Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: sg0RoeWypc1okIfoAIp8FVBf4a2syLpTw8KtlzTJcXY=
Subject key identifier: 15:13:1F:24:45:51:27:34:61:1E:6D:84:4C:FF:3A:96:E0:F4:CE:C8
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019CAAC6A6D9C32EBBC630A3DFAAF8D8B574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1467
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: qrmw1CYsNqMhY20xQdv81ahwwBnAnT3PsiAGFQcVUJM=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a6:d9:c3:2e:bb:c6:30:a3:df:aa:f8:d8:b5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=15131f2445512734611e6d844cff3a96e0f4cec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:53:50:93:59:28:99:fe:db:72:ba:c9:81:
e9:5b:3e:11:d4:e7:f8:96:90:b2:12:52:7b:d1:5c:
f4:db:2f:b4:7d:b0:ca:fb:3e:0d:db:61:d3:3d:ed:
0d:75:f1:1d:58:91:75:4c:2d:0c:fa:0e:18:83:e8:
1e:89:ed:45:43:97:43:a5:12:b7:38:50:f6:f8:86:
90:54:bd:02:f7:a0:10:d6:a6:4b:1a:5a:80:a8:0f:
1a:0e:1f:d8:bc:1b:ac:05:17:fa:b5:23:d2:96:ce:
09:fd:6d:3a:3c:33:3b:93:7b:4a:2b:15:30:06:ef:
80:0e:23:45:b7:77:e7:07:ad:63:ad:e6:ab:e4:07:
97:b7:c6:8f:99:8c:7d:9f:5b:71:40:84:81:ee:cb:
29:1f:84:3c:e1:99:44:5f:25:fb:13:71:8d:0e:f3:
3e:fc:a0:2e:ee:ce:36:04:17:ac:c6:2a:70:ac:a6:
bb:a1:84:4a:b7:2e:df:20:b5:b1:30:30:37:a2:60:
20:c3:83:59:cf:27:f6:48:5c:21:69:68:a1:3f:f6:
2d:03:7c:64:95:9f:de:b4:87:f4:71:12:8f:08:a0:
64:ee:c5:a3:7a:44:11:ec:39:9b:f0:40:f3:76:10:
ab:51:ca:a3:d3:9f:91:af:5e:62:73:26:d4:4f:da:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:1F:24:45:51:27:34:61:1E:6D:84:4C:FF:3A:96:E0:F4:CE:C8
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c6:ec:d6:18:0c:4e:22:3b:41:56:b2:3b:3e:9a:a6:2a:26:
8d:c2:27:84:2c:91:1b:9c:c3:83:58:7c:ed:c2:1c:db:69:b1:
58:ec:d1:fc:62:a2:62:97:03:ec:35:b6:74:2f:14:44:01:70:
4b:87:88:4f:0e:1a:51:00:ba:2d:e3:83:c6:a9:2c:49:b7:71:
a1:10:98:51:13:c7:29:55:95:2a:eb:b1:24:f1:a6:fd:72:19:
8e:08:d8:12:58:b0:e7:f2:48:34:56:51:75:30:57:8c:e8:e8:
4a:d2:af:b3:db:40:5e:ec:8f:97:5e:0d:50:74:86:d5:11:18:
5a:0d:11:e4:13:da:c4:c1:22:30:9f:61:d2:76:9b:b3:ac:8b:
88:a0:83:32:67:c0:a1:a0:7c:54:46:49:55:f0:a9:b1:9c:96:
06:c1:32:ec:0d:57:44:5f:11:9a:2d:b5:17:9c:f3:55:0f:7d:
01:7a:81:46:48:0d:be:07:b7:8d:d5:5f:2c:79:d7:89:34:da:
bf:63:ee:a6:ee:1f:36:52:b0:41:c2:b4:bb:3a:cd:18:df:4d:
2c:82:53:be:1d:3e:50:57:bd:b2:4f:56:e2:bd:70:e0:7a:07:
52:a1:5b:f8:97:24:81:73:f9:71:1d:a2:fb:70:92:7b:a6:da:
6b:8a:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:39 2026 by rpki-client