Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: cX6jYAVH3vLbTOapmot5qybaFh7dmGaL5cuCTxf51f8=
Subject key identifier: D4:89:89:BD:2E:22:CA:59:0E:3B:D2:68:29:C2:6C:18:9B:95:E5:1B
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 01A1DCF00EFD69B231028C572BC9388DB67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 02:01:22 +0000
Manifest this update: Sun 15 Nov 2026 02:01:22 +0000
Manifest next update: Mon 16 Nov 2026 02:01:22 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: 7z1TvyLD5dgeUs207lVf4pz+oi+cyd/jZMB6Ck8fGPE=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:0e:fd:69:b2:31:02:8c:57:2b:c9:38:8d:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Nov 15 02:01:22 2026 GMT
Not After : Nov 16 02:01:22 2026 GMT
Subject: CN=d48989bd2e22ca590e3bd26829c26c189b95e51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:2e:3d:1f:b2:6e:5a:62:5a:78:27:2a:0c:
05:94:01:df:79:33:63:56:ba:41:8f:64:a6:b3:26:
60:1b:f2:7c:4e:ea:4a:e1:16:b0:e8:1b:09:b7:12:
fd:a8:01:0c:b4:6a:ad:52:6b:60:98:5a:4b:47:af:
3f:ae:e9:d6:dc:07:7f:e4:65:f4:d8:41:77:c9:12:
81:eb:32:29:87:4c:93:7b:7a:1d:0a:13:bf:31:a8:
bd:2a:1f:b9:a6:3f:77:86:1f:f6:47:ab:30:5d:5a:
2c:11:de:cf:47:77:86:7e:c4:19:c5:8a:a0:0b:3f:
d6:81:ef:88:f6:ce:c5:df:b9:13:22:be:dc:38:ab:
f2:a2:90:15:4d:6c:77:08:15:b8:63:0f:91:03:50:
9b:1e:2a:b7:a2:5f:01:26:9b:97:90:7a:da:22:e0:
43:d7:3f:1a:ee:80:a3:c7:90:03:da:63:4a:c6:33:
62:2e:33:9a:8c:43:8f:3c:08:b7:28:11:23:a8:bb:
f5:4e:02:9f:4e:14:8a:84:c9:05:cd:08:28:c6:1c:
9c:f2:36:64:4a:24:06:43:73:cc:d0:4e:ca:7f:e1:
23:89:ee:52:45:9d:af:87:cd:d3:b3:32:ef:d4:c1:
0a:3f:c7:41:e5:30:f8:c4:6e:29:93:24:de:ae:4a:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:89:BD:2E:22:CA:59:0E:3B:D2:68:29:C2:6C:18:9B:95:E5:1B
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:91:7a:0a:11:6d:64:2f:7f:49:51:e0:19:d4:58:2d:aa:
e7:8b:a2:fe:8a:24:72:22:f2:a6:5d:2b:e0:4d:fd:aa:af:ff:
fa:e9:ab:03:8a:a6:94:fd:cd:67:66:33:ba:eb:10:fa:b9:e9:
d3:62:6e:15:9c:c1:31:e1:a5:a4:03:a9:6a:53:dc:b5:9e:f6:
c6:44:08:61:97:1f:30:f3:2b:e3:fa:5f:14:e0:c0:96:18:dc:
13:bc:05:8b:c7:6e:29:55:f1:11:75:83:af:37:d6:d3:dd:22:
6e:e6:d2:3a:35:62:ee:a0:f8:08:61:b3:a5:31:18:bc:ae:46:
6d:91:eb:71:a8:15:b1:e4:53:9d:21:73:3e:ce:08:9b:1d:88:
60:17:05:fe:bc:e2:fe:2c:6a:7c:01:20:5e:07:97:63:6b:51:
8c:1b:4d:ff:a2:fc:39:ce:67:0c:56:a6:13:6b:b1:f5:0b:cc:
42:35:7d:22:88:c8:10:f7:38:1a:f2:4a:b6:44:6a:2c:b2:9f:
7b:74:7a:44:d7:41:8d:45:e0:87:00:db:a2:57:b0:81:a9:31:
e7:f1:ff:51:d0:7e:b9:e0:c3:90:e9:cb:5b:c4:97:f1:6e:35:
47:71:11:4a:d8:52:8c:9d:fb:a2:41:dd:97:4d:cc:1e:7f:50:
13:fc:16:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8A79abIxAoxXK8k4jbZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi
NzI3MjcwHhcNMjYxMTE1MDIwMTIyWhcNMjYxMTE2MDIwMTIyWjAzMTEwLwYDVQQD
EyhkNDg5ODliZDJlMjJjYTU5MGUzYmQyNjgyOWMyNmMxODliOTVlNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT4uPR+yblpiWngnKgwFlAHfeTNj
VrpBj2SmsyZgG/J8TupK4Raw6BsJtxL9qAEMtGqtUmtgmFpLR68/runW3Ad/5GX0
2EF3yRKB6zIph0yTe3odChO/Mai9Kh+5pj93hh/2R6swXVosEd7PR3eGfsQZxYqg
Cz/Wge+I9s7F37kTIr7cOKvyopAVTWx3CBW4Yw+RA1CbHiq3ol8BJpuXkHraIuBD
1z8a7oCjx5AD2mNKxjNiLjOajEOPPAi3KBEjqLv1TgKfThSKhMkFzQgoxhyc8jZk
SiQGQ3PM0E7Kf+Ejie5SRZ2vh83TszLv1MEKP8dB5TD4xG4pkyTerkpJqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSJib0uIspZDjvSaCnCbBibleUbMB8GA1UdIwQY
MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt
M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5
LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/yRegoR
bWQvf0lR4BnUWC2q54ui/ookciLypl0r4E39qq//+umrA4qmlP3NZ2YzuusQ+rnp
02JuFZzBMeGlpAOpalPctZ72xkQIYZcfMPMr4/pfFODAlhjcE7wFi8duKVXxEXWD
rzfW090ibubSOjVi7qD4CGGzpTEYvK5GbZHrcagVseRTnSFzPs4Imx2IYBcF/rzi
/ixqfAEgXgeXY2tRjBtN/6L8Oc5nDFamE2ux9QvMQjV9IojIEPc4GvJKtkRqLLKf
e3R6RNdBjUXghwDbolewgakx5/H/UdB+ueDDkOnLW8SX8W41R3ERSthSjJ37okHd
l03MHn9QE/wW0g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:06:04 2026 by rpki-client