Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: 0uOVFlAK9HfbidrEj3r+Qt/rVdP8ZAvFPT7HG0cjWos=
Subject key identifier: 5E:C6:B5:11:03:D1:11:D3:CA:34:91:B5:05:3D:44:20:3F:FD:C1:B2
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 019D37F71FEE5562D3FAF513D5F3EDDF98D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 10F7
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: pQJfygTaATnA4s4rJ+5kuiC5c0+XdjHDTUxpDPKRJsk=)
2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1f:ee:55:62:d3:fa:f5:13:d5:f3:ed:df:98:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=5ec6b51103d111d3ca3491b5053d44203ffdc1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:64:6c:3f:be:ad:09:4c:d8:5c:85:a5:24:
a2:97:e2:95:70:5d:d8:fa:32:35:83:52:f2:ba:d3:
91:a1:b9:b0:3c:c2:68:2e:c5:e3:75:08:22:6d:62:
3e:94:58:25:9b:f8:85:04:d7:64:8c:fe:2b:bb:78:
99:08:77:43:ee:81:f5:ca:12:ff:dd:54:56:68:a7:
a0:21:45:95:39:59:01:24:fb:ca:b8:3f:c7:fa:91:
70:26:84:16:dd:5f:f2:6f:b2:85:40:9e:ad:79:d7:
0c:46:95:e9:63:83:1e:40:fd:54:b6:a5:a7:58:73:
fc:3b:8f:a3:4f:b3:59:4b:2f:77:20:ee:12:8b:33:
11:93:31:43:31:1c:5b:79:2e:3b:ab:71:2b:e2:b7:
b1:72:01:c5:57:1d:e1:40:f9:08:4a:3e:bc:ae:a7:
37:6f:89:d6:b1:01:0b:bd:a1:28:1f:54:ee:4e:0c:
17:c1:20:c5:7e:00:e1:e8:4d:5e:15:68:f7:14:a6:
74:d8:fc:1f:c7:7f:66:18:86:aa:3a:66:0c:ee:b2:
70:5d:c7:e0:a8:cd:95:65:82:5b:7c:f8:6e:d7:af:
36:47:dc:a4:55:44:02:b8:ec:69:aa:ad:3b:2c:f5:
19:4e:95:39:e0:9b:44:e4:bb:92:97:dd:ca:e4:62:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:B5:11:03:D1:11:D3:CA:34:91:B5:05:3D:44:20:3F:FD:C1:B2
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:f3:87:e7:69:e9:9f:18:7f:44:1b:53:4b:3f:ff:72:4c:
52:ff:53:75:bd:e9:3e:14:ac:77:bd:20:bd:0f:49:64:04:bc:
6c:e8:61:ca:5a:4c:d9:9f:4e:5d:95:fb:96:7f:d9:69:fd:dc:
f3:0b:f8:80:f5:92:64:e2:df:a5:e1:8a:81:da:47:2c:a8:b8:
1d:0d:31:8c:4d:9e:81:f0:be:3d:96:b2:b8:16:4b:e2:d6:1b:
cd:52:78:18:38:0d:e1:a7:29:73:b7:01:99:eb:e8:91:7f:14:
6c:2a:eb:8a:cc:fe:dd:3a:94:5e:de:df:dc:c7:4f:a9:47:30:
f9:c7:05:54:d5:45:0e:3b:67:0c:99:6e:69:4f:c8:d8:db:c5:
65:1f:e6:ef:15:32:a7:b2:1a:7d:20:d2:d7:ed:19:7c:ea:f2:
e0:17:d5:2b:c1:cc:ef:7a:e6:ed:8c:6d:3f:b5:59:68:35:65:
4c:12:66:32:14:09:4a:06:d9:8c:27:74:10:3f:eb:09:ec:21:
e5:87:86:60:1b:6a:4b:3c:e2:f9:77:63:8b:54:e7:ff:18:75:
2e:4b:02:b3:6a:67:9b:e3:08:2c:b0:df:68:43:2f:a9:8d:3c:
e6:8b:58:57:35:ef:06:bd:07:46:67:02:3d:5d:b0:8c:c4:8e:
c1:e5:98:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039x/uVWLT+vUT1fPt35jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWEzMTMxZmU4YmVhOWM4MjU4MzEzYTBmMjRiYTJhNTYw
YjU4ZDMwHhcNMjYwMzI5MDUwMDM1WhcNMjYwMzMwMDUwMDM1WjAzMTEwLwYDVQQD
Eyg1ZWM2YjUxMTAzZDExMWQzY2EzNDkxYjUwNTNkNDQyMDNmZmRjMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0xkbD++rQlM2FyFpSSil+KVcF3Y
+jI1g1LyutORobmwPMJoLsXjdQgibWI+lFglm/iFBNdkjP4ru3iZCHdD7oH1yhL/
3VRWaKegIUWVOVkBJPvKuD/H+pFwJoQW3V/yb7KFQJ6tedcMRpXpY4MeQP1UtqWn
WHP8O4+jT7NZSy93IO4SizMRkzFDMRxbeS47q3Er4rexcgHFVx3hQPkISj68rqc3
b4nWsQELvaEoH1TuTgwXwSDFfgDh6E1eFWj3FKZ02Pwfx39mGIaqOmYM7rJwXcfg
qM2VZYJbfPhu1682R9ykVUQCuOxpqq07LPUZTpU54JtE5LuSl93K5GIfHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7GtRED0RHTyjSRtQU9RCA//cGyMB8GA1UdIwQY
MBaAFA0aMTH+i+qcglgxOg8kuipWC1jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQt
YmJmN2M3MGVmNGIzLzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQtYmJmN2M3MGVmNGIz
LzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZanzh+dp
6Z8Yf0QbU0s//3JMUv9Tdb3pPhSsd70gvQ9JZAS8bOhhylpM2Z9OXZX7ln/Zaf3c
8wv4gPWSZOLfpeGKgdpHLKi4HQ0xjE2egfC+PZayuBZL4tYbzVJ4GDgN4acpc7cB
mevokX8UbCrrisz+3TqUXt7f3MdPqUcw+ccFVNVFDjtnDJluaU/I2NvFZR/m7xUy
p7IafSDS1+0ZfOry4BfVK8HM73rm7YxtP7VZaDVlTBJmMhQJSgbZjCd0ED/rCewh
5YeGYBtqSzzi+Xdji1Tn/xh1LksCs2pnm+MILLDfaEMvqY085otYVzXvBr0HRmcC
PV2wjMSOweWYcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:39 2026 by rpki-client