Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: QpG9tKtBwAQAxXTUWFvlkHZCYD6oDKwdOTQnzkWu1aE=
Subject key identifier: 04:D3:41:FB:A3:16:85:D6:78:0E:39:78:59:06:37:1E:19:56:A3:5B
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019D28BB6901EF00268777F04C7F05AAEC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: u2a2UVB906FwKCzQJvWslqn56a87yF5ke09mUSb8wfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:69:01:ef:00:26:87:77:f0:4c:7f:05:aa:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=04d341fba31685d6780e39785906371e1956a35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:f1:4b:a5:d0:fb:21:de:28:7c:f7:88:d3:
87:cc:b2:61:3c:44:07:63:f3:c9:b2:8a:40:e9:db:
c4:e0:98:4b:81:ab:c8:43:a6:8a:6d:dd:c8:94:26:
05:e9:2d:3d:96:30:8e:20:cd:27:dd:d5:79:b7:68:
1b:7a:7a:90:99:2e:5a:34:4d:82:37:6c:81:83:df:
85:e2:72:22:f2:0b:de:dc:b6:07:2d:48:4b:36:03:
9a:18:e0:64:29:1f:63:3e:08:8d:39:52:6d:10:b5:
d6:26:ea:d2:01:8f:38:c7:73:28:94:7d:cd:9c:10:
22:dc:28:51:34:ae:39:b3:bb:b7:c0:5f:b6:c4:60:
01:da:5d:73:9e:56:7f:42:e7:e3:17:0f:9b:ee:bb:
05:50:0d:81:0a:3a:b8:95:6b:07:5b:e4:d0:c0:9e:
f2:f0:f7:84:ab:af:13:97:ff:4c:a6:8c:31:19:57:
3d:08:24:6e:85:eb:ff:3f:6c:00:60:2b:44:07:53:
1c:69:14:ca:1b:30:dd:ab:e5:1a:f3:1d:f8:41:aa:
81:da:fb:8e:2d:fb:49:cb:b2:8a:d2:d1:af:de:1a:
3a:f1:fc:8a:3f:54:5d:b5:24:a6:ea:6d:0e:a4:62:
ce:2b:c9:46:c8:36:96:9d:b5:b3:bb:b9:5c:84:39:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:41:FB:A3:16:85:D6:78:0E:39:78:59:06:37:1E:19:56:A3:5B
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2c:5e:d9:2d:f6:8c:20:2b:0a:38:63:84:62:38:c2:b4:dd:
c0:cb:df:7e:2d:aa:e6:5e:67:5a:a5:9a:d9:b0:de:98:0d:a1:
96:89:45:b1:17:a1:64:fb:10:8a:a7:e1:02:94:d2:c5:18:0d:
43:6d:b0:ec:ae:79:ef:4b:d9:c1:dc:3f:8a:cd:7e:fb:8b:5c:
a2:ae:5f:ba:89:7e:b3:d3:74:3e:35:17:3b:c4:af:61:24:57:
36:24:1e:da:76:02:45:3d:a4:8a:ba:22:40:36:64:9d:70:0c:
0e:6f:84:0f:ac:50:cd:d2:6d:ca:09:f1:a3:40:8e:3e:2c:ba:
7a:21:54:a8:88:8d:3a:43:61:92:62:61:d3:e0:86:9d:ec:0e:
fb:d4:0a:85:b1:f1:06:e2:5c:db:6f:08:03:8e:5c:c9:38:86:
f4:7d:67:09:b4:5a:56:0e:b2:5a:e4:b1:0d:58:6b:f1:be:cd:
a9:ae:ab:2c:5b:39:9a:77:21:77:75:ff:b6:0a:e9:e1:c0:48:
5e:4b:7e:aa:8b:1c:e7:4c:42:91:3b:7e:58:4c:fe:08:7d:a8:
63:5c:a4:f2:e7:10:95:92:e3:86:c2:5e:49:c4:80:ac:5b:2d:
1b:9d:98:62:a2:02:08:53:e0:6b:9e:96:03:39:2f:88:e8:24:
6b:88:20:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:39 2026 by rpki-client