Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: ohbx5NwnUk5gpWrNSpN16eZ58HS6GER/MdpckMSY0gE=
Subject key identifier: 0D:78:57:D2:AE:8B:0C:A6:20:81:60:7A:9E:0E:CD:81:DB:1A:18:AD
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 019CACEBF1C555EF3E6ED9F9634D69F137AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0C86
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: qLlMKjn3ZWeNoOX7GAdX/XbXOCHZ3awbh5Fo6kz9RlA=)
2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f1:c5:55:ef:3e:6e:d9:f9:63:4d:69:f1:37:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=0d7857d2ae8b0ca62081607a9e0ecd81db1a18ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:1c:30:c5:52:26:52:d3:c1:db:81:dc:c2:
4c:28:00:09:2b:49:e8:12:6a:75:f6:ff:2d:33:f9:
a9:9e:82:9f:5d:b0:2e:e2:f3:36:32:2a:7b:a3:1e:
56:29:c8:ac:43:62:e2:a2:12:33:ed:85:c0:3a:08:
81:49:6a:88:de:b4:da:62:5d:b7:ec:6f:cc:4c:e4:
ac:86:ff:d5:47:a7:cc:e2:41:69:a8:ae:c9:37:82:
0f:19:ba:ab:54:e8:f2:c9:dc:0a:97:64:e6:f2:0a:
3c:1c:42:e2:ee:68:9f:4a:2a:62:db:b5:7a:17:61:
64:b6:df:d8:79:3a:26:4f:79:48:c9:a9:7e:cd:08:
c3:7a:18:34:d7:fc:e5:04:10:66:ef:aa:5a:f6:f1:
d0:d8:b5:4d:8f:72:f5:fa:4b:5e:7d:d3:7c:8f:91:
85:b9:ad:cc:6d:39:b8:e6:44:28:4d:1d:8c:8b:d5:
b0:52:39:86:b9:4a:ac:a7:b4:25:9c:4d:38:8a:92:
c0:1a:b9:ef:0f:c1:b3:63:17:8f:f8:7e:09:fd:04:
d2:00:ab:f1:c1:da:d5:54:ae:e3:20:1d:fc:f9:39:
0d:6a:13:24:39:b7:98:55:81:d6:89:03:7a:d9:02:
e9:ab:bb:9d:c0:26:cc:cf:68:46:ab:86:c0:70:08:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:57:D2:AE:8B:0C:A6:20:81:60:7A:9E:0E:CD:81:DB:1A:18:AD
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7b:76:01:51:31:4a:bf:56:8c:f7:6e:e5:57:3d:1a:41:30:
6f:09:d1:81:f2:fe:f2:0e:1f:00:cf:b4:cf:cf:01:d1:a4:7c:
2d:cc:90:29:1f:4e:6b:ff:11:1d:d0:2d:4e:76:13:bc:d0:b8:
8b:19:51:8a:7d:78:b9:9b:1d:25:da:c1:f6:fa:fd:c1:84:3a:
ad:32:9e:8f:0f:25:96:15:81:52:f0:90:cb:07:74:08:41:a8:
6b:28:5a:2d:30:8a:08:b3:28:e6:c6:55:07:6e:33:c8:46:27:
b0:3d:e9:44:64:d9:79:31:aa:27:21:96:74:43:53:8e:25:63:
d6:a7:d2:d4:44:bc:a7:1b:fb:03:74:45:49:50:06:cd:11:c2:
49:03:b0:34:b3:68:fc:2c:86:94:22:b8:06:e5:aa:96:71:75:
8a:27:b6:f2:f4:51:0d:cb:36:30:e7:ce:99:35:83:06:61:f6:
e0:c1:8d:7b:99:f4:67:5a:17:a0:62:98:8b:43:25:84:58:64:
9f:21:5b:79:74:3a:2e:73:15:44:34:aa:dc:b5:89:09:0a:83:
65:dc:b0:24:9d:bc:ea:10:12:3d:c9:f3:27:a7:07:b4:73:4d:
ed:cc:e0:64:22:74:d0:8b:20:98:e3:9b:a1:56:ad:97:7d:cb:
03:90:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:32 2026 by rpki-client