Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: JSVojz+yxSMDMLfmjiwEsaekZwkqEl9tp7deFwJF51k=
Subject key identifier: 06:CA:76:13:9D:12:38:F9:C4:D8:EE:33:03:03:73:49:A3:D5:AD:1F
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019D9850DBFB9A3B1F6BBED39BC0D6B19CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 14E2
Signing time: Thu 16 Apr 2026 22:02:09 +0000
Manifest this update: Thu 16 Apr 2026 22:02:09 +0000
Manifest next update: Fri 17 Apr 2026 22:02:09 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: lO/I3r2B4A+crc53IXE6htgNwvqrIf2oKXXQdF+pyJs=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:db:fb:9a:3b:1f:6b:be:d3:9b:c0:d6:b1:9c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Apr 16 22:02:09 2026 GMT
Not After : Apr 17 22:02:09 2026 GMT
Subject: CN=06ca76139d1238f9c4d8ee3303037349a3d5ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:f0:b2:1c:60:9d:a6:29:c6:b5:18:56:13:
f1:64:59:6e:50:e2:2e:60:87:db:d3:e9:31:d2:cb:
52:78:c3:f7:3b:22:7a:ba:58:39:9d:17:9b:ab:c1:
02:39:20:4c:d1:9f:b7:58:20:2b:f0:45:18:51:75:
de:86:9d:73:ac:ab:98:8e:2e:ac:70:45:c2:ea:ed:
46:f2:e1:02:b9:54:6f:56:26:81:39:f9:81:31:4b:
ac:52:0b:b6:3a:95:16:62:63:f3:ab:32:4d:0f:d5:
d2:24:0e:e5:97:76:2f:88:bf:8a:af:04:c5:00:f8:
45:70:66:b5:10:2a:37:d7:c9:a0:42:0f:58:e7:e9:
49:fd:54:24:e0:fd:97:cf:93:09:15:b3:15:f7:74:
2a:19:23:76:7e:db:54:05:22:cf:f8:7d:05:95:14:
c0:da:23:f1:ca:49:db:ec:d7:04:a8:df:d8:23:54:
31:30:0d:82:2d:30:f5:00:f6:bf:6d:7a:73:42:38:
88:bf:b8:65:6c:81:e6:25:32:cd:6f:72:5a:91:bd:
88:07:de:3b:4d:5a:da:34:5e:98:5e:d2:f2:31:32:
d5:ea:11:92:26:17:30:f0:24:76:85:89:d5:35:7d:
27:d5:b2:a4:88:7c:82:32:2d:5b:36:c6:03:76:ce:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CA:76:13:9D:12:38:F9:C4:D8:EE:33:03:03:73:49:A3:D5:AD:1F
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:90:9c:d4:ff:1b:88:3c:08:7c:9e:07:f7:ad:8e:90:c7:
a8:c6:7d:61:6d:63:ad:92:dd:55:12:91:7a:15:d6:79:32:8b:
02:42:40:69:88:28:5b:7e:4f:d4:f3:6e:36:c2:1b:97:69:27:
ac:27:74:5f:61:fb:71:38:92:d8:9b:d4:ec:71:ef:0e:9b:8c:
1d:7b:f1:4d:f4:b6:27:13:64:3a:7f:0a:2a:e0:74:8e:da:40:
a0:eb:8f:1d:e3:0b:66:9e:15:0f:6a:d5:61:6e:6d:ce:60:db:
b2:95:52:83:47:67:2a:77:84:8f:a7:93:5f:02:30:70:2e:9d:
86:8f:ea:92:0b:e6:b1:7a:77:bc:26:ca:c1:1d:69:9f:c9:0e:
a0:cd:1d:04:1f:70:5f:05:96:ea:8d:5b:7d:3a:25:e7:36:c9:
43:15:9a:a4:a4:bf:a1:7f:48:89:c1:19:5f:26:fa:eb:ac:46:
1d:3c:cd:4d:61:e8:bf:5b:9a:41:cd:3d:00:f4:bc:29:9b:9c:
81:ba:22:11:d4:df:0a:45:9c:53:4d:f5:69:2e:54:70:d7:56:
50:5f:83:84:f1:e6:eb:60:5b:1d:3f:39:e7:53:17:c4:85:a4:
44:b8:df:17:0c:8c:f7:b6:70:19:57:fc:b5:30:d3:73:40:f1:
09:69:33:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUNv7mjsfa77Tm8DWsZzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjYwNDE2MjIwMjA5WhcNMjYwNDE3MjIwMjA5WjAzMTEwLwYDVQQD
EygwNmNhNzYxMzlkMTIzOGY5YzRkOGVlMzMwMzAzNzM0OWEzZDVhZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRHwshxgnaYpxrUYVhPxZFluUOIu
YIfb0+kx0stSeMP3OyJ6ulg5nRebq8ECOSBM0Z+3WCAr8EUYUXXehp1zrKuYji6s
cEXC6u1G8uECuVRvViaBOfmBMUusUgu2OpUWYmPzqzJND9XSJA7ll3YviL+KrwTF
APhFcGa1ECo318mgQg9Y5+lJ/VQk4P2Xz5MJFbMV93QqGSN2fttUBSLP+H0FlRTA
2iPxyknb7NcEqN/YI1QxMA2CLTD1APa/bXpzQjiIv7hlbIHmJTLNb3Jakb2IB947
TVraNF6YXtLyMTLV6hGSJhcw8CR2hYnVNX0n1bKkiHyCMi1bNsYDds5L3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbKdhOdEjj5xNjuMwMDc0mj1a0fMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTiQnNT/
G4g8CHyeB/etjpDHqMZ9YW1jrZLdVRKRehXWeTKLAkJAaYgoW35P1PNuNsIbl2kn
rCd0X2H7cTiS2JvU7HHvDpuMHXvxTfS2JxNkOn8KKuB0jtpAoOuPHeMLZp4VD2rV
YW5tzmDbspVSg0dnKneEj6eTXwIwcC6dho/qkgvmsXp3vCbKwR1pn8kOoM0dBB9w
XwWW6o1bfTol5zbJQxWapKS/oX9IicEZXyb666xGHTzNTWHov1uaQc09APS8KZuc
gboiEdTfCkWcU031aS5UcNdWUF+DhPHm62BbHT8551MXxIWkRLjfFwyM97ZwGVf8
tTDTc0DxCWkz0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:39 2026 by rpki-client