Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: O6ajpbr8584LuMmAISIo4jg+e/EvjAqMpj9eBr2/qpI=
Subject key identifier: 8F:90:B4:5B:53:71:02:A2:7B:FA:07:4A:73:94:BA:B5:C5:28:D6:88
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019E1D902410F3F00BB0DEB2C48B5E11ACB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1527
Signing time: Tue 12 May 2026 19:00:46 +0000
Manifest this update: Tue 12 May 2026 19:00:46 +0000
Manifest next update: Wed 13 May 2026 19:00:46 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: tV4vqd2YN0UtWETij99p9r+5AFPXhD0zZkLkMl3toNM=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:24:10:f3:f0:0b:b0:de:b2:c4:8b:5e:11:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: May 12 19:00:46 2026 GMT
Not After : May 13 19:00:46 2026 GMT
Subject: CN=8f90b45b537102a27bfa074a7394bab5c528d688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:97:15:ab:47:76:4a:4c:6c:78:a0:f0:08:
e0:72:b2:a9:b7:a6:c5:61:17:96:44:6b:03:26:8a:
c5:67:05:cd:60:0a:51:ca:73:37:32:fe:28:39:55:
f1:0a:cc:df:39:bc:a4:85:5a:8f:02:bb:30:3c:01:
74:2c:ad:5f:ac:06:b6:90:38:6f:91:1a:2d:07:9b:
66:02:03:a3:d5:86:fe:95:08:50:d3:d4:b9:40:66:
3e:fc:d4:5a:5d:3b:4f:c4:f6:be:32:31:92:50:84:
04:9d:e2:7b:a9:a5:aa:9f:39:45:39:6d:18:12:b6:
a0:19:10:d0:ae:f2:c7:f7:45:36:28:0a:a5:55:a3:
17:57:9e:15:94:7d:72:fb:5d:d6:9a:ab:6a:54:ca:
33:c2:4f:21:7c:e5:a1:39:0a:62:49:71:a9:0e:42:
7d:cc:cc:16:6c:eb:cf:b6:b0:28:dc:9a:b8:67:2d:
67:b3:9e:6c:67:d5:4e:00:c3:ab:4e:e6:c9:ac:38:
e2:83:98:d8:51:95:81:7d:c2:13:ba:6a:cf:58:a7:
22:4f:8f:43:ca:93:2b:8a:1e:cd:2f:c7:08:55:3f:
3f:19:eb:2f:18:8e:67:34:a8:b0:13:09:c3:22:a5:
39:a3:6d:a9:12:59:bc:b1:33:9a:22:41:34:de:97:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:B4:5B:53:71:02:A2:7B:FA:07:4A:73:94:BA:B5:C5:28:D6:88
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e4:31:65:8f:0f:57:b3:d6:76:7a:78:3b:a1:ca:23:34:5e:
00:55:17:f5:32:4c:f5:95:8f:66:bd:ee:8b:82:56:0f:2d:dc:
70:65:0a:ea:a4:ed:ad:95:ca:04:93:ad:27:f9:1a:e2:13:d9:
d4:82:60:15:90:8e:7c:d9:88:5d:48:14:3c:ee:ca:5d:21:59:
b8:6b:eb:1f:ca:85:c1:77:45:87:34:99:7c:e0:3a:3f:07:89:
03:e1:7e:71:72:e1:7e:4d:ce:14:7d:83:5e:a7:8d:e0:46:5c:
c0:4e:b1:74:4e:ca:41:5c:74:bd:65:ca:d5:ce:09:59:f4:fc:
d3:cb:10:cd:cc:62:1f:fd:a2:1b:27:78:ed:b0:b0:26:0d:6b:
af:a8:06:58:51:ff:19:ec:31:ea:a8:a4:f8:65:68:4d:15:76:
61:f3:ba:3e:98:ff:04:c2:71:58:5e:6a:dd:30:03:0a:c4:4c:
9c:50:50:31:8a:88:7a:22:92:33:41:80:6a:e4:b8:df:be:bc:
f8:a0:33:43:7d:b3:12:04:ec:a5:c5:a3:07:fd:58:ef:ae:dc:
7e:3c:99:6e:9a:ed:52:b6:fa:9d:d3:9e:1c:57:ec:7b:08:03:
93:a0:30:a2:65:ee:14:a4:27:a8:ca:31:60:bc:92:2b:50:cb:
99:b3:31:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkCQQ8/ALsN6yxIteEay2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjYwNTEyMTkwMDQ2WhcNMjYwNTEzMTkwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZjkwYjQ1YjUzNzEwMmEyN2JmYTA3NGE3Mzk0YmFiNWM1MjhkNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbSXFatHdkpMbHig8AjgcrKpt6bF
YReWRGsDJorFZwXNYApRynM3Mv4oOVXxCszfObykhVqPArswPAF0LK1frAa2kDhv
kRotB5tmAgOj1Yb+lQhQ09S5QGY+/NRaXTtPxPa+MjGSUIQEneJ7qaWqnzlFOW0Y
EragGRDQrvLH90U2KAqlVaMXV54VlH1y+13WmqtqVMozwk8hfOWhOQpiSXGpDkJ9
zMwWbOvPtrAo3Jq4Zy1ns55sZ9VOAMOrTubJrDjig5jYUZWBfcITumrPWKciT49D
ypMrih7NL8cIVT8/GesvGI5nNKiwEwnDIqU5o22pElm8sTOaIkE03pdx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+QtFtTcQKie/oHSnOUurXFKNaIMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOQxZY8P
V7PWdnp4O6HKIzReAFUX9TJM9ZWPZr3ui4JWDy3ccGUK6qTtrZXKBJOtJ/ka4hPZ
1IJgFZCOfNmIXUgUPO7KXSFZuGvrH8qFwXdFhzSZfOA6PweJA+F+cXLhfk3OFH2D
XqeN4EZcwE6xdE7KQVx0vWXK1c4JWfT808sQzcxiH/2iGyd47bCwJg1rr6gGWFH/
Gewx6qik+GVoTRV2YfO6Ppj/BMJxWF5q3TADCsRMnFBQMYqIeiKSM0GAauS43768
+KAzQ32zEgTspcWjB/1Y767cfjyZbprtUrb6ndOeHFfsewgDk6AwomXuFKQnqMox
YLySK1DLmbMxzg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:46:51 2026 by rpki-client