
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: ruGWI/wV8+70fR5qPTBEXe3xCPcDZsKvxJUKrD0+C88=
Subject key identifier: 61:34:B6:BB:C6:27:0E:70:9E:83:77:A2:E3:BA:66:08:6A:CF:C7:8E
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 01A13F3903F9ABAA0F83F917F6F3AAD0E149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 130D
Signing time: Thu 15 Oct 2026 11:01:03 +0000
Manifest this update: Thu 15 Oct 2026 11:01:03 +0000
Manifest next update: Fri 16 Oct 2026 11:01:03 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: 89kn4uY8//AnS0ND63tKsR4bLRjFp4qFHCE61wMxODA=)
2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:03:f9:ab:aa:0f:83:f9:17:f6:f3:aa:d0:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Oct 15 11:01:03 2026 GMT
Not After : Oct 16 11:01:03 2026 GMT
Subject: CN=6134b6bbc6270e709e8377a2e3ba66086acfc78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:ba:ae:c2:a0:1f:d4:94:bb:eb:a9:a1:26:
4f:fc:a8:eb:d7:ee:cf:1a:d7:6b:82:0b:04:a6:06:
0d:2c:89:a6:16:04:20:0d:98:3c:63:52:3d:5a:5f:
5b:cf:9a:f5:3b:30:6a:6c:83:2f:ec:92:cf:a1:6e:
04:f0:5a:4d:c7:13:8a:6b:d0:c3:c1:ef:fd:02:7b:
23:af:b2:02:bd:dc:3c:6b:d6:d4:99:97:af:94:99:
4c:71:b1:69:58:df:f3:58:82:27:28:aa:b6:9c:40:
50:13:1a:07:22:21:01:84:5c:a8:7c:e1:78:57:68:
ec:24:73:c3:ca:16:09:10:4e:ae:47:9b:bb:d0:ea:
ad:ec:a0:5c:45:99:8e:f3:55:e0:3d:37:f5:f7:ca:
af:05:16:db:fc:13:27:17:cd:7d:59:12:d6:f4:2d:
e7:3f:c2:ff:38:85:2d:e1:60:70:d0:e9:ed:f1:ff:
2f:65:82:80:71:9d:ab:71:d4:36:b8:b5:53:9d:55:
53:6f:e6:f3:84:5a:9b:ee:aa:42:9f:26:ee:3d:18:
82:e4:a5:c2:f7:3f:87:c9:86:0e:9a:b8:63:1c:c3:
2a:88:74:65:51:48:46:f8:d1:32:8c:75:0a:94:04:
ba:31:5a:24:5e:d9:b0:fb:fe:ab:f7:10:06:73:4e:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:B6:BB:C6:27:0E:70:9E:83:77:A2:E3:BA:66:08:6A:CF:C7:8E
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:8d:fa:25:68:91:cb:59:c1:02:21:f0:ce:2a:d4:ff:69:
35:02:20:be:cf:c5:05:8c:45:c3:87:fe:a4:80:a5:ea:cc:72:
47:80:cd:14:47:bd:0d:9f:53:0d:43:90:53:e9:c7:aa:55:09:
2c:bf:32:8c:0d:45:54:c9:df:82:a4:69:7f:42:c7:4d:a3:eb:
91:44:5a:d4:51:73:d6:54:0d:88:5e:5d:ec:0a:0c:ab:c7:8e:
a2:68:27:e6:06:6b:98:01:91:f7:52:78:fc:b2:67:56:e2:23:
3b:7b:bc:07:8f:49:e9:4f:da:a5:ee:97:c6:45:3b:76:49:1b:
13:d7:da:e6:bb:0b:6b:fa:37:02:69:d4:1e:6b:a7:d9:a0:7e:
16:8f:ff:ea:74:f5:17:b5:6c:32:cf:a8:47:bc:25:f3:04:36:
51:43:9d:89:44:5d:fe:2b:26:da:3c:2e:d0:ad:72:9b:3b:01:
91:f4:50:88:1d:7c:db:4a:0d:06:99:c2:cc:e2:fb:e4:17:86:
c8:fd:6f:cf:ec:aa:97:e6:d1:83:da:02:e2:32:18:4e:63:b3:
13:ba:71:bc:db:43:12:11:82:21:8d:57:46:f5:ad:e8:92:ca:
bb:2c:93:44:3f:22:c8:24:7c:87:16:09:2c:12:08:9c:36:0e:
01:d8:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:55 2026 by rpki-client