Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: xbxeCb2Iyk90pB2IDpwPBnuwRu4K2WJRG7F4C/NKvIo=
Subject key identifier: 22:17:1B:48:BF:47:A6:B6:CF:30:DF:78:D4:BC:95:F8:A3:91:8E:E4
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019D27DF7F30A13F23F8D0B87B1770FA1FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: dhJxH4HGQj4HwtiuXKt+IR6cQKzpRbZvVS5FtbF7CV8=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7f:30:a1:3f:23:f8:d0:b8:7b:17:70:fa:1f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=22171b48bf47a6b6cf30df78d4bc95f8a3918ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:7b:a1:ef:0c:9e:9e:95:25:03:71:92:60:
7c:47:81:6d:b8:42:01:cf:8a:be:1e:c6:69:a1:14:
f5:63:d4:fe:bd:86:ca:69:5e:ac:7f:8e:e5:5b:be:
d7:87:48:b7:39:12:4d:9f:22:33:cb:6f:e7:2b:50:
75:c1:81:17:c8:67:2a:e7:d7:d8:86:6a:22:03:63:
ff:88:de:bf:76:a5:1f:73:e4:15:2a:17:1c:38:fb:
cd:bc:2c:73:90:7e:3a:d3:c3:8f:9f:78:25:93:c1:
4e:4b:15:e9:01:0c:e8:81:81:ec:ea:d5:49:44:9a:
3e:31:b2:6e:62:4c:33:3c:63:78:8c:a8:cb:d6:8c:
8e:c6:b7:0d:68:32:c9:c2:94:0c:6a:31:cd:b6:4c:
71:ee:0f:f9:2d:be:38:2a:2e:f7:42:6b:ab:08:65:
a7:44:55:0d:39:61:94:7f:1e:9e:23:33:ed:f6:f5:
b4:7d:02:ab:2d:e9:4d:25:fa:ac:37:45:54:e1:03:
d2:e3:94:46:e5:e2:7f:a8:28:cb:7f:1c:98:e7:6b:
9f:4f:84:15:34:de:a2:83:9c:f5:c2:ba:72:8c:33:
a7:ce:bc:a7:36:79:18:d7:28:66:19:eb:96:0d:14:
7e:ba:8d:35:a9:cd:dc:54:8f:ed:7d:e9:90:b2:95:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:1B:48:BF:47:A6:B6:CF:30:DF:78:D4:BC:95:F8:A3:91:8E:E4
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c2:f8:55:3a:b2:3d:8f:a1:d1:5c:a0:fe:50:a5:dc:69:d3:
18:d3:da:ab:5c:69:52:94:0d:cb:4b:a9:3c:75:e1:40:d2:91:
9d:b9:7f:43:37:90:6d:c6:8a:2f:b6:44:47:07:58:59:40:0b:
23:6e:78:19:18:c6:33:48:24:e0:67:a0:03:ca:92:49:c7:d4:
12:24:70:62:a5:57:7f:f6:a9:37:4c:73:e4:94:1a:73:c4:ec:
e5:e7:e9:85:0a:b2:47:64:ce:82:98:d2:6b:17:6e:e1:d0:15:
eb:b4:1b:4a:ba:db:a1:c1:09:af:f8:d3:b1:27:b8:92:06:4c:
39:51:04:64:a8:4a:5e:0c:5d:a8:4b:83:b1:ee:67:63:ba:8f:
9a:11:78:06:2b:1e:bd:4d:1a:ef:04:cb:eb:11:c8:97:82:56:
68:d4:cb:26:07:22:15:e3:96:c6:6e:5d:1b:97:67:f8:c5:b1:
75:a6:a6:e7:1f:3b:32:43:34:11:a7:97:b1:30:18:e8:0c:4e:
00:cc:9e:b0:6a:a8:b0:8e:af:d0:1e:ec:11:c7:84:5b:f0:26:
9b:7b:a0:eb:e7:66:35:84:64:00:3e:b1:b2:9d:a3:e5:43:e8:
49:ba:de:ae:bd:3a:db:a9:ad:cf:a2:a1:3b:b1:17:3e:af:eb:
b8:e4:85:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n338woT8j+NC4exdw+h+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi
NzI3MjcwHhcNMjYwMzI2MDIwMDUxWhcNMjYwMzI3MDIwMDUxWjAzMTEwLwYDVQQD
EygyMjE3MWI0OGJmNDdhNmI2Y2YzMGRmNzhkNGJjOTVmOGEzOTE4ZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01p7oe8Mnp6VJQNxkmB8R4FtuEIB
z4q+HsZpoRT1Y9T+vYbKaV6sf47lW77Xh0i3ORJNnyIzy2/nK1B1wYEXyGcq59fY
hmoiA2P/iN6/dqUfc+QVKhccOPvNvCxzkH4608OPn3glk8FOSxXpAQzogYHs6tVJ
RJo+MbJuYkwzPGN4jKjL1oyOxrcNaDLJwpQMajHNtkxx7g/5Lb44Ki73QmurCGWn
RFUNOWGUfx6eIzPt9vW0fQKrLelNJfqsN0VU4QPS45RG5eJ/qCjLfxyY52ufT4QV
NN6ig5z1wrpyjDOnzrynNnkY1yhmGeuWDRR+uo01qc3cVI/tfemQspWFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIXG0i/R6a2zzDfeNS8lfijkY7kMB8GA1UdIwQY
MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt
M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5
LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcL4VTqy
PY+h0Vyg/lCl3GnTGNPaq1xpUpQNy0upPHXhQNKRnbl/QzeQbcaKL7ZERwdYWUAL
I254GRjGM0gk4GegA8qSScfUEiRwYqVXf/apN0xz5JQac8Ts5efphQqyR2TOgpjS
axdu4dAV67QbSrrbocEJr/jTsSe4kgZMOVEEZKhKXgxdqEuDse5nY7qPmhF4Bise
vU0a7wTL6xHIl4JWaNTLJgciFeOWxm5dG5dn+MWxdaam5x87MkM0EaeXsTAY6AxO
AMyesGqosI6v0B7sEceEW/Amm3ug6+dmNYRkAD6xsp2j5UPoSbrerr0626mtz6Kh
O7EXPq/ruOSFUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:24 2026 by rpki-client