Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: B1Cak/Z085ubx2id5IZhaTd0b+0OXIvQkjAQ/7oSzyk=
Subject key identifier: 43:A7:48:23:AD:E4:D6:77:F9:4D:3F:17:D1:14:1E:7D:16:95:BC:60
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 01A001DCC4FBAC83B2956E16A66D3721600C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 19F3
Signing time: Fri 14 Aug 2026 20:00:40 +0000
Manifest this update: Fri 14 Aug 2026 20:00:40 +0000
Manifest next update: Sat 15 Aug 2026 20:00:40 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: T3sktp8SGxwh5mLdg/CqeW385vXOF33h1IqyOeuZO+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c4:fb:ac:83:b2:95:6e:16:a6:6d:37:21:60:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Aug 14 20:00:40 2026 GMT
Not After : Aug 15 20:00:40 2026 GMT
Subject: CN=43a74823ade4d677f94d3f17d1141e7d1695bc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:72:d4:d9:0a:c3:e6:40:ea:b4:98:92:e1:
b7:88:51:4d:31:f4:74:b3:49:11:42:67:9b:6e:66:
63:f6:a6:d2:8a:77:f0:4b:5d:3a:c5:d7:e5:1a:63:
80:57:a7:46:cf:e9:15:8e:83:06:ec:d1:b7:17:43:
5a:d2:52:cc:5b:33:36:b4:d0:f0:0f:b9:a9:5c:66:
17:e4:f2:58:82:ac:44:9f:92:c2:7a:3a:19:9b:93:
fe:9f:9c:fa:6b:da:e2:94:00:f6:76:f6:b7:3b:3f:
97:aa:5d:1f:20:ac:29:9c:23:aa:cb:32:c4:0d:1a:
1c:43:54:6f:c2:8f:9e:3e:5a:f9:6d:11:37:05:02:
d1:65:11:52:25:a6:da:ec:87:8e:a8:65:ed:03:31:
7c:2c:04:5d:36:7c:e0:b0:82:b9:fe:dd:74:a9:7d:
42:33:44:05:8c:1b:7d:04:bd:41:69:8c:2c:b6:77:
cb:67:61:23:21:19:9a:f8:ab:e0:cd:c2:47:df:c8:
d5:ba:64:f6:7d:ea:9f:a5:66:f2:22:e3:4b:9f:ed:
e3:f0:f5:bf:c4:d1:db:e4:79:c8:f5:9d:b6:ae:de:
55:03:66:7c:29:f8:2c:f9:7e:18:61:cb:b1:06:90:
70:71:35:4a:70:a5:8f:eb:89:ba:f0:26:49:54:a7:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:48:23:AD:E4:D6:77:F9:4D:3F:17:D1:14:1E:7D:16:95:BC:60
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f4:0f:2f:c3:e2:26:23:98:aa:26:b4:e9:b8:be:df:6c:94:
8b:e0:7b:33:f5:7c:b9:95:c0:40:39:c7:9c:54:5f:26:8f:0f:
b2:f5:9c:34:c1:b1:d8:05:52:f8:a0:cc:53:ec:0a:d4:85:34:
14:b3:4c:42:27:91:a3:79:a1:bc:33:2b:76:77:d1:f2:6e:2c:
2c:97:57:35:b1:8f:be:b8:b3:45:8a:49:11:59:40:02:a8:bf:
ea:87:9d:37:98:97:48:c1:a9:2a:3c:ed:bf:6f:cc:f3:2c:93:
f9:7d:22:aa:7b:35:26:c4:a8:8a:dc:f4:8c:92:7c:0a:f5:81:
ef:fc:88:55:1f:10:16:9c:82:e2:e1:cb:fc:72:a2:11:9e:65:
e3:71:fb:98:45:58:92:26:3b:72:de:21:39:9f:a5:fc:62:e0:
d1:45:38:f9:7c:5e:4b:6e:d4:f2:a1:4d:2e:a4:f4:83:1e:d3:
78:fc:fb:2a:9e:2f:f8:0d:07:7f:cb:6c:52:75:f5:a1:23:e5:
0c:c3:0b:8a:6d:bd:fa:8e:97:4c:ff:34:07:6e:45:d9:0c:8a:
f5:1a:9e:0f:44:a9:0b:6b:b4:0c:dc:69:7e:2d:5c:0e:39:42:
95:2c:93:87:80:6e:32:b8:33:ca:08:49:1e:88:c1:8c:70:93:
3f:bb:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:53 2026 by rpki-client