Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: C/VKTjRo5GKN37jXXnpRkeixTAA8qq3+qvU9O8Xrvjg=
Subject key identifier: 6B:03:4E:2B:2A:D7:CE:D0:C3:E6:7B:37:F0:6A:75:4F:4B:31:13:09
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019F18305B14ED45D2D3387106A329A41431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 197A
Signing time: Tue 30 Jun 2026 11:00:49 +0000
Manifest this update: Tue 30 Jun 2026 11:00:49 +0000
Manifest next update: Wed 01 Jul 2026 11:00:49 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: kiuNCx+fsOac/c/Q3U3NjsgmyR5pJeH9ZL1Vr0vDrUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:5b:14:ed:45:d2:d3:38:71:06:a3:29:a4:14:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Jun 30 11:00:49 2026 GMT
Not After : Jul 1 11:00:49 2026 GMT
Subject: CN=6b034e2b2ad7ced0c3e67b37f06a754f4b311309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:40:4d:0f:68:5d:c1:dc:40:ef:7e:17:6c:
c9:c4:4e:96:94:53:4f:fd:dc:e3:c8:b9:79:58:6f:
a0:09:80:81:be:03:76:d0:85:09:f2:49:a2:08:35:
f7:69:6d:c9:b0:9d:4c:be:a1:f0:f7:d3:85:c6:76:
f9:0a:90:81:d5:9e:bb:08:4d:1a:6e:12:f5:43:29:
36:3f:0a:92:75:a2:c9:13:a0:13:23:31:c1:7a:40:
a2:02:c8:08:1f:42:45:bb:59:f8:4e:56:6d:97:c3:
28:bf:b8:a6:08:8f:67:3b:0f:47:c1:7b:4e:bb:ee:
d2:f1:17:5a:2b:f1:f7:0d:11:6e:fe:c8:63:de:4d:
a7:bc:00:72:e9:f4:0e:c9:35:4d:e7:f4:c6:8b:9c:
1a:af:74:b1:30:38:0b:2e:72:94:64:05:ab:c3:a9:
55:56:99:bf:c3:d9:75:88:94:6d:58:89:e1:ab:7c:
f7:3a:e7:52:c4:22:4a:fb:a6:29:0a:7f:b4:03:4c:
72:71:6f:32:c9:e5:bb:d2:20:4f:5c:ec:a3:e8:13:
e5:9c:5a:69:cc:15:c4:81:0e:db:93:38:89:87:10:
a6:05:bf:d7:fe:ae:c1:4a:35:e2:80:f4:d3:d3:ae:
13:84:c2:4c:cd:81:b1:54:c2:39:57:e6:4c:41:a0:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:4E:2B:2A:D7:CE:D0:C3:E6:7B:37:F0:6A:75:4F:4B:31:13:09
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:6c:c5:db:16:f3:08:34:16:be:ae:76:f7:20:ec:b6:59:
7d:b5:8f:b8:e8:05:a8:7e:ad:82:25:22:38:25:9f:ba:1c:48:
35:88:8c:e5:f4:7a:99:c0:cd:3d:a6:a0:2b:22:6c:53:19:5d:
2b:ef:d8:2a:42:56:32:73:0c:f1:4c:b6:ff:60:32:86:5d:ae:
83:51:be:50:4c:ef:41:fc:66:f2:97:69:b9:54:57:4c:b2:07:
6f:cb:ee:ff:37:bd:11:39:b4:b5:e2:ad:5f:27:2e:64:9f:3b:
d9:e5:05:59:83:69:13:3b:2f:82:ea:a9:25:72:08:cc:86:d9:
c2:a2:02:5d:03:0f:20:ca:64:8f:98:b4:08:4b:22:aa:d6:aa:
c6:30:2b:2b:8c:38:32:8c:4d:f4:47:41:e3:9d:da:32:41:80:
2b:6a:b1:19:06:38:91:ec:f6:d0:ef:f1:f8:32:4a:42:a2:89:
67:04:04:0d:ba:0c:80:f6:a0:db:c2:86:59:81:64:4d:b4:10:
32:b7:ba:3f:49:46:18:da:21:be:12:a4:c2:fe:4c:a6:0f:05:
94:4e:86:13:fe:fc:20:5e:b2:51:0d:4e:2b:4b:2d:76:7a:21:
bd:e5:78:7b:0e:4b:31:56:49:86:10:0c:57:72:13:c1:7b:1e:
8f:15:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:34 2026 by rpki-client