Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: 8j5vex++RVW4jFSAbbFpxVFO/b5iu6b4HAbFZYAeK3Y=
Subject key identifier: 30:83:F7:5B:CA:7F:20:ED:E5:8D:A2:B9:87:F8:BA:CE:B7:18:F5:D8
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019CAA58C7AF25F50AE2FB3C06DD475353F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: ubuCQ144xI9ng5wBuZ9g/UBtsCUYi2oXCHbfRG1GKUg=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c7:af:25:f5:0a:e2:fb:3c:06:dd:47:53:53:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=3083f75bca7f20ede58da2b987f8baceb718f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:58:51:6c:71:f2:01:43:94:18:7a:3b:0b:
d2:ba:f3:7c:f9:f7:18:69:b4:97:48:36:42:28:da:
2e:a8:52:db:d5:4d:8e:51:ed:69:6b:42:01:17:b7:
67:a2:9c:a2:98:84:32:2e:d3:6d:b3:36:1d:ef:21:
d1:dd:b6:87:41:e6:7d:cf:71:db:42:5b:1d:4f:35:
4d:a4:14:31:96:1f:cd:42:4f:2c:cd:b0:0b:0f:c5:
e4:bf:1b:75:6b:1a:47:49:db:e8:70:85:34:34:fc:
41:61:0c:d4:e5:fa:07:21:4c:67:1e:2d:af:8f:a0:
9f:a8:d2:2f:10:e3:5d:2d:e4:18:72:64:74:ff:97:
0f:23:7f:a5:60:7d:53:cc:a7:e3:11:53:a6:28:7f:
46:fb:e9:4d:4a:7f:05:de:90:1b:37:63:4d:50:9f:
89:35:9c:d1:60:8e:29:eb:0e:6a:40:b3:92:bd:d7:
ee:80:e0:ba:f2:89:5e:05:51:5f:4e:94:c6:fd:6a:
db:9c:5b:72:44:39:14:b3:94:fa:66:b4:2f:62:84:
18:21:f5:0a:17:e5:c2:4c:b1:3c:9d:b8:5a:c8:42:
db:53:dc:5d:a0:e4:c4:9d:8d:b8:2a:60:91:34:ff:
dd:e6:27:18:85:df:ef:77:cc:55:ba:22:56:23:a7:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:F7:5B:CA:7F:20:ED:E5:8D:A2:B9:87:F8:BA:CE:B7:18:F5:D8
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e4:7c:6f:10:62:38:54:0b:a6:19:43:49:5e:a4:ca:ab:be:
8d:49:f5:ee:d4:ba:b0:1c:d0:ca:7b:86:e8:4e:6d:25:77:18:
37:9b:1d:bb:18:08:77:dd:d2:d7:85:89:d2:ff:81:f2:34:0d:
7a:23:e2:53:95:a4:ce:0f:4b:47:15:a1:42:15:8a:44:2e:b7:
8c:4e:43:4e:6d:41:97:65:d4:d6:0f:db:8b:e8:ec:08:bb:e9:
e7:7b:7d:61:01:96:2e:04:1a:5a:e7:9d:b5:ce:cb:70:de:ea:
41:66:f0:5b:1d:d9:2d:66:da:74:4d:93:0e:9e:68:e4:84:82:
0a:4b:0d:5c:cd:ec:e8:8c:00:31:21:12:78:46:6b:ff:93:37:
cd:c9:22:63:4e:f7:44:dd:49:62:ba:11:41:49:b0:59:36:6f:
66:a6:28:3a:dd:d8:ee:5c:af:61:ff:98:f2:cf:91:32:c2:38:
60:c5:a6:34:76:20:2c:2b:8a:41:f6:25:23:8a:c6:f6:5f:cc:
e6:51:78:16:6a:df:fa:b2:be:b3:3d:71:d4:43:82:7f:38:01:
79:10:a6:24:15:11:16:99:c8:b0:9c:57:57:ab:32:e5:37:62:
23:ba:f9:04:88:db:09:4e:49:27:dd:61:b7:57:26:8b:91:fa:
bf:cf:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:57 2026 by rpki-client