Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: sJ6Qx22nJSq8SDmhGHAiTQgDJWgt/9swnk6KESMqJGk=
Subject key identifier: 41:F8:28:F5:D5:65:54:C0:E7:11:30:D7:DC:A7:4A:E8:F5:D5:C0:8A
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019D265EF76BA948816E65A4776B02535C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 14A7
Signing time: Wed 25 Mar 2026 19:00:51 +0000
Manifest this update: Wed 25 Mar 2026 19:00:51 +0000
Manifest next update: Thu 26 Mar 2026 19:00:51 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: VQ39AEt5cZgLFZ+Wz2FwZJVCiAgHib6/+ldW0Kv7AuE=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f7:6b:a9:48:81:6e:65:a4:77:6b:02:53:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Mar 25 19:00:51 2026 GMT
Not After : Mar 26 19:00:51 2026 GMT
Subject: CN=41f828f5d56554c0e71130d7dca74ae8f5d5c08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:1d:de:68:13:a8:f1:5e:8c:a6:39:96:f2:
52:79:4e:f7:0c:0e:2c:60:74:82:ca:d1:1c:17:99:
97:6f:56:dc:f4:15:f7:f1:4c:d3:20:3b:54:ea:0b:
3d:64:75:7e:33:c9:a9:49:82:ac:1a:e7:b7:31:b7:
f4:23:aa:d7:cb:42:c0:81:eb:07:e5:80:93:30:20:
f3:c7:75:c5:11:ce:09:7f:a3:2d:a0:1d:91:5c:1d:
37:5f:49:5a:73:8c:0f:ae:eb:85:d6:6f:6f:c4:13:
52:b1:f5:72:9c:a7:48:d3:9a:85:cf:0b:46:68:25:
0c:62:76:02:69:86:d7:3e:f6:af:2d:cc:ef:db:24:
5f:ae:1f:2b:a3:5d:a5:48:fb:d1:bc:ed:18:f2:16:
1c:0a:fc:2a:11:71:96:8d:a4:f4:5a:fa:e8:fa:27:
45:76:13:1e:50:cc:5d:80:db:ce:fc:57:db:5c:36:
bf:1e:5a:a9:96:94:0b:cb:38:2a:93:e6:4b:3f:a7:
51:b3:f0:fa:71:bf:54:d5:8c:cb:27:c0:48:6a:bc:
d9:72:0a:56:ea:4c:71:a9:89:d6:4a:de:47:d7:fe:
71:e5:55:c1:13:0e:86:ff:8e:85:31:14:bd:9d:c1:
c3:09:0d:c6:9f:50:5a:13:4b:ea:da:5c:02:d7:34:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:28:F5:D5:65:54:C0:E7:11:30:D7:DC:A7:4A:E8:F5:D5:C0:8A
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7b:4e:f9:2a:39:e4:67:ae:a4:c1:d8:cb:ea:2c:2f:4b:a3:
2b:e0:d8:0f:9b:b8:0f:bb:84:67:74:92:e5:36:91:b4:de:c3:
fd:04:10:dc:fc:d3:9f:a8:38:5c:e9:3e:c8:b7:59:6c:b8:cf:
4a:b0:1f:5e:b2:85:29:8c:a7:41:10:78:ea:88:fc:c8:14:75:
89:d6:4a:eb:ca:b7:86:92:4e:3d:5c:3f:10:0f:e3:20:65:a8:
45:52:81:28:19:a0:c2:b3:00:bd:ec:11:c0:ec:22:db:fd:c8:
00:c5:39:d3:ed:54:ce:a0:60:42:e0:03:30:01:ff:17:10:65:
31:b1:30:21:8e:14:b0:73:f6:c3:27:a3:97:60:a4:90:d7:9d:
c5:1e:12:10:cb:f6:bc:5d:05:9d:b2:cf:60:28:0b:8f:c6:f4:
2e:ad:57:8a:16:c6:5c:0a:c1:45:ea:74:4f:a7:b0:9b:78:e7:
8b:40:0c:6f:18:d3:cc:e1:0b:9c:e6:3c:e9:b4:f8:6a:ee:85:
4e:d9:59:e4:fe:35:47:e0:af:db:61:63:c5:ed:8f:5f:5b:91:
c4:b8:7a:a1:62:7f:44:d5:6d:94:20:d0:88:3f:54:b7:14:76:
2b:b2:66:ab:fb:73:19:ce:53:8a:d7:10:50:80:bc:ca:ac:d7:
91:48:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:25 2026 by rpki-client