
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: E4Vje1o+qhYg8o6czHgyp4EaM7g3xI36STILkHLwCvo=
Subject key identifier: C9:BB:93:46:9E:5F:9D:38:09:25:3E:7B:22:25:47:40:D7:B0:85:57
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 01A0CCA2F30F7F49597677DDD976910A3C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 05:00:25 +0000
Manifest this update: Wed 23 Sep 2026 05:00:25 +0000
Manifest next update: Thu 24 Sep 2026 05:00:25 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: Tqvj094lbH5Udxz2OWC+6OWNEGMUt85hyU7KqB9/IBQ=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:f3:0f:7f:49:59:76:77:dd:d9:76:91:0a:3c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Sep 23 05:00:25 2026 GMT
Not After : Sep 24 05:00:25 2026 GMT
Subject: CN=c9bb93469e5f9d3809253e7b22254740d7b08557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:96:c0:58:63:8e:54:a5:c6:87:fe:2c:f4:
d0:bf:4f:11:db:0a:53:98:e1:3d:f8:25:b4:fa:bd:
c4:ef:33:15:f7:6b:40:bf:bb:6e:1e:31:9f:e6:f7:
68:be:8b:20:7f:4a:e9:d2:18:07:35:bf:9d:9e:15:
08:6a:0a:d3:2a:49:44:ed:99:2f:f4:3f:60:e8:bf:
5f:75:50:45:e6:59:85:22:5e:f9:aa:c9:bb:94:d3:
cc:9c:2b:f9:a7:72:10:53:65:80:7f:4f:25:f3:aa:
a1:40:2c:be:ef:bb:c4:37:ea:0d:e6:b9:0d:18:68:
71:c8:78:c6:8f:1a:ac:76:8e:a3:17:87:63:f8:65:
b9:15:32:cb:9a:5e:00:5b:1f:20:a1:08:98:22:5d:
43:be:25:0c:b5:37:71:9e:f2:c3:02:6d:05:fc:6c:
2e:ee:d5:99:fc:cd:de:2a:97:81:e6:88:12:c0:b8:
60:7e:58:e7:b6:16:23:e7:fd:3d:c8:6f:45:8a:09:
13:21:06:28:17:b0:68:dd:29:40:6c:ff:91:7f:9d:
cc:d7:ec:b6:34:3a:b2:d2:a8:f7:8d:7b:47:a4:cb:
78:a9:01:25:04:73:a6:f4:cd:26:74:ae:79:63:e1:
28:7b:bd:31:8c:35:5c:d7:0f:bc:b5:74:06:c9:02:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:93:46:9E:5F:9D:38:09:25:3E:7B:22:25:47:40:D7:B0:85:57
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:9d:34:74:d9:8a:6d:86:10:78:a8:3d:43:01:29:6d:cb:
65:52:97:86:b4:c9:e2:9b:52:20:fd:6a:cf:e2:17:0c:58:ce:
40:b7:4a:1c:54:ca:10:8c:5c:69:6a:62:75:2e:cc:24:61:e3:
5a:e9:1f:19:ec:6a:5a:da:33:82:c1:dc:ac:c5:05:42:da:17:
5c:67:85:e4:bf:bb:7f:f9:a6:16:09:7c:50:d2:e8:38:f3:1f:
51:eb:de:07:f0:2d:43:7b:f7:4c:77:ff:14:b3:8c:41:11:cd:
5c:0b:37:37:f2:e5:95:e7:29:30:47:61:ba:40:81:8a:38:52:
7a:6f:ff:c1:60:72:a8:2f:77:fd:5d:85:19:ca:cc:cf:ca:d4:
e8:a7:cd:8e:b3:2c:11:9f:c8:a6:98:15:90:8f:d0:c8:07:fe:
25:f1:26:6b:1a:dc:9d:6e:67:25:4f:1b:cc:52:43:07:ee:b0:
78:1d:95:76:2a:32:2e:9b:14:7c:9c:41:80:da:5e:54:31:68:
c8:22:c0:53:eb:62:aa:1d:db:fd:74:22:22:a9:a3:e0:d5:be:
f3:ed:be:62:0f:23:38:65:f7:55:5e:bb:96:19:ea:21:d6:fd:
95:64:4f:f5:28:ab:db:59:d6:56:2a:f8:b2:96:5d:63:39:4d:
51:18:18:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMovMPf0lZdnfd2XaRCjxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi
NzI3MjcwHhcNMjYwOTIzMDUwMDI1WhcNMjYwOTI0MDUwMDI1WjAzMTEwLwYDVQQD
EyhjOWJiOTM0NjllNWY5ZDM4MDkyNTNlN2IyMjI1NDc0MGQ3YjA4NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyceWwFhjjlSlxof+LPTQv08R2wpT
mOE9+CW0+r3E7zMV92tAv7tuHjGf5vdovosgf0rp0hgHNb+dnhUIagrTKklE7Zkv
9D9g6L9fdVBF5lmFIl75qsm7lNPMnCv5p3IQU2WAf08l86qhQCy+77vEN+oN5rkN
GGhxyHjGjxqsdo6jF4dj+GW5FTLLml4AWx8goQiYIl1DviUMtTdxnvLDAm0F/Gwu
7tWZ/M3eKpeB5ogSwLhgfljnthYj5/09yG9FigkTIQYoF7Bo3SlAbP+Rf53M1+y2
NDqy0qj3jXtHpMt4qQElBHOm9M0mdK55Y+Eoe70xjDVc1w+8tXQGyQIMkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm7k0aeX504CSU+eyIlR0DXsIVXMB8GA1UdIwQY
MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt
M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5
LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbqdNHTZ
im2GEHioPUMBKW3LZVKXhrTJ4ptSIP1qz+IXDFjOQLdKHFTKEIxcaWpidS7MJGHj
WukfGexqWtozgsHcrMUFQtoXXGeF5L+7f/mmFgl8UNLoOPMfUeveB/AtQ3v3THf/
FLOMQRHNXAs3N/LllecpMEdhukCBijhSem//wWByqC93/V2FGcrMz8rU6KfNjrMs
EZ/IppgVkI/QyAf+JfEmaxrcnW5nJU8bzFJDB+6weB2VdioyLpsUfJxBgNpeVDFo
yCLAU+tiqh3b/XQiIqmj4NW+8+2+Yg8jOGX3VV67lhnqIdb9lWRP9Sir21nWVir4
spZdYzlNURgYlQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:22:39 2026 by rpki-client