Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
File: dr24CfTd5EyCqeW9i3cS1tdjvws.mft (raw, json)
Hash identifier: 97UKj/6fdX/DsVMiyffWdhbcHcgwcFTnGMSv1QRxLlU=
Subject key identifier: B2:7D:CE:5D:4E:54:BD:89:35:74:D5:9F:E1:73:A4:41:47:72:17:DE
Authority key identifier: 76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
Certificate issuer: /CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Certificate serial: 01A0E964FEB7D0F81B6627AD36CC382F869A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
Manifest number: 0278
Signing time: Mon 28 Sep 2026 19:01:45 +0000
Manifest this update: Mon 28 Sep 2026 19:01:45 +0000
Manifest next update: Tue 29 Sep 2026 19:01:45 +0000
Files and hashes: 1: DElIG2I4poXxTLyxmk8qHhToIrc.roa (hash: EymYSA7xmGhavoS2+cvnhWPb/p1asE537I39DsH2QsI=)
2: dr24CfTd5EyCqeW9i3cS1tdjvws.crl (hash: CeGnF5/m0q3ntsP0VzVWLVPP7cIDz2i3KqxgZnOPWnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:fe:b7:d0:f8:1b:66:27:ad:36:cc:38:2f:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Validity
Not Before: Sep 28 19:01:45 2026 GMT
Not After : Sep 29 19:01:45 2026 GMT
Subject: CN=b27dce5d4e54bd893574d59fe173a441477217de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:16:07:97:6d:a1:77:2b:47:45:70:50:96:
60:ae:e9:52:0f:c6:5c:c4:99:12:e7:ba:54:bb:d1:
6b:85:d5:09:00:d2:18:46:91:3a:b1:33:44:68:e1:
ec:8e:ba:f7:9d:2e:97:33:38:b5:ea:5b:0c:64:88:
73:65:b4:c4:9a:28:9c:ac:81:c5:ed:ad:96:b4:9f:
ff:aa:22:86:ee:dc:dd:80:ea:44:7c:91:2a:97:ed:
56:fe:a9:59:ed:1e:05:8c:f0:12:02:a6:76:41:0d:
68:3b:38:a7:e5:3f:aa:93:6f:f3:dc:68:e7:b8:4c:
84:1c:21:c3:e8:5c:d6:b7:7f:f2:f9:df:9d:c0:8f:
a9:1b:33:10:fa:9d:ba:b0:3d:10:9f:b3:5c:9e:58:
60:fd:da:c0:32:8c:d1:25:77:0f:9b:a6:9d:db:9d:
c8:41:bd:4e:4b:90:c5:89:8c:ff:5c:05:13:3e:05:
c8:15:e3:6c:73:e8:85:5f:04:55:23:4d:5a:fc:51:
a2:41:3a:ae:2f:ba:6c:32:f6:81:76:47:e9:dd:ac:
e5:65:4e:0d:11:32:5e:b6:1c:d3:50:80:2e:7a:9c:
9a:e4:68:78:6d:0b:f9:a7:bd:7e:fc:8a:2c:47:e4:
1b:a7:53:55:84:88:5a:ad:1f:f5:8b:25:fb:6b:63:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:CE:5D:4E:54:BD:89:35:74:D5:9F:E1:73:A4:41:47:72:17:DE
X509v3 Authority Key Identifier:
keyid:76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b9:74:bf:41:56:bb:4b:bc:7c:08:3b:8f:80:c2:f9:22:9b:
3f:be:f4:23:85:10:e5:47:e6:b8:59:b7:1a:b9:8b:08:75:c1:
e4:12:78:71:c7:dd:e1:29:36:59:6f:8d:0d:57:2e:3d:fc:2b:
1a:ce:30:24:c4:82:6d:d1:1d:cb:40:c6:20:32:9a:ad:aa:37:
2e:15:22:62:14:34:37:b2:5a:91:fe:cd:b0:30:41:3e:95:53:
3f:0a:c1:3b:d3:d7:c0:19:12:76:e6:0e:b0:8b:3b:86:e7:8f:
3a:d8:21:c8:00:55:f2:d5:8f:51:e6:18:cc:29:dd:6d:b3:70:
4c:08:76:22:4c:fb:2c:39:bf:e9:a9:9b:8e:17:60:95:48:f9:
e6:07:71:63:2e:94:a0:96:67:8b:79:c1:3d:59:97:a1:d2:c1:
71:8f:3c:5e:81:8f:e3:c5:53:5d:67:9b:ab:d9:8f:34:bf:50:
4c:85:3b:fb:3e:b2:09:03:02:69:83:77:36:ef:3a:c5:87:47:
d0:b7:05:c3:3d:a9:d5:e8:56:e2:39:18:67:1a:d8:61:ae:3b:
8e:a8:53:ce:be:50:15:7b:2b:89:f9:a0:23:10:10:4b:e3:d7:
9d:75:48:33:c5:a2:48:06:fe:b5:bc:c2:8d:97:28:fb:d9:fa:
19:af:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:50:43 2026 by rpki-client