Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
File: dr24CfTd5EyCqeW9i3cS1tdjvws.mft (raw, json)
Hash identifier: mPaivj94xP2zbiVArbXbSgq/TYonyrCy3c2vMsc/r68=
Subject key identifier: 5E:E4:E7:68:C1:22:E1:A3:17:C9:E5:4A:5A:24:18:7F:00:0C:49:3E
Authority key identifier: 76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
Certificate issuer: /CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Certificate serial: 01A15778F6F351AE8B04D03322D5E4A36DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
Manifest number: 02B1
Signing time: Tue 20 Oct 2026 04:01:47 +0000
Manifest this update: Tue 20 Oct 2026 04:01:47 +0000
Manifest next update: Wed 21 Oct 2026 04:01:47 +0000
Files and hashes: 1: DElIG2I4poXxTLyxmk8qHhToIrc.roa (hash: EymYSA7xmGhavoS2+cvnhWPb/p1asE537I39DsH2QsI=)
2: dr24CfTd5EyCqeW9i3cS1tdjvws.crl (hash: vA4wesrVQIispOQcxDrvRn11NslZs3tq6e24uQ461ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:78:f6:f3:51:ae:8b:04:d0:33:22:d5:e4:a3:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Validity
Not Before: Oct 20 04:01:47 2026 GMT
Not After : Oct 21 04:01:47 2026 GMT
Subject: CN=5ee4e768c122e1a317c9e54a5a24187f000c493e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:13:4b:46:ee:67:bb:99:fd:de:d0:f5:60:
1f:b0:a4:43:a9:3d:07:f4:65:1a:a5:9d:bd:dd:e0:
44:90:e4:ee:73:76:87:ca:da:65:eb:e4:28:a7:10:
69:6e:fa:86:a2:e2:00:e9:34:50:cd:1a:90:99:00:
27:e1:83:3e:76:e9:51:ba:cb:c2:9a:71:26:d0:32:
52:49:3b:5b:ff:2c:96:c2:83:51:ca:31:da:9f:31:
ce:f3:69:e1:85:c0:16:14:fd:53:6b:65:10:b6:67:
d1:02:64:6c:3a:6a:79:43:c6:42:e9:85:6f:91:e0:
2b:9c:ec:95:ef:bd:31:d2:21:5b:0e:2e:78:1e:12:
5b:58:8c:2d:94:f0:65:82:ed:6d:b8:00:29:a6:78:
0f:7a:c5:b7:98:95:3a:dc:f5:8a:ba:4a:2c:86:bf:
68:6c:02:67:03:1e:9e:67:bc:0a:cb:38:bc:60:72:
5c:f0:22:5c:04:89:3f:4a:3f:3c:b9:3f:a4:68:a2:
c0:14:40:96:87:a7:93:a6:c6:3d:9f:8e:ce:96:aa:
00:72:0b:09:d9:a3:13:30:71:77:26:52:6a:b7:ea:
8b:84:ee:26:ec:73:8e:b6:ab:93:7c:99:c7:47:a1:
5f:06:f9:c8:7d:35:56:69:70:76:ed:e2:41:c3:9c:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:E7:68:C1:22:E1:A3:17:C9:E5:4A:5A:24:18:7F:00:0C:49:3E
X509v3 Authority Key Identifier:
keyid:76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ba:b7:8c:ae:3f:87:12:b6:83:e6:1f:1d:50:0b:17:5c:a9:
93:40:8f:b7:06:94:14:95:15:2a:31:b2:a0:07:fa:15:01:33:
43:d8:52:e7:87:53:2a:5a:a2:6c:7a:82:27:3f:ea:87:44:a0:
74:d1:ca:f5:87:c4:b5:d2:b4:38:33:69:06:57:0b:1d:c1:6f:
53:9d:32:49:98:0c:af:d0:99:46:3b:b3:5e:73:af:01:7e:2f:
46:ee:7d:b4:d2:d2:d0:e1:b8:3f:a4:dc:67:5d:66:c8:a2:29:
4f:76:d3:37:a0:ab:65:f7:b2:b7:5a:98:d9:09:c0:a3:4a:e8:
b6:5c:a4:65:ed:0e:f8:f8:fb:97:e5:9c:a1:cb:0a:5a:a2:4f:
0a:8c:25:1d:a6:b4:f5:76:4a:03:bf:84:1a:e7:dc:23:61:26:
18:e8:87:b8:5b:fe:99:c8:e0:8d:03:e2:56:9a:8e:04:4a:f6:
46:ae:62:57:e3:6f:03:6a:a9:4f:9f:58:c9:9a:59:ed:6a:62:
19:1a:f8:ae:21:9a:cf:f9:cb:6a:97:46:b6:9a:02:13:a5:10:
a8:f7:b7:cc:d6:a2:c0:70:66:84:7a:69:5a:db:69:65:7d:9f:
71:07:bc:3b:d6:6b:53:df:95:7f:09:cf:b6:bf:60:e5:24:41:
c3:9c:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:15:32 2026 by rpki-client