Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: Am/kcaMRCKaKC1MwXwkB6lC7m2s6F++J8jyRSbglo/c=
Subject key identifier: DE:A6:05:06:8E:89:E9:AF:C7:C9:6D:4A:19:EA:E0:51:57:91:0E:DC
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019F92B6CE2965121E527D1EABA319A91149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 06E0
Signing time: Fri 24 Jul 2026 06:01:21 +0000
Manifest this update: Fri 24 Jul 2026 06:01:21 +0000
Manifest next update: Sat 25 Jul 2026 06:01:21 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: dcdpSI1zIgDIJbY7HH3PRqZSo6/3nu87+DRHkTPIXwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:ce:29:65:12:1e:52:7d:1e:ab:a3:19:a9:11:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Jul 24 06:01:21 2026 GMT
Not After : Jul 25 06:01:21 2026 GMT
Subject: CN=dea605068e89e9afc7c96d4a19eae05157910edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:7b:9f:a4:47:20:a1:31:ea:03:0f:50:d8:
b5:34:ab:2e:11:1e:11:79:61:35:aa:f5:b1:d6:1a:
e9:f1:78:81:05:70:44:b4:b1:54:5f:39:8b:89:21:
9d:95:e8:a4:7a:d6:65:18:6e:6d:bc:fb:dd:f2:69:
7f:07:44:7b:c9:90:f0:0b:8d:0a:a9:84:6d:27:65:
e2:d4:44:d8:d9:22:75:ea:35:6d:3b:7d:91:36:4d:
20:d9:7b:68:7b:8a:bb:82:84:ab:16:25:c6:c2:02:
bb:8d:f7:26:9d:d6:59:64:32:34:84:89:b6:f7:08:
25:95:70:8e:aa:33:d0:f6:af:70:05:a3:d6:a6:95:
58:6f:7a:21:3e:04:f6:62:fa:58:bc:40:f8:8b:b5:
a9:ff:90:d2:98:80:2f:17:8a:f6:a3:9b:45:01:16:
6c:a7:29:64:10:d9:ef:0c:ec:80:6b:90:bf:f1:8e:
34:e1:df:6f:0d:6d:24:70:24:65:84:a1:31:7c:23:
39:7c:30:b6:4a:84:b0:f4:a2:2a:9d:52:f7:07:7d:
17:c6:a7:0b:a1:3a:bc:c1:d6:9e:b8:b8:bb:3d:c1:
7f:b5:ae:72:1c:78:29:f1:16:bb:13:4a:e7:c8:6d:
70:14:5a:1c:43:d0:b7:1b:bb:43:04:1d:c8:b2:a0:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:05:06:8E:89:E9:AF:C7:C9:6D:4A:19:EA:E0:51:57:91:0E:DC
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:3a:a7:ea:db:27:90:a0:32:2a:f4:c0:78:8c:68:49:7d:
20:f6:c6:71:d0:d7:1c:44:36:8b:61:a5:ef:0c:65:ab:d6:7a:
9a:5f:d4:5d:89:8c:ea:83:c9:a6:48:bb:b4:d8:fb:64:20:e4:
41:1b:cc:a8:cc:02:eb:c5:8a:45:9b:4b:85:a6:85:c3:9c:a9:
79:17:25:ed:f0:10:1a:f5:53:ca:53:a7:52:f8:c9:c0:16:85:
d4:12:9a:e2:83:bf:12:44:4f:da:d8:fd:1d:48:25:35:6b:38:
f1:97:db:9f:a2:f0:ea:27:36:6a:58:27:3c:b2:e6:69:6c:26:
ae:b3:bc:5e:75:a6:37:ec:3f:46:ae:09:7b:b4:e7:be:da:38:
5e:eb:89:7e:ed:95:bb:e5:ac:1e:10:a1:f2:49:3e:c7:db:7b:
a3:82:a2:9b:45:bb:12:ab:a6:08:00:5c:c8:2f:29:eb:ee:07:
ca:c4:dd:2e:a8:9d:6d:89:fa:be:3f:9b:b7:18:ea:08:f6:0c:
6b:be:b5:68:8b:77:88:e6:c6:e8:a2:ea:66:10:cd:33:79:ec:
be:2d:69:db:89:0f:29:a3:a0:77:e0:2b:47:b5:13:68:9b:44:
29:a3:31:5d:a7:1c:84:ff:7a:71:a1:b0:77:84:40:b1:2c:a9:
a4:e0:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:52 2026 by rpki-client