Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: AcCqv3Tge/Ug6zqp/1YJFTl1WFpKAltO6i1fPbMccCw=
Subject key identifier: 31:7A:95:8D:BC:1C:B3:72:52:C2:D3:44:C6:FB:73:E9:A6:64:25:40
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 01A0C3696965657BAB5CBC419A9D52DAF8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1686
Signing time: Mon 21 Sep 2026 10:01:00 +0000
Manifest this update: Mon 21 Sep 2026 10:01:00 +0000
Manifest next update: Tue 22 Sep 2026 10:01:00 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: Ko1Ava744eY9Dl+dY2RrX2PeKuVuF3TwNAKYR2b7UOo=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:69:65:65:7b:ab:5c:bc:41:9a:9d:52:da:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Sep 21 10:01:00 2026 GMT
Not After : Sep 22 10:01:00 2026 GMT
Subject: CN=317a958dbc1cb37252c2d344c6fb73e9a6642540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:71:2c:d3:14:dd:78:67:fc:0b:42:b8:e1:
e9:32:85:23:61:37:86:c9:ab:54:44:56:33:ce:dc:
10:8d:7c:79:66:11:cd:bc:12:19:99:1c:d2:f5:95:
59:fb:e0:a5:20:24:2f:b2:79:5e:62:e5:ac:07:de:
50:e8:53:cf:e5:78:aa:f8:8d:0f:bf:40:89:ba:1a:
3f:3d:f9:3a:46:dc:8b:f0:91:db:69:4b:16:de:ed:
a7:19:92:5a:fb:b6:61:10:59:e7:ec:ba:e0:20:df:
70:61:34:f2:4e:03:77:45:69:65:33:28:bc:50:9b:
61:f2:19:d3:15:64:cd:31:2a:2e:d2:56:7f:49:16:
61:8e:87:c2:e6:db:b6:d2:d1:91:e3:b7:79:b6:67:
93:cf:fc:11:67:4f:c7:63:60:c2:bc:1f:2f:88:31:
ff:d8:b0:b8:68:38:18:f5:59:b6:6a:3d:8e:57:cc:
da:c3:dd:3d:4e:6b:59:31:c9:c0:00:ad:81:d8:99:
81:6e:aa:2d:9f:cc:7e:62:f7:41:0f:03:b6:f7:30:
8c:bf:a1:52:6b:09:af:55:b3:10:03:d9:91:dd:9c:
92:36:87:b1:45:34:c7:18:56:3e:e6:55:2d:c8:d6:
11:12:1a:5c:c3:88:f4:25:25:d5:74:63:be:f6:5d:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:95:8D:BC:1C:B3:72:52:C2:D3:44:C6:FB:73:E9:A6:64:25:40
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:91:62:20:b5:5e:23:8c:1a:5b:7a:64:0b:3e:05:4c:c3:86:
e6:86:71:a8:d5:6a:39:f1:7b:23:1e:d5:d4:c3:94:e3:3e:07:
69:38:bf:dc:ba:06:e2:58:f8:2c:20:b1:83:3b:1d:c0:27:3f:
0e:87:f1:33:8b:ab:cc:5a:5c:ff:b4:eb:45:09:13:d1:41:e7:
ce:0a:5e:20:22:8d:5c:3f:6b:f9:56:d6:e1:6f:71:a7:75:29:
6f:84:e4:2d:7c:3c:96:41:a8:ab:96:cc:b6:b8:08:5c:8b:f4:
32:e9:43:7c:6f:e0:6b:90:55:07:85:27:fa:d0:46:45:96:dd:
fd:54:d5:14:3d:4f:43:e3:a0:23:5e:24:2a:8a:4c:60:5d:51:
d2:dc:fa:fe:d5:dd:68:c3:c7:e1:87:29:58:e1:45:a7:79:9a:
e2:06:f9:12:6c:8b:58:64:7e:a1:f1:5c:e8:0a:82:f4:bd:5c:
22:16:5e:54:ea:02:42:81:c3:b2:13:a3:e6:b1:4d:de:2d:08:
4a:95:be:0a:e5:69:cc:b2:5a:ed:eb:bd:20:0d:87:20:60:2f:
6a:bb:38:9b:c2:25:b3:2e:b7:49:3b:84:51:9b:c7:ad:92:5c:
7f:de:7a:f2:55:d6:a8:1e:42:67:02:55:34:c6:dc:54:77:c8:
5b:d6:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:44 2026 by rpki-client