Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: OPqa3nCfP+6A8mvz0QGN+yVKSomIJhN9Edbm8KretT8=
Subject key identifier: 0B:F6:C0:17:64:88:5A:BC:F6:69:3C:EC:F7:19:85:5A:86:E0:DE:BF
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019D3940D069B375DBD471F4D052E0C4125B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 1882
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: CiARfP1RiVrGc0KgKh9mO+hixUv2BxkrBKAT3ezCASw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d0:69:b3:75:db:d4:71:f4:d0:52:e0:c4:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=0bf6c01764885abcf6693cecf719855a86e0debf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:07:f8:b7:61:55:3d:d6:cc:34:3a:f9:12:
16:fd:1b:b4:29:f5:e7:eb:91:b6:86:cc:da:18:0d:
b8:50:08:2f:3e:7a:b9:91:0f:20:c1:22:3a:ec:65:
64:6d:79:28:e7:47:59:99:6b:36:b2:bd:a7:bc:c9:
d6:29:48:c9:fa:7e:8c:35:56:17:8b:86:ba:a3:e9:
0b:28:08:b1:15:2f:e7:00:c7:5e:45:10:29:00:19:
39:ed:83:67:23:11:7e:e6:63:70:d3:b6:ad:43:c5:
e3:8e:5b:b7:a5:e5:49:6e:3d:20:6f:4e:2d:21:0b:
cc:85:90:5b:e3:d3:15:50:bc:df:3e:92:13:d0:55:
7f:ef:27:47:57:a4:7c:65:0b:5b:16:1c:97:7f:b9:
85:da:42:74:58:b3:90:63:08:3e:8d:bd:af:6a:2e:
26:d7:4e:6a:53:84:66:c1:69:25:f2:c1:ac:f5:dc:
97:9f:1f:3b:8d:bb:3e:86:e2:7f:5a:fa:0d:30:61:
26:f5:5c:ee:93:ec:02:f5:d9:1f:d4:09:b7:64:be:
39:80:e6:68:ad:92:fd:db:9d:10:ae:64:23:29:83:
f9:07:de:85:36:85:10:a8:c2:16:72:d8:7c:25:f3:
fc:41:1f:16:e4:46:14:1b:3e:7f:5b:77:f1:d0:b4:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:C0:17:64:88:5A:BC:F6:69:3C:EC:F7:19:85:5A:86:E0:DE:BF
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:30:6d:f9:e3:c7:a8:14:08:95:70:4c:50:85:71:ee:00:57:
ea:94:58:99:be:30:a4:ae:cf:5f:3f:f2:c5:b5:dd:46:55:f5:
05:a6:a3:0f:62:f5:69:0f:9c:05:14:73:6b:1c:2c:26:98:41:
69:56:30:0e:a1:92:0f:ed:68:a7:be:55:24:10:99:6d:45:4d:
1d:2e:dc:2b:2b:4a:62:a2:b0:82:83:ba:df:a8:ba:ce:e3:4b:
38:6e:76:b5:39:92:d0:d4:64:aa:c7:72:87:ec:7c:2a:6c:e6:
96:8b:1b:a3:24:72:85:5d:db:8f:07:9e:74:0b:60:24:ae:a1:
8d:c4:72:af:4c:6f:d6:90:75:96:90:bb:42:81:75:49:94:df:
4b:f7:28:67:99:03:a0:2a:82:47:65:4a:2a:cf:14:72:13:c9:
9f:52:66:f8:ca:78:51:ef:26:cb:15:aa:e2:1c:e0:3f:cc:1d:
be:df:3e:35:45:d1:25:bc:57:7d:01:8d:c8:bc:f1:5c:ad:23:
2b:b9:15:19:8d:17:e7:14:1b:d5:ec:9a:08:e2:6f:3a:36:f1:
14:a1:f9:5f:71:dc:22:dd:d7:7c:e4:5d:8e:6f:66:f1:75:e0:
5a:6e:c6:13:8e:ad:9a:f7:4d:b8:2c:47:95:5c:33:3d:8c:14:
2c:d7:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:19 2026 by rpki-client