Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: nmWtPwzC6YhgysbYdRm7JX1oe3UPTNmjCsNP8v8Obe8=
Subject key identifier: D4:57:F0:03:2C:D2:FC:22:86:40:51:33:DA:4B:B9:48:52:17:95:AD
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019D9AABFAF782C5139FB9C83EDBAC1D9069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 05DB
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: vRpaIoAJJBZOkMYCeQzYTlh2xdpN+8oTdAuCuiDK910=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fa:f7:82:c5:13:9f:b9:c8:3e:db:ac:1d:90:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=d457f0032cd2fc2286405133da4bb948521795ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:02:61:89:01:89:1e:f4:b7:e7:0d:b7:e7:
dc:4c:01:6a:ea:09:dd:52:2a:f0:9d:56:3a:21:6b:
e8:3e:52:80:df:9c:f7:a9:48:3b:9e:c2:f4:33:df:
d2:b0:cf:60:a5:c2:4c:61:4f:71:97:10:79:1f:39:
f6:10:af:3a:35:31:5e:1c:09:fc:da:58:a7:38:a8:
8d:07:ce:c3:06:fb:23:0c:dd:bb:c1:ba:c0:f2:5d:
36:87:03:ba:1f:a7:99:1f:2b:1f:74:9a:5f:ed:ba:
9f:d0:d3:c6:ef:d1:89:7c:d5:15:46:ea:59:6f:f0:
9f:9f:a4:b4:b0:66:35:c7:2b:3f:e5:72:1b:cb:aa:
51:bb:f6:07:14:86:53:ed:79:50:49:9e:25:e4:32:
14:66:5c:1b:36:91:41:74:f4:55:c0:a1:2a:26:e9:
40:32:af:6a:e2:f6:71:ff:62:75:f1:41:96:57:a4:
a7:d0:65:eb:8f:12:f5:3e:7a:11:0b:f3:a2:72:6b:
43:e6:c9:eb:ac:42:f5:db:0e:01:a9:a0:aa:dd:d3:
84:d0:91:cb:02:e3:e2:8b:8e:2d:c3:9a:81:ec:b0:
5a:51:f5:ae:7a:35:67:ef:ec:f0:52:11:ca:fd:54:
bb:90:fb:5a:7e:85:3b:eb:56:bd:1a:f0:c2:96:9e:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:F0:03:2C:D2:FC:22:86:40:51:33:DA:4B:B9:48:52:17:95:AD
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:3e:cb:f9:12:6e:ad:12:79:8e:32:d2:9c:fb:0c:89:d7:
8c:5c:58:fd:14:b2:26:b1:d0:55:66:f1:57:34:5b:6d:0a:cc:
16:15:65:4b:ae:12:fb:b9:e3:0b:c6:e0:d4:a0:92:6a:32:44:
e9:b9:31:62:b8:62:9f:e0:f7:43:2a:56:fb:e8:b7:a0:1f:73:
b8:c5:57:f4:d8:58:e1:96:71:01:e9:64:82:f1:e1:d8:4b:a2:
5a:57:6c:db:0b:1d:34:42:ad:86:be:16:c3:ce:01:dc:8b:ee:
0d:45:52:95:e4:a6:fb:e8:a0:65:c3:62:42:ed:f8:73:a5:1b:
64:c4:89:90:83:06:14:e4:f2:73:75:45:8d:0a:bd:92:ad:5f:
01:49:ba:f0:e5:7e:13:4e:72:d7:83:87:fe:49:8d:39:d0:49:
c1:87:0f:f9:a3:16:79:a6:d5:d0:7d:f6:1f:a4:fd:c2:67:ef:
cf:4f:e2:ed:07:39:fe:7a:f4:6c:08:ce:55:c7:6f:89:47:8b:
e9:b2:92:eb:c4:cb:00:62:12:5b:4e:bd:05:e7:ea:72:ca:1d:
c6:80:4f:7c:e9:d8:98:ab:be:6b:a3:c7:dc:b8:1f:cf:92:6e:
97:fe:d7:23:21:a3:bd:94:55:98:0e:a2:30:1b:13:02:df:50:
bc:09:9a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq/r3gsUTn7nIPtusHZBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjFiZDMwZDMxOTFhODdjN2QwYTQ2MmU2NzkzMjQzMTYz
M2RkMWUwHhcNMjYwNDE3MDkwMDU1WhcNMjYwNDE4MDkwMDU1WjAzMTEwLwYDVQQD
EyhkNDU3ZjAwMzJjZDJmYzIyODY0MDUxMzNkYTRiYjk0ODUyMTc5NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ICYYkBiR70t+cNt+fcTAFq6gnd
UirwnVY6IWvoPlKA35z3qUg7nsL0M9/SsM9gpcJMYU9xlxB5Hzn2EK86NTFeHAn8
2linOKiNB87DBvsjDN27wbrA8l02hwO6H6eZHysfdJpf7bqf0NPG79GJfNUVRupZ
b/Cfn6S0sGY1xys/5XIby6pRu/YHFIZT7XlQSZ4l5DIUZlwbNpFBdPRVwKEqJulA
Mq9q4vZx/2J18UGWV6Sn0GXrjxL1PnoRC/OicmtD5snrrEL12w4BqaCq3dOE0JHL
AuPii44tw5qB7LBaUfWuejVn7+zwUhHK/VS7kPtafoU761a9GvDClp7iTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRX8AMs0vwihkBRM9pLuUhSF5WtMB8GA1UdIwQY
MBaAFA6xvTDTGRqHx9CkYuZ5MkMWM90eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQt
NGUzMzQyN2Y3MzRlLzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQtNGUzMzQyN2Y3MzRl
LzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny4+y/kS
bq0SeY4y0pz7DInXjFxY/RSyJrHQVWbxVzRbbQrMFhVlS64S+7njC8bg1KCSajJE
6bkxYrhin+D3QypW++i3oB9zuMVX9NhY4ZZxAelkgvHh2EuiWlds2wsdNEKthr4W
w84B3IvuDUVSleSm++igZcNiQu34c6UbZMSJkIMGFOTyc3VFjQq9kq1fAUm68OV+
E05y14OH/kmNOdBJwYcP+aMWeabV0H32H6T9wmfvz0/i7Qc5/nr0bAjOVcdviUeL
6bKS68TLAGISW069BefqcsodxoBPfOnYmKu+a6PH3Lgfz5Jul/7XIyGjvZRVmA6i
MBsTAt9QvAmaQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:24 2026 by rpki-client