Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: K432tjCpQgKfqS3dpzWcQHymCyWDzsEiNufOJluah/Q=
Subject key identifier: A9:EC:40:22:9D:A4:7B:AC:CF:DC:F1:E2:E1:FD:30:2C:80:93:01:F4
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 019FA89978A93CCE2A92AD7554064051FBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 12:00:57 +0000
Manifest this update: Tue 28 Jul 2026 12:00:57 +0000
Manifest next update: Wed 29 Jul 2026 12:00:57 +0000
Files and hashes: 1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: 6fVKWRmJx6FLT1aoL9M7pBmKj0KA07gha/edgPXrZGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:78:a9:3c:ce:2a:92:ad:75:54:06:40:51:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Jul 28 12:00:57 2026 GMT
Not After : Jul 29 12:00:57 2026 GMT
Subject: CN=a9ec40229da47baccfdcf1e2e1fd302c809301f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:68:f5:ee:4d:af:d4:8e:64:78:6c:6d:a3:
b3:99:62:e7:f0:ff:55:b4:0e:d4:e8:28:b6:b6:e7:
3e:20:b9:22:26:4c:b1:25:62:1a:d2:e2:8a:e1:c3:
a2:b8:13:46:21:e3:8f:a8:e9:f3:fe:95:13:2e:75:
ed:dc:4e:be:b4:65:89:61:1e:f4:85:df:ca:2a:a8:
d3:70:35:14:9e:7e:af:1c:05:72:59:57:7d:6e:e8:
17:cd:43:53:88:8a:1b:64:e5:c4:6d:ba:ee:ac:06:
c1:ba:d9:64:dc:c3:58:93:81:99:34:2a:3f:29:8e:
df:1f:34:d1:31:4c:1a:e3:2e:0a:88:b7:22:cc:2c:
41:19:53:a4:3f:fb:16:41:b9:6f:42:7a:36:a0:b2:
eb:d3:09:f9:91:f9:43:66:35:38:c9:32:cc:7a:4f:
93:73:0e:31:8a:04:4e:46:67:02:2d:2a:54:72:74:
3c:4a:bb:62:ef:7f:3d:23:a8:05:d7:1c:81:84:3a:
2d:f6:f9:c6:d7:95:37:74:65:af:92:a5:c4:a1:5f:
8e:71:82:d1:f0:ec:4d:7a:a1:cc:e0:ff:33:2f:68:
1b:90:eb:66:63:dc:53:6c:04:a7:da:c5:82:23:ba:
3a:26:3e:53:4d:ee:f0:1a:33:43:b1:5f:cd:b9:e6:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:40:22:9D:A4:7B:AC:CF:DC:F1:E2:E1:FD:30:2C:80:93:01:F4
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:49:39:d3:08:8f:3c:57:05:dc:0a:64:f8:e4:b5:20:ec:
56:bf:e9:c4:6f:0a:2f:09:49:c2:d0:51:b3:c2:40:98:46:98:
c6:aa:e3:89:b0:cc:85:87:22:c0:20:ac:d3:55:74:03:d6:e1:
06:c5:17:f2:0d:5d:10:91:36:a1:d5:c7:2e:e4:99:79:69:d9:
a2:95:91:ea:87:d8:6a:98:77:49:30:70:06:aa:95:be:01:c1:
1d:21:4d:d6:f1:b9:3d:90:de:fb:65:75:69:29:cb:eb:c4:9b:
8b:0e:6b:3d:82:4c:2b:44:a4:22:6a:8d:85:25:ee:01:56:40:
58:98:78:39:32:2b:2d:d9:4d:5e:0f:3f:7f:f6:ad:5d:53:a6:
db:95:ee:43:59:f1:94:79:89:35:fb:2a:0b:6d:74:47:ef:cf:
c0:2f:85:a8:85:29:ca:b0:d5:98:3b:f7:ad:cb:ab:81:dd:3c:
be:31:ba:c3:ab:87:15:e1:a1:99:b4:c6:1b:27:d3:db:b7:7c:
a4:c1:70:99:81:a2:8f:47:77:bb:e9:5a:14:bc:5b:65:95:1c:
4d:0b:da:c5:83:e0:8c:85:8b:b2:89:01:37:ff:85:99:a1:f9:
3f:e6:d6:c9:fb:81:ab:c6:b9:dd:37:51:b8:ae:20:78:91:c5:
9f:25:4d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omXipPM4qkq11VAZAUfvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1
ZWI5YWYwHhcNMjYwNzI4MTIwMDU3WhcNMjYwNzI5MTIwMDU3WjAzMTEwLwYDVQQD
EyhhOWVjNDAyMjlkYTQ3YmFjY2ZkY2YxZTJlMWZkMzAyYzgwOTMwMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXto9e5Nr9SOZHhsbaOzmWLn8P9V
tA7U6Ci2tuc+ILkiJkyxJWIa0uKK4cOiuBNGIeOPqOnz/pUTLnXt3E6+tGWJYR70
hd/KKqjTcDUUnn6vHAVyWVd9bugXzUNTiIobZOXEbbrurAbButlk3MNYk4GZNCo/
KY7fHzTRMUwa4y4KiLcizCxBGVOkP/sWQblvQno2oLLr0wn5kflDZjU4yTLMek+T
cw4xigRORmcCLSpUcnQ8Srti7389I6gF1xyBhDot9vnG15U3dGWvkqXEoV+OcYLR
8OxNeqHM4P8zL2gbkOtmY9xTbASn2sWCI7o6Jj5TTe7wGjNDsV/NueZcrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnsQCKdpHusz9zx4uH9MCyAkwH0MB8GA1UdIwQY
MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt
ODhjZmEzZGNhNmRlLzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl
LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/5JOdMI
jzxXBdwKZPjktSDsVr/pxG8KLwlJwtBRs8JAmEaYxqrjibDMhYciwCCs01V0A9bh
BsUX8g1dEJE2odXHLuSZeWnZopWR6ofYaph3STBwBqqVvgHBHSFN1vG5PZDe+2V1
aSnL68Sbiw5rPYJMK0SkImqNhSXuAVZAWJh4OTIrLdlNXg8/f/atXVOm25XuQ1nx
lHmJNfsqC210R+/PwC+FqIUpyrDVmDv3rcurgd08vjG6w6uHFeGhmbTGGyfT27d8
pMFwmYGij0d3u+laFLxbZZUcTQvaxYPgjIWLsokBN/+FmaH5P+bWyfuBq8a53TdR
uK4geJHFnyVNJA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:27 2026 by rpki-client