Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: 1M6tDKErhMVxFP52aCSUrhSBH8bwiNZHjDTqqt9TVi0=
Subject key identifier: 09:BF:44:92:36:B2:CF:28:75:BD:73:BC:CE:8C:1B:E8:E1:19:52:68
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019CAD22C270A26957768A35BE7B31930BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 06:01:02 +0000
Manifest this update: Mon 02 Mar 2026 06:01:02 +0000
Manifest next update: Tue 03 Mar 2026 06:01:02 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: qnRmCK8f1UYa3z3V04NFBndnSg9ammMMfW+R+XhlM3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c2:70:a2:69:57:76:8a:35:be:7b:31:93:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Mar 2 06:01:02 2026 GMT
Not After : Mar 3 06:01:02 2026 GMT
Subject: CN=09bf449236b2cf2875bd73bcce8c1be8e1195268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:16:fb:3a:fa:6b:a0:48:b6:70:d7:12:96:
ff:71:76:0b:32:ee:bd:79:ac:62:20:bc:18:5b:a6:
b2:5d:66:bf:66:95:5a:ed:67:82:67:42:40:97:79:
fe:b5:35:6a:51:2f:1a:95:be:a4:54:41:33:55:e4:
fb:85:81:58:22:23:5b:9a:e6:50:a8:8c:8e:cf:bc:
53:41:07:c7:76:59:31:87:42:02:22:be:da:ad:ca:
d3:a6:d6:5e:f1:e3:c5:c5:bf:f0:9b:6d:6e:3e:ca:
82:d0:25:23:94:19:d4:6d:65:a9:8f:1b:33:1e:9b:
b1:02:d0:5f:c5:c7:f2:3f:d6:9f:dc:98:67:fe:90:
ea:1d:23:26:3c:20:a1:12:09:d5:c0:d6:13:7e:ea:
c7:3a:00:8a:0d:3f:7d:6a:52:aa:13:f5:a3:e3:8c:
8a:b2:8b:92:ba:4e:f6:26:d8:53:25:d1:b5:81:eb:
98:82:ef:be:8b:a0:31:fc:bd:b6:42:e7:5d:ea:de:
e1:4f:18:85:c6:fb:44:94:04:0d:78:e9:b0:d5:bd:
b2:d8:ed:b8:58:a3:a1:7b:6b:97:4d:8e:ce:70:24:
1b:e1:92:e7:04:f0:7c:ca:43:e5:5b:66:95:f1:82:
9d:93:fb:45:c8:da:3f:dc:25:94:84:dc:93:91:1f:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:44:92:36:B2:CF:28:75:BD:73:BC:CE:8C:1B:E8:E1:19:52:68
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:46:d8:b1:36:35:04:79:fc:dc:0b:b3:bf:74:45:ad:8e:ef:
81:25:28:3f:d9:bf:9b:3a:90:01:c7:1d:d9:e4:b2:39:97:95:
2f:22:40:4a:3f:74:5e:5f:bd:5a:29:82:66:43:b8:3b:1f:a3:
bb:24:25:ad:4d:cb:f0:97:49:63:90:f3:7a:db:b8:fa:c8:cd:
f1:28:f3:fd:68:89:5a:02:aa:d8:8b:72:30:b6:12:70:ba:9d:
30:87:68:b2:6a:82:15:12:13:67:4f:41:a1:b1:c8:ad:d5:31:
11:c2:61:57:ce:48:13:68:91:3c:78:5c:07:a3:10:cb:be:bd:
2b:9b:6c:c3:fc:2a:2c:33:fc:3c:83:bc:f7:0b:0d:16:9c:5a:
73:84:66:5f:ca:2d:61:71:80:90:81:1d:03:b4:8d:ba:93:12:
d5:69:1c:18:bb:7f:fb:7f:aa:af:68:b8:49:05:b7:3e:a7:df:
b0:b7:47:cc:c8:76:83:93:7a:18:c7:de:e9:5a:00:55:e7:e9:
e8:8d:0c:76:c3:e2:fd:7f:55:4f:4d:c9:db:e0:38:e1:31:0c:
e6:bc:dd:f7:28:2c:9e:dd:dd:4b:40:eb:88:b5:9a:aa:71:eb:
e6:0e:b1:e6:b9:ad:62:4d:2d:b4:6e:cd:f7:7c:06:7d:21:03:
b4:b0:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:20 2026 by rpki-client