
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: AKm81DCwTVxUnyhbVyVYWER2ynIklk8LMXp/HbM6wzE=
Subject key identifier: CC:91:03:5B:55:27:FA:84:D5:7C:3E:4A:DE:72:B8:D1:0B:53:95:FF
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019D27E05AE2DBFA40678F8CB132922795CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 069B
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: u31r1Leo/uXekNrqj4/FBPH9WaLiFYyBvizJpYjKFRg=)
2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5a:e2:db:fa:40:67:8f:8c:b1:32:92:27:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=cc91035b5527fa84d57c3e4ade72b8d10b5395ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:73:c7:d4:03:41:75:5e:bb:a8:69:0f:62:
89:4f:5d:c9:1b:d6:87:b9:2c:54:f9:62:70:43:e0:
45:94:f7:e4:d4:5e:d0:f0:4e:b2:69:3e:3f:29:94:
ae:b4:43:d4:ab:a8:04:e1:6d:89:80:b5:e5:34:09:
21:1a:21:e1:b6:68:53:e1:2b:65:09:16:62:6e:38:
0e:43:10:f4:eb:c8:28:4b:07:b9:22:77:dd:ff:d9:
2e:54:c1:1d:2d:a0:19:c0:41:7a:43:d0:b1:1f:8d:
a1:ec:c0:7e:d2:5b:cc:d4:7b:fd:6b:32:62:99:c1:
0b:28:83:9b:a1:7f:0a:26:e7:52:55:ab:a3:a2:aa:
90:eb:02:d9:e9:12:e7:f0:3e:86:85:9e:2b:49:d4:
c8:67:44:c6:9e:45:4f:cb:0b:19:9e:79:95:6f:1d:
e2:54:23:11:62:c8:e9:ae:2d:f2:36:c4:98:88:90:
72:35:f1:47:d3:fb:17:d3:03:e2:ac:94:ff:1a:6b:
59:c4:f9:4d:bc:e7:17:ae:c8:e6:0c:0d:82:e6:20:
f5:3a:ff:85:22:3f:0d:d1:96:4a:3b:ea:02:52:77:
e0:99:ab:0c:c6:d2:2d:b5:de:89:26:51:06:98:54:
3f:f5:cc:c6:4a:ce:b4:5e:ea:46:d0:65:1a:4c:c1:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:03:5B:55:27:FA:84:D5:7C:3E:4A:DE:72:B8:D1:0B:53:95:FF
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:82:fe:84:6a:ac:43:51:bc:ec:e7:38:a0:98:96:67:27:
13:44:31:c1:9a:ea:94:58:86:67:fe:73:11:1b:45:be:05:aa:
cc:75:2b:71:79:be:4f:6e:a4:97:f6:4c:b8:f9:94:81:f9:8b:
d1:ec:32:99:32:ff:54:4a:f0:1b:46:80:2a:33:ae:b6:d3:5c:
4b:00:70:49:4d:5b:72:10:b5:66:08:15:c9:90:70:ba:a3:ab:
11:d4:c1:94:ba:c4:af:01:99:48:d9:81:ea:b2:6e:f8:98:5b:
16:c4:ac:78:d3:a5:52:7e:79:97:c7:66:72:b9:df:18:a3:96:
58:a7:3b:e8:35:78:bd:4d:83:81:8d:b0:8d:a6:60:e0:ae:53:
44:06:57:6d:72:eb:df:42:6a:c8:04:20:55:7e:f4:00:5d:69:
99:b8:53:e3:f4:e4:b1:be:57:b7:6a:59:11:a6:88:12:2e:b2:
4c:4f:57:4b:c8:88:82:7b:20:cb:aa:8c:26:15:fb:1b:7a:02:
ec:cc:8f:46:88:43:ba:bf:0f:1a:85:bc:ef:9b:7a:ff:f6:3d:
29:5b:ca:1f:b8:5c:a5:a5:16:9e:db:74:75:1a:b2:ea:ca:e9:
48:2a:c9:a7:46:4e:e6:e2:96:df:90:39:b2:f5:43:5f:35:6f:
77:86:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:39 2026 by rpki-client