
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: Lj/yUoFPJj64FU3ZmF2LOw9DfCDn6v2NzOiEAN5o8LA=
Subject key identifier: 34:BB:25:88:1D:2E:03:C4:82:C7:38:2A:9E:88:AA:86:18:70:D7:F2
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019E1F1110CD03CB72B1E4EEC7BA15D1DF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 071B
Signing time: Wed 13 May 2026 02:01:12 +0000
Manifest this update: Wed 13 May 2026 02:01:12 +0000
Manifest next update: Thu 14 May 2026 02:01:12 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: LQKEdzDfxYUY6I7U7MV7eltNepDXZSTANbRdtNVeCE0=)
2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:10:cd:03:cb:72:b1:e4:ee:c7:ba:15:d1:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: May 13 02:01:12 2026 GMT
Not After : May 14 02:01:12 2026 GMT
Subject: CN=34bb25881d2e03c482c7382a9e88aa861870d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:c6:c8:86:32:69:30:38:75:83:49:d6:f0:
2f:a7:61:19:61:a3:52:bc:b0:4e:24:14:cb:e4:b6:
93:bc:47:cd:bd:6c:49:21:35:cd:93:be:85:dd:e8:
3a:ce:c6:83:ef:ed:92:e3:4d:b2:ec:82:df:43:3c:
78:35:85:af:af:58:7a:78:3e:6d:3f:8f:07:54:5a:
49:34:f5:2a:6c:f9:7e:42:55:0c:10:0f:37:35:49:
02:99:5d:0e:92:38:53:87:a7:91:13:ec:80:ce:69:
f3:41:3e:51:93:23:62:6d:79:fc:c1:6b:6c:ba:90:
af:66:9b:47:aa:5c:68:3e:78:73:da:3e:14:8c:99:
83:4f:40:d2:f0:69:1f:81:ef:c2:9a:c6:a3:3f:e5:
b3:1a:89:9c:89:88:69:de:ef:10:c1:f2:53:70:9e:
72:15:32:60:a5:fc:c3:65:fa:2d:43:dd:0d:f1:34:
f4:cb:da:d0:34:8d:3a:9e:71:1c:fe:21:bd:d5:26:
04:6e:ac:8c:22:ac:fe:31:be:e3:57:d1:7b:76:8e:
b0:d9:fc:ef:8f:cf:68:2d:0d:cb:50:9e:f8:61:5a:
2b:df:80:a6:b6:5e:fc:21:3f:8b:d3:e0:4d:0a:11:
b1:bb:a1:23:c7:2a:fc:68:47:85:e6:9d:6b:41:bf:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:25:88:1D:2E:03:C4:82:C7:38:2A:9E:88:AA:86:18:70:D7:F2
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:6a:5e:38:70:44:81:c9:9e:78:a1:17:19:08:25:52:f8:
37:8d:30:2a:af:96:bd:8f:be:8f:35:3e:d0:7f:e8:d6:e5:79:
e6:e1:9d:21:1d:c5:13:25:60:69:9f:d0:59:ee:38:6c:34:f0:
1c:b9:ba:4c:58:82:8f:96:27:03:9b:3c:fb:22:db:5f:be:a6:
be:e3:e3:15:db:7c:72:94:27:a9:b3:d2:b5:bb:31:59:09:8f:
97:8d:a5:5e:cb:f6:35:f9:8a:28:81:8f:3e:b9:9a:1a:2d:ac:
47:65:11:32:0a:6a:24:8e:24:67:4d:3a:94:d6:f6:6c:b5:81:
8c:08:68:17:3a:7a:93:02:7d:1d:1b:4f:b5:0b:0a:b7:ab:18:
f2:ee:ff:f2:63:c0:9c:d0:42:db:59:71:49:99:a3:00:55:b3:
ad:39:43:4d:ea:fc:73:dd:f8:60:05:6e:2e:86:b1:98:01:02:
e1:6a:f5:8c:db:60:1c:8a:c0:2a:dc:a6:a7:b2:53:0e:31:3c:
d3:83:5b:a3:9c:91:0a:50:be:16:1f:51:b2:95:27:ab:4f:3e:
ac:64:f2:b2:a3:90:0d:93:7f:38:13:8f:6a:9f:6a:e6:4b:91:
6a:d5:e6:42:67:4f:d4:1c:b8:4d:34:8c:33:a8:05:8d:13:6b:
77:91:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:33 2026 by rpki-client