:f7:ff:b0:7a:06:ca:0a:c1:0f:a5:
85:6f:07:ab:6e:c5:01:c8:b8:08:27:b8:42:ee:85:6e:44:af:
4f:98:46:b9:a2:82:7d:68:36:33:18:4c:8d:4a:f9:ec:fc:ac:
b3:72:81:d6:db:f2:b2:ce:34:58:cb:af:08:23:9f:fd:7b:bc:
34:7e:76:9b:ce:92:f0:13:e2:4d:52:f6:dd:46:0b:c3:ff:b3:
80:eb:73:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PPmNxMCXDGb/+0o8u0tPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk
MjM2MDUwHhcNMjYwNDI3MTQwMTA1WhcNMjYwNDI4MTQwMTA1WjAzMTEwLwYDVQQD
EygwOTg3NGQxZWRlMmU4NTlhMjlmMTk0NWNlNWY0M2FiZGI5ZThkMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p0E0SBDBy5eAU+hd+n0/Pg9KsSI
Zrnr1Wxx0Uu8oyF8r0ollcrsVF1PoEqPB/ePIA17vPy0DMj/RXopQFiUx6prTS9K
n9O1XBkMPAiSVPYkjjsM7g0FsKiOWG6PvUMhT5KDBH2eMh0m/HA3WnPyIfWNJ5dr
LuIw9r72FB6wJ1mYSwtGYv8LF1BnwAnFNEfH6NqqmXFrYx8BPtVM8AoZoc2JtXE6
BI1QaAUqLBRNyfiaannaLbplO0Vedh3GYWxjRtmDtI6nFpA7w+Z0nn6f9xuXLMIV
R3XeO5l3fgB2Fn96gT8MgFEAh9eNoVIvjDFTot6qugRYZyQn51XnN1FJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmHTR7eLoWaKfGUXOX0Or256NI2MB8GA1UdIwQY
MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt
ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh
LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEAp+N05
ms65j+sjOiN7zBlN3BPpTqYBq0NuvlTEgg6fdEoaCuI4EeNdjdVX7jIfeMqaGtaX
tupICM6iUaMa9zPBrSfbRm8naJDi+/aLPTperTmqlGMSrwg13Oro89++5mFOLXDB
c9xv84yURe050or0e7ce8FWXksTkqBBctBD0LZO8nQG//Tu/ISU91BqfFpEpfSN1
ezFH5e1e2V4yFYbOKZemT7bthxD3/7B6BsoKwQ+lhW8Hq27FAci4CCe4Qu6FbkSv
T5hGuaKCfWg2MxhMjUr57Pyss3KB1tvyss40WMuvCCOf/Xu8NH52m86S8BPiTVL2
3UYLw/+zgOtzSg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:00 2026 by rpki-client