Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: sAn/Ar0uuB8blXqGnc1GhOjz+0DuMKg/eWscH/JOw6k=
Subject key identifier: 51:89:B2:2D:49:49:B5:98:2C:B3:B2:C2:3D:05:07:12:8D:FF:27:AC
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 019DA30A5148D383142861511EBEB2D0A7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 185B
Signing time: Sun 19 Apr 2026 00:00:55 +0000
Manifest this update: Sun 19 Apr 2026 00:00:55 +0000
Manifest next update: Mon 20 Apr 2026 00:00:55 +0000
Files and hashes: 1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: UrvvrGWdnW4C94VTclP2vbehLLlxZ8FW7l1AhhQZeHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:51:48:d3:83:14:28:61:51:1e:be:b2:d0:a7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Apr 19 00:00:55 2026 GMT
Not After : Apr 20 00:00:55 2026 GMT
Subject: CN=5189b22d4949b5982cb3b2c23d0507128dff27ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:f3:3d:31:e9:76:08:e5:c6:74:b0:ee:fa:
1c:4a:6f:4a:82:f3:ec:16:5d:c4:c5:36:dc:5b:d9:
58:22:81:fe:ef:54:a6:ae:47:70:c0:56:0f:b0:1f:
3c:63:33:d1:35:97:1d:0d:b9:50:f4:10:24:6d:fc:
7f:83:e1:0d:b2:12:16:b6:d0:6a:4d:7f:73:87:ee:
9e:80:13:49:05:8f:26:78:74:e7:4d:08:40:73:7e:
16:b9:31:ec:40:ce:c3:10:a4:97:95:02:02:0e:2d:
fa:85:c7:79:cb:17:41:72:bb:44:c2:c4:da:98:f7:
e7:1e:4e:e1:5c:b6:90:01:c5:89:11:ec:1b:41:78:
73:14:a8:37:0b:69:02:f6:9f:6f:6f:3e:8f:a1:b0:
e0:f0:c2:84:3e:69:59:ee:4e:b4:38:ca:67:bd:a2:
91:1a:e7:b1:c0:64:83:22:5b:b2:00:63:f0:80:37:
48:0d:3f:e9:42:89:24:73:fd:ba:8a:5b:48:38:86:
7b:38:7e:50:e4:bb:1d:04:50:25:b9:6a:02:e0:c2:
85:74:3c:2a:72:91:b3:22:85:01:62:00:5a:e4:41:
22:d0:1a:fc:04:6b:04:ec:8b:8f:2f:20:12:38:46:
e6:46:8c:1a:59:19:3b:18:43:e4:36:b2:37:ee:fe:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:B2:2D:49:49:B5:98:2C:B3:B2:C2:3D:05:07:12:8D:FF:27:AC
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f6:eb:d2:c7:cd:1a:b8:70:7a:2a:74:40:f2:3c:a1:1d:4d:
83:05:89:8d:37:b8:44:13:eb:65:78:d8:6c:8a:8b:00:70:ee:
15:03:e1:93:df:54:e2:35:9b:6a:77:65:91:9c:9e:f1:9f:8e:
1b:38:c7:93:9d:62:26:f0:ad:ee:82:ad:95:df:23:4c:19:7e:
cc:41:bd:dc:9b:e2:ae:20:1d:53:25:f8:c8:4e:f6:a7:cf:b7:
7d:30:04:52:07:0c:ad:97:37:b1:cf:96:9c:43:49:bc:6e:14:
23:7f:7f:b4:05:a4:5a:d4:77:22:06:31:8d:2f:34:44:5c:0c:
10:fb:85:f1:ce:cb:68:ec:2f:b4:19:fa:37:a4:ba:ad:59:fd:
23:84:f6:b5:bc:fb:17:16:22:ab:ed:f8:2b:ae:b8:66:70:22:
39:6b:4e:92:2f:8c:50:cd:cb:90:6c:7f:47:88:be:1e:48:4a:
11:f3:d3:2d:7e:39:ae:51:26:e0:6e:ac:69:fa:49:2b:8d:54:
31:ff:52:79:7d:70:37:8f:2c:7c:4a:57:59:88:fd:b6:1f:57:
73:53:88:e6:59:03:ce:08:ba:56:d2:82:08:70:fc:93:92:e1:
dc:c4:65:d9:c3:4b:e4:75:22:b7:61:1d:12:e7:71:ee:6a:0a:
61:f1:43:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:14 2026 by rpki-client