Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File: drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier: xHkbEOrk8ebwoFdKKgseCnqhCr/qGMwgXJdZEaKbDrc=
Subject key identifier: 55:22:B8:37:2F:12:3B:FE:AC:CB:58:B7:D8:5A:DC:ED:26:07:81:66
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial: 019CAE34E1EFE4722739417899CB65B8563C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number: 02FC
Signing time: Mon 02 Mar 2026 11:00:26 +0000
Manifest this update: Mon 02 Mar 2026 11:00:26 +0000
Manifest next update: Tue 03 Mar 2026 11:00:26 +0000
Files and hashes: 1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: WfPBZlrP08K/lbBOOONZtCc4Rwq8IJAAcNDc5McMGws=)
2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:e1:ef:e4:72:27:39:41:78:99:cb:65:b8:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Validity
Not Before: Mar 2 11:00:26 2026 GMT
Not After : Mar 3 11:00:26 2026 GMT
Subject: CN=5522b8372f123bfeaccb58b7d85adced26078166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:f3:e7:4b:e3:d5:69:69:6c:bc:d4:aa:4e:
d6:1e:30:ae:ee:98:2d:93:85:79:a3:30:43:89:e2:
82:47:e4:a2:db:c3:48:42:90:33:93:d3:59:1c:23:
ed:b6:86:7a:71:0d:f5:23:fa:bc:45:ba:00:11:03:
97:5a:2e:85:b3:65:0d:24:d2:60:ec:09:53:dc:24:
a3:bc:8d:93:98:27:16:1c:a2:4d:49:37:85:ef:2c:
a9:d5:32:13:10:13:f7:f8:4f:21:6a:c2:d7:fe:fb:
39:b9:60:8a:2f:c8:9e:44:7d:42:d6:18:fb:f0:6c:
29:36:df:62:d0:72:53:c2:e6:3e:19:7c:15:06:95:
6b:71:9a:46:a7:20:88:41:3c:59:80:02:21:a0:56:
1c:e2:8f:18:1d:94:c2:5a:cd:b8:44:aa:aa:4b:c8:
ac:2f:b2:36:02:fc:32:8b:eb:8a:6f:8f:3b:35:37:
8c:b0:c9:a4:28:8e:c5:67:04:83:1c:86:b7:3c:ad:
e5:21:a8:aa:b4:11:46:ce:9c:0a:fe:6c:0b:58:3b:
26:a2:df:ac:74:1b:e9:0c:5f:00:54:d5:ac:24:cd:
0f:83:21:2a:e1:62:ef:3f:c9:ac:09:32:1f:90:90:
a5:18:4c:f9:e5:97:67:bd:57:b8:fd:5c:5c:a9:ab:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:B8:37:2F:12:3B:FE:AC:CB:58:B7:D8:5A:DC:ED:26:07:81:66
X509v3 Authority Key Identifier:
keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:1b:cc:50:a1:b1:d5:c3:a5:b9:b6:31:fb:ba:17:9a:60:
ec:de:a6:a1:ea:9a:1d:f9:cd:8d:dd:0e:2d:8b:7e:ee:b7:c7:
82:ee:1e:42:5b:02:15:94:04:5b:35:e0:02:28:3a:99:c6:7f:
69:7f:f0:9c:50:f8:7d:b5:70:8a:e2:22:f5:17:cb:eb:79:7c:
60:12:b6:7c:08:63:92:78:c0:66:41:d5:41:6e:2c:1d:23:3c:
f9:06:64:44:3b:aa:fa:5f:b7:a0:56:4a:4e:c8:15:1f:0d:77:
4e:17:43:5c:8c:1a:6d:3b:fe:6d:6c:8f:91:c0:9a:cc:60:d3:
c0:a0:f2:ac:fe:92:25:a0:62:62:70:f4:2f:6e:3b:26:d8:3e:
3a:f9:5f:ea:1d:da:d0:5f:f6:93:fd:53:d2:81:65:30:55:d4:
8b:1c:a8:0f:61:ad:7e:01:9d:88:43:81:76:7e:5f:73:1c:97:
9d:27:c4:6c:f4:6a:2a:f3:04:b3:44:91:e0:01:88:93:07:a5:
b9:6b:cc:cb:d7:42:89:2d:0c:3b:0b:45:f8:ba:7e:72:55:63:
e2:28:ce:7d:ad:1f:ab:5b:09:35:ff:9c:80:e2:33:9a:86:ba:
8e:61:fe:3e:d2:78:83:87:9d:18:36:c8:e4:09:8a:4f:07:37:
fa:bc:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:17 2026 by rpki-client