Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: jAbI2u3tH+nQkW9+R/dcNfEKGqm8Xy+VgoSpCP8x5xw=
Subject key identifier: 7A:20:E8:A6:89:BB:11:F9:9D:F5:96:E0:64:91:C2:E3:FC:45:05:B3
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019D382DDF176F274A743DAA1288E13090AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: O8Y+xXVyXQd7tHKg6vF40WDAojmGy3dGVaXPMg9liyw=)
2: ufSzeyDtwqyX2VcVaLd_bm70odg.roa (hash: mOh78oLKMhO8N2vOwgRV00Yf6t8BsMyPRhqMpzfai3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:df:17:6f:27:4a:74:3d:aa:12:88:e1:30:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=7a20e8a689bb11f99df596e06491c2e3fc4505b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:07:73:2a:ad:60:c6:58:35:81:d9:38:57:
fc:72:c3:20:aa:2c:f4:51:0a:03:ec:62:20:a2:08:
f3:33:f1:49:4f:da:82:09:de:53:f4:39:47:9d:17:
c7:98:36:eb:ff:c7:76:dd:62:36:9b:81:ac:5a:7d:
fe:d6:9b:ce:d8:ec:82:e2:b9:5d:53:2c:bd:32:bd:
0a:a0:96:f3:ab:aa:95:97:be:b5:d9:2f:51:3a:d9:
a2:ec:17:a8:d5:3c:cd:67:3c:d9:2c:e5:84:c9:12:
8c:9f:82:6b:15:5d:ca:16:3a:cc:1e:36:6d:e8:b1:
6a:62:63:c5:7a:fa:70:af:0b:88:fd:19:3a:e0:dd:
fc:3f:3d:fd:59:1c:f3:c3:9a:09:32:1f:50:71:19:
0c:61:2e:4d:3c:99:ee:56:b6:a0:2d:51:ee:59:bd:
5d:8b:5d:19:d5:7a:a8:21:96:a0:5b:3a:10:28:07:
61:1e:8a:22:97:8f:41:5f:c2:c8:30:27:57:96:f7:
00:c0:e7:22:70:2f:4c:14:b5:31:3c:78:1b:39:c1:
94:65:70:a2:f1:4e:e0:a4:33:a7:10:49:a7:62:79:
fd:ee:e1:d1:3a:5d:e3:aa:41:4a:18:4e:2a:d7:c9:
e1:f2:a1:08:64:d0:58:66:a5:f0:3c:59:2b:5c:ad:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:E8:A6:89:BB:11:F9:9D:F5:96:E0:64:91:C2:E3:FC:45:05:B3
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dc:7b:bc:d5:76:e1:82:1a:fb:7a:3f:52:56:47:2c:2c:85:
53:af:98:9e:28:b6:bb:df:60:37:2f:a3:12:11:8d:78:2b:8c:
30:55:29:72:24:c5:70:91:d7:08:7c:ef:c5:9b:9f:5e:8c:8e:
b4:54:17:8a:8f:60:e8:28:36:88:c5:06:6c:ae:dc:7b:3c:13:
8b:f3:2e:36:e0:26:81:3a:f0:76:e2:1e:af:52:2a:a4:bd:27:
c3:87:4a:48:89:8b:e7:a7:49:05:7b:cb:b1:70:0b:58:9d:09:
36:d4:10:b6:cc:e8:de:60:e9:55:dd:3d:b4:64:45:72:c9:b8:
56:36:59:ec:fa:93:6d:f8:18:d5:51:3b:96:18:7d:92:5d:b6:
38:fb:41:92:e8:8c:c5:f2:a0:48:6a:3d:ca:ae:0c:1d:51:1f:
11:06:1e:4a:4e:84:89:ce:4e:cc:fb:90:2d:6a:0e:57:85:f5:
ca:87:31:c1:53:15:a4:ba:a8:80:81:13:02:00:28:55:9c:46:
ec:d2:c4:cd:97:b3:03:be:0a:ee:f8:5f:55:db:32:e7:da:d5:
8b:7d:33:28:90:21:0b:3c:87:3f:4b:ed:78:c3:6b:d6:64:74:
99:2d:d8:94:c8:ba:5a:58:26:92:51:8d:8d:52:97:37:fd:fd:
90:d5:fb:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ld8XbydKdD2qEojhMJCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh
YzhmNTIwHhcNMjYwMzI5MDYwMDIzWhcNMjYwMzMwMDYwMDIzWjAzMTEwLwYDVQQD
Eyg3YTIwZThhNjg5YmIxMWY5OWRmNTk2ZTA2NDkxYzJlM2ZjNDUwNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGoHcyqtYMZYNYHZOFf8csMgqiz0
UQoD7GIgogjzM/FJT9qCCd5T9DlHnRfHmDbr/8d23WI2m4GsWn3+1pvO2OyC4rld
Uyy9Mr0KoJbzq6qVl7612S9ROtmi7Beo1TzNZzzZLOWEyRKMn4JrFV3KFjrMHjZt
6LFqYmPFevpwrwuI/Rk64N38Pz39WRzzw5oJMh9QcRkMYS5NPJnuVragLVHuWb1d
i10Z1XqoIZagWzoQKAdhHooil49BX8LIMCdXlvcAwOcicC9MFLUxPHgbOcGUZXCi
8U7gpDOnEEmnYnn97uHROl3jqkFKGE4q18nh8qEIZNBYZqXwPFkrXK2wjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHog6KaJuxH5nfWW4GSRwuP8RQWzMB8GA1UdIwQY
MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt
YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj
LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9x7vNV2
4YIa+3o/UlZHLCyFU6+Ynii2u99gNy+jEhGNeCuMMFUpciTFcJHXCHzvxZufXoyO
tFQXio9g6Cg2iMUGbK7cezwTi/MuNuAmgTrwduIer1IqpL0nw4dKSImL56dJBXvL
sXALWJ0JNtQQtszo3mDpVd09tGRFcsm4VjZZ7PqTbfgY1VE7lhh9kl22OPtBkuiM
xfKgSGo9yq4MHVEfEQYeSk6Eic5OzPuQLWoOV4X1yocxwVMVpLqogIETAgAoVZxG
7NLEzZezA74K7vhfVdsy59rVi30zKJAhCzyHP0vteMNr1mR0mS3YlMi6WlgmklGN
jVKXN/39kNX71g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:55 2026 by rpki-client