Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier: MiYfHU7WCEScTOelLO9LEDVxgkX5ckDdH0xNwZhXvC8=
Subject key identifier: 76:B5:68:95:8F:CE:C0:83:69:25:53:FB:AA:A7:A6:82:41:8F:CC:E1
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 019D254CDEF0D784F70A529387962FF20766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 14:01:27 +0000
Manifest this update: Wed 25 Mar 2026 14:01:27 +0000
Manifest next update: Thu 26 Mar 2026 14:01:27 +0000
Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: elUdBGBsCwIfkUwi7WSCm8q3+9+VNiNjd9ESd83D3SU=)
2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:de:f0:d7:84:f7:0a:52:93:87:96:2f:f2:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Mar 25 14:01:27 2026 GMT
Not After : Mar 26 14:01:27 2026 GMT
Subject: CN=76b568958fcec083692553fbaaa7a682418fcce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:91:e2:98:c4:3e:9a:18:41:c0:f1:de:ed:
2f:86:51:97:75:3f:3e:87:42:6e:77:91:79:5c:73:
94:02:45:d2:3e:76:87:69:a8:72:12:db:01:77:8e:
8e:e5:6b:c6:b4:39:8f:1d:b4:b2:74:23:e1:4a:e9:
28:b8:41:4d:83:90:e0:f7:a2:10:35:b8:35:0d:ff:
39:7e:eb:61:39:de:86:e8:29:b5:dd:98:71:76:46:
5d:9c:6c:ec:1e:92:8d:57:e0:a5:51:00:1a:89:61:
47:4d:f9:af:79:34:70:c7:d7:a2:dc:3c:1c:d2:bb:
a3:20:37:d2:20:12:50:bb:8f:4b:d2:57:3d:d1:eb:
18:8a:fa:b6:dc:5b:38:cb:b6:ae:04:3b:b3:b3:75:
9a:4d:32:38:33:16:e7:f7:b3:c4:0c:aa:48:d9:87:
22:a9:3f:7e:c5:50:8b:e4:b4:4c:46:91:5d:fa:f3:
5e:46:24:26:62:97:c8:1a:26:ce:cb:c6:5c:b5:4c:
32:8a:cc:64:36:43:b1:57:50:89:5b:c7:4a:70:7c:
5a:53:61:b7:55:52:27:ab:42:08:9e:a7:83:e9:fa:
70:9b:1d:fe:ba:1c:21:0a:26:bb:c6:ca:b4:d2:ac:
bb:8c:41:30:7c:8a:6b:f3:46:17:08:08:00:47:52:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:68:95:8F:CE:C0:83:69:25:53:FB:AA:A7:A6:82:41:8F:CC:E1
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:1d:c7:b8:83:6b:58:55:8a:a4:43:ce:e3:fe:a2:c7:94:
3c:aa:a3:0b:e5:93:22:b6:5d:d0:85:58:24:94:ad:f6:90:f1:
53:b4:49:ca:e0:a6:69:6e:c1:3c:de:f1:61:72:ed:53:de:39:
00:da:46:f2:57:e5:61:ac:ab:0a:9b:c9:bf:02:64:e7:35:c9:
06:8e:8b:ce:8d:c8:de:c5:0c:52:fe:28:99:09:d3:12:05:dd:
c9:b1:4c:cf:19:23:2c:22:a0:d9:0d:2c:3d:5e:90:76:55:d3:
e6:6e:dc:b1:57:42:15:64:b3:bd:ce:59:84:40:e4:43:19:c7:
83:d5:aa:3f:88:9f:c9:54:cf:bf:da:f6:04:9e:b4:94:34:b9:
9c:b3:a2:ac:5e:03:bf:12:97:ac:48:9a:b2:dc:b1:f7:eb:49:
71:13:4b:60:b4:76:bd:8a:b9:c4:ad:a2:00:1f:e3:85:e0:40:
4f:66:de:c1:bd:05:27:fa:cc:e2:98:96:c5:a0:ab:84:7d:aa:
39:32:5f:8f:c6:bf:bd:fe:6c:f9:d6:b3:72:6e:18:b2:42:8d:
33:d4:fc:a2:6d:be:8d:95:50:7e:fd:4c:05:68:74:85:36:4b:
32:6d:24:0f:8c:27:b4:6a:0f:69:0f:6c:16:b3:ce:92:a2:f8:
e2:d0:41:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTN7w14T3ClKTh5Yv8gdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk
MjM2MDUwHhcNMjYwMzI1MTQwMTI3WhcNMjYwMzI2MTQwMTI3WjAzMTEwLwYDVQQD
Eyg3NmI1Njg5NThmY2VjMDgzNjkyNTUzZmJhYWE3YTY4MjQxOGZjY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+R4pjEPpoYQcDx3u0vhlGXdT8+
h0Jud5F5XHOUAkXSPnaHaahyEtsBd46O5WvGtDmPHbSydCPhSukouEFNg5Dg96IQ
Nbg1Df85futhOd6G6Cm13ZhxdkZdnGzsHpKNV+ClUQAaiWFHTfmveTRwx9ei3Dwc
0rujIDfSIBJQu49L0lc90esYivq23Fs4y7auBDuzs3WaTTI4Mxbn97PEDKpI2Yci
qT9+xVCL5LRMRpFd+vNeRiQmYpfIGibOy8ZctUwyisxkNkOxV1CJW8dKcHxaU2G3
VVInq0IInqeD6fpwmx3+uhwhCia7xsq00qy7jEEwfIpr80YXCAgAR1LrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa1aJWPzsCDaSVT+6qnpoJBj8zhMB8GA1UdIwQY
MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt
ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh
LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxMdx7iD
a1hViqRDzuP+oseUPKqjC+WTIrZd0IVYJJSt9pDxU7RJyuCmaW7BPN7xYXLtU945
ANpG8lflYayrCpvJvwJk5zXJBo6Lzo3I3sUMUv4omQnTEgXdybFMzxkjLCKg2Q0s
PV6QdlXT5m7csVdCFWSzvc5ZhEDkQxnHg9WqP4ifyVTPv9r2BJ60lDS5nLOirF4D
vxKXrEiastyx9+tJcRNLYLR2vYq5xK2iAB/jheBAT2bewb0FJ/rM4piWxaCrhH2q
OTJfj8a/vf5s+dazcm4YskKNM9T8om2+jZVQfv1MBWh0hTZLMm0kD4wntGoPaQ9s
FrPOkqL44tBB0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:29 2026 by rpki-client