Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File: Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier: 12xMbZ0DBhUC5XKIdDnA8RSBdyduY63mRUWcoGkFCbI=
Subject key identifier: D8:C4:98:12:D2:49:10:6E:6B:E2:83:1E:93:22:76:B3:27:AA:D7:FC
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer: /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial: 019D270449CBF1AF9EE6E9EFF3CD4AFB3A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number: 17D1
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: 9xaM71e9BMRFYv27V5xbMjdqOgI.roa (hash: D9u9E0DcXMocRKo5Wg6KGFp6zb0+RH3c9pC/yeH8pSY=)
2: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: Lg1pNxDGHkDFLMuubH2nB76zfX3weBrsX+KmIq0p484=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:49:cb:f1:af:9e:e6:e9:ef:f3:cd:4a:fb:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=d8c49812d249106e6be2831e932276b327aad7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:80:2e:30:e4:16:3a:05:be:07:c7:0c:25:
cc:3f:75:3a:1e:a4:c7:3a:c7:00:72:f8:8e:75:fb:
7c:9e:b4:83:4d:18:cb:98:a2:9a:82:56:af:92:44:
a2:a3:21:94:92:a3:e1:dd:c7:d6:c7:c2:ee:87:7c:
f1:ba:bc:8d:1e:e4:b1:b7:48:f6:dd:3d:5a:73:10:
51:c5:15:18:a2:99:1b:02:b2:82:a7:d0:38:fd:39:
26:b6:3f:fa:a2:33:3a:3a:8a:c3:ce:29:2f:c2:b3:
2b:ab:9f:87:ac:9e:36:1c:2c:61:33:12:9f:24:1a:
c4:88:a8:6e:c2:79:1f:d8:3b:ba:1e:f5:40:c2:4c:
0b:b5:92:95:0d:d6:f3:12:23:3f:12:c2:4f:c8:25:
ef:9f:8e:cb:bc:eb:71:f7:0e:98:59:57:fe:a0:5f:
e7:72:f6:a3:95:23:86:36:b5:30:74:b2:b9:1e:d6:
7b:63:a9:f9:aa:00:d6:f0:a1:3a:4b:30:ea:d8:bd:
0e:2e:73:81:75:be:73:72:49:b7:b5:6a:a9:ec:9a:
6a:1e:d0:26:f7:ad:e3:42:8b:1d:31:57:8c:22:87:
f2:8c:81:c4:a7:07:1a:ae:72:f1:bd:2d:c7:50:6d:
4d:c6:97:62:0d:51:28:b8:f2:4c:27:ca:88:cc:3e:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:98:12:D2:49:10:6E:6B:E2:83:1E:93:22:76:B3:27:AA:D7:FC
X509v3 Authority Key Identifier:
keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:0b:16:ab:27:9b:ba:24:06:f1:0e:10:5d:c2:88:1f:00:
63:86:7b:c0:59:46:15:2b:54:f5:6b:b4:00:b2:51:d6:c4:04:
39:2a:cf:4c:87:f5:46:14:d1:3f:9d:ea:29:1f:74:fe:b7:63:
5c:fa:40:e2:d1:01:fc:0a:ce:19:c7:90:6a:f8:bc:15:d5:e6:
a0:2e:9b:05:28:53:02:64:35:6d:1a:8e:92:42:16:8b:4b:89:
c1:b2:a0:f1:48:40:11:9a:bf:0d:71:2a:df:37:06:05:ba:67:
df:ea:97:b9:c5:65:08:f1:d7:b2:cb:38:35:f0:02:a6:02:ec:
b8:27:eb:b6:0e:1c:d4:26:de:70:3e:57:ae:aa:f4:f4:b9:3b:
48:a8:43:b2:a1:4c:41:fe:6e:79:0e:57:82:f1:2b:eb:48:46:
35:90:0a:dc:15:69:2f:c3:8f:45:6a:e9:92:a8:28:8a:67:58:
a9:4a:98:ed:fc:59:5e:43:df:69:fb:f7:77:ef:39:a2:f9:3d:
27:6f:cf:49:72:34:ef:ef:b6:ad:ce:75:a9:aa:96:0f:fb:f8:
bb:36:65:99:fc:d1:c6:07:69:2b:cf:15:f2:74:8a:18:06:07:
16:b9:4d:27:2f:c7:f6:44:6d:fa:dd:d8:07:58:3a:34:a4:0d:
0f:3b:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:11 2026 by rpki-client