Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: gRpYSEOCDHt/peuhngjUFBpuUz8GC+4Aaw5vraHV6hY=
Subject key identifier: 99:59:A5:8D:3D:C7:1A:28:65:1C:46:DF:3B:AE:9C:FC:01:7A:B6:88
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 01A0C6D7CFF9FB22F9B352AD248E6C36F6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 1A59
Signing time: Tue 22 Sep 2026 02:00:27 +0000
Manifest this update: Tue 22 Sep 2026 02:00:27 +0000
Manifest next update: Wed 23 Sep 2026 02:00:27 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: iSRFgQzHbZbziOpO0hf+5E/Crt+Coo2WX2Kdkp6MJYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:cf:f9:fb:22:f9:b3:52:ad:24:8e:6c:36:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Sep 22 02:00:27 2026 GMT
Not After : Sep 23 02:00:27 2026 GMT
Subject: CN=9959a58d3dc71a28651c46df3bae9cfc017ab688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:86:93:59:eb:97:eb:2c:07:36:8a:29:05:
42:61:4c:8b:7b:e8:45:39:63:85:73:d3:f1:db:bb:
82:d1:cf:b0:70:64:27:41:4f:a9:cf:95:ef:4f:12:
d5:fb:19:ed:cc:7e:6b:86:73:a5:93:7c:8b:63:0e:
86:bb:ff:8c:b8:43:15:10:f4:ae:f2:a3:3d:f9:f7:
87:8d:8e:d3:ac:fe:23:9a:71:a4:14:73:e6:2c:85:
40:ea:83:cc:e9:af:1f:df:18:e4:cb:12:b9:c6:4f:
06:ee:de:a3:b4:65:b6:d7:ae:fe:54:88:91:65:94:
c2:f5:8e:64:b5:ef:7c:1d:ea:a9:6b:45:73:7f:6a:
27:fe:96:57:ba:1c:da:94:f8:60:e2:cb:b6:a3:4e:
11:64:fb:38:ab:fc:13:e6:f6:c6:63:66:e2:d0:1e:
e4:47:49:c5:6c:b8:27:39:72:21:e0:89:90:fb:5a:
4d:1d:bf:0c:20:3b:68:91:eb:92:c3:6b:1f:3d:12:
2b:25:58:68:54:64:54:be:8b:1d:3f:44:8c:9c:79:
b8:97:3d:3f:12:87:56:4e:59:50:55:bc:fd:5e:b8:
d2:79:98:58:c5:76:10:13:21:15:90:eb:8f:55:28:
ba:50:51:ea:f1:83:fb:81:4c:ed:10:45:bd:9c:11:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:A5:8D:3D:C7:1A:28:65:1C:46:DF:3B:AE:9C:FC:01:7A:B6:88
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c3:33:3d:94:d7:d3:fa:b9:0b:e2:de:96:53:97:89:5c:0b:
07:39:9d:df:59:06:4d:07:04:db:91:24:a9:7c:d0:7c:90:ed:
9b:b4:ab:2d:52:f6:91:d9:cd:82:6e:1a:d4:ea:bf:85:3d:a9:
78:4a:b5:bb:53:0c:d6:94:81:34:90:59:6f:df:4f:3c:9d:9e:
82:c9:9c:21:fb:2c:12:cd:20:57:ef:34:97:5b:66:c9:a7:1a:
2d:72:ba:42:30:26:d9:ec:6e:30:a4:ec:1f:66:25:b1:f8:dd:
7b:7e:af:05:02:0f:21:80:a1:02:86:9d:fd:6f:8e:2b:82:64:
d3:fc:5a:a1:98:83:af:61:27:2d:71:77:9b:cd:50:18:cb:e4:
d3:e6:47:c1:da:12:26:ac:a5:34:6a:d3:7f:d4:c3:88:a6:2e:
15:1d:82:fc:61:76:00:3c:02:08:8a:fe:2e:5e:74:83:2e:9a:
6d:9c:87:c0:8e:32:22:ea:32:3a:a7:e8:3f:6e:97:1c:57:40:
83:67:f0:69:d4:58:a3:e7:11:0c:67:91:34:91:eb:a9:d9:21:
6f:da:ba:d2:18:47:5d:5b:b6:a9:6a:b0:27:f7:00:ee:b1:d9:
66:ce:58:4b:aa:f1:35:f7:f1:0c:e0:5f:91:81:c8:8d:47:15:
68:84:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:43:41 2026 by rpki-client