Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: 7fRnOWXpWQrIswZ+Kk4O8PhjEpAcfUzRlLDYp2RiAzw=
Subject key identifier: 4F:26:CA:4F:1B:13:0D:80:96:DA:12:44:EF:06:13:BC:44:60:4E:E4
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 019CABD95FD147D1F974902CE1C4717592DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 1256
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: GRQibr18mvAtFQUlZf2-LSDjO00.roa (hash: uHEAFGUIa+w818s33SMz8sos1XEYiW4NZhUvG/v7Vkk=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: 2UmikMYJTNFLsPQ7OU2RPllUwxgg2HG5P06XzoFwxHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5f:d1:47:d1:f9:74:90:2c:e1:c4:71:75:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=4f26ca4f1b130d8096da1244ef0613bc44604ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:f5:ce:02:92:81:87:52:24:3c:26:aa:13:
32:75:95:b6:4f:21:66:fa:8b:25:b6:f9:f6:58:0d:
33:06:36:41:c1:04:2e:26:cb:8f:1f:7b:1b:52:b6:
56:78:67:06:bd:6c:dd:65:5c:64:83:34:9b:c6:32:
60:50:b9:02:e4:9f:0f:ca:f0:23:85:1f:fc:c5:30:
7a:19:0b:55:1a:cc:01:72:b4:f8:77:25:bb:e4:d3:
26:56:29:73:c6:99:46:bc:43:4e:54:e3:e8:77:f9:
f8:26:95:86:fe:50:c7:95:c3:23:86:7f:bc:f9:45:
cc:11:8c:fa:92:2e:18:14:12:ef:53:b6:25:0c:a3:
66:11:ef:ce:69:64:b2:16:4b:fa:f4:93:7d:8f:8f:
b8:f8:a8:fb:b0:f4:cd:b8:00:38:4d:11:4d:e0:cd:
6a:78:dd:56:ed:4d:45:9f:3b:8b:52:75:ef:cd:74:
6d:df:54:36:63:ee:ad:df:c3:bc:9e:fb:df:03:8c:
c8:55:01:8c:79:a0:c1:19:c0:7f:9b:45:93:0f:82:
fe:f5:0b:2e:fb:37:f2:21:ac:04:c4:95:9a:48:27:
75:85:3c:4d:f7:16:f9:44:a6:95:94:e4:ae:98:25:
f7:ca:3d:21:be:24:a8:10:e2:0d:47:d1:57:f4:5d:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:26:CA:4F:1B:13:0D:80:96:DA:12:44:EF:06:13:BC:44:60:4E:E4
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:aa:c7:8f:cc:c0:20:6d:fb:62:49:8b:18:f0:8f:0c:09:f4:
69:24:ed:e1:1f:eb:7c:e6:e3:f2:39:95:82:a1:88:6f:f9:c5:
a0:14:25:23:b5:34:32:13:86:1a:77:d9:f7:71:d7:cf:ac:76:
e5:2c:d3:0f:fd:f5:db:5d:95:bd:79:2c:31:e4:fe:79:8f:61:
f3:17:39:00:59:6a:c6:25:65:b1:f6:02:2c:a7:34:8a:9e:a4:
14:27:b5:c8:f5:1f:6e:01:c6:fc:1d:ec:45:a5:a2:be:36:93:
bc:3c:c5:bb:cf:48:fc:39:9d:1b:e8:a7:b5:58:58:5b:a1:c6:
3f:89:b4:03:3f:2d:ee:37:37:c2:1a:96:e9:f6:78:b5:cf:56:
44:d5:85:0c:c5:cc:74:5e:a6:40:4a:7b:87:e0:82:77:18:4f:
04:f3:e9:bf:b4:8c:c8:51:ef:74:18:d2:13:f9:67:c0:dc:5c:
09:d1:24:88:bf:b1:48:70:9b:81:5d:8e:94:f2:00:e2:a8:39:
43:98:85:c4:20:c1:15:c4:83:4e:58:26:95:00:a5:66:59:9c:
c1:0c:39:7a:2a:1d:8d:c6:8d:dd:22:34:42:f0:1c:0b:f6:08:
ef:dd:39:7e:11:13:a5:06:cb:7a:39:58:d0:7d:3f:be:53:b5:
3d:9f:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:19 2026 by rpki-client