Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier: xBTEMr6TQ4ZKne0smB419zh0IH5BkE4Ntc+kt3ESYME=
Subject key identifier: 5A:02:8F:BA:F2:D7:C9:60:C0:FC:DF:A7:C1:B4:E5:F0:2A:7C:8E:F9
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 019CABA1D359FDB6C9C23D5C93055C642204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: jH3Gq0uMwnBTH385swH3J8ah8IpOBL5NkkeobdhUsd4=)
2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d3:59:fd:b6:c9:c2:3d:5c:93:05:5c:64:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=5a028fbaf2d7c960c0fcdfa7c1b4e5f02a7c8ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:a8:c2:1d:55:df:8c:9f:0b:39:bd:38:0c:
c6:81:d1:c7:ac:e1:05:54:eb:00:ba:da:b0:c2:3e:
bc:84:77:4c:f7:12:91:7b:a1:e6:75:ca:b3:25:1e:
3e:84:2d:7c:4d:d9:49:b2:55:0d:78:31:f1:7f:71:
97:87:b7:a7:ef:3b:19:2a:f6:20:17:01:fb:11:05:
70:29:b2:73:60:30:2c:8b:3a:dc:62:d4:f4:62:98:
8b:67:86:8d:a6:e8:a4:80:86:94:e6:85:97:50:81:
94:89:9d:28:60:0c:39:35:af:6b:bd:fa:55:a1:c6:
6c:c8:fc:bc:88:4d:2d:5c:87:fa:86:fc:ed:e2:6b:
8e:43:4d:8a:ca:3b:52:5f:ae:d6:a6:3e:7b:e0:13:
1f:cd:db:48:90:0a:a4:6b:3c:51:b9:d9:45:fc:28:
ce:db:88:5e:00:a5:b1:d5:e2:d5:73:aa:92:e9:64:
e9:3d:ed:da:75:d3:19:6e:bf:8b:f3:53:74:69:85:
1e:d8:da:ef:e6:7d:ed:eb:fb:ea:e5:03:64:db:3f:
74:ad:65:1a:2d:11:eb:07:2a:11:62:f5:b9:2d:9d:
eb:21:5d:af:ce:83:13:5c:ca:df:62:63:e0:a9:04:
f6:d5:db:f0:f9:b3:39:d0:70:de:66:70:6c:ea:4c:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:8F:BA:F2:D7:C9:60:C0:FC:DF:A7:C1:B4:E5:F0:2A:7C:8E:F9
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:91:ed:63:91:b8:07:93:7d:bc:2a:7c:9a:6a:ee:64:ae:b3:
89:da:3e:ce:4d:a2:1e:4b:b2:82:1d:d6:d2:52:da:aa:47:62:
42:c5:36:b5:25:77:d1:88:ec:76:2e:72:79:8f:78:f3:17:2e:
db:3d:21:b6:03:3c:4a:9b:2b:8f:95:2b:ab:5e:ae:07:2b:a3:
ca:c4:61:6d:78:77:67:04:80:98:16:b3:ca:d4:3d:e3:b1:0c:
52:af:ed:80:33:32:8b:ba:6f:8c:53:9d:a9:bc:bb:33:13:eb:
28:35:0b:91:44:92:67:e0:54:28:1c:a5:54:6b:35:94:5c:c6:
0f:27:cb:c4:d0:4f:5c:d3:5f:d7:3e:6f:21:5a:88:98:54:c7:
b9:d0:13:9c:9c:be:75:c8:e5:91:25:1d:eb:33:97:f6:24:03:
7a:60:a2:f5:d0:41:ab:36:ba:88:c6:82:cf:4f:63:ab:6b:94:
c5:ec:51:8a:fb:5a:92:08:af:0f:ba:45:42:ac:e2:91:66:7b:
8f:8b:64:49:dc:01:27:0f:ea:c7:7c:ab:d8:41:a5:0e:49:32:
51:32:c8:21:0c:cc:89:c9:22:c4:5f:3d:ff:8b:d2:b9:76:82:
7d:eb:14:24:98:c2:38:08:5e:e5:85:35:88:df:f1:22:c4:7c:
5c:22:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:11 2026 by rpki-client