Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: voN0XkN2jUCFZxxvPmvNeuov//CT79+4ZCwaKei8Y7Y=
Subject key identifier: B2:09:61:66:2F:3D:7A:82:6D:A3:6E:F7:C9:6D:5A:B2:0B:B6:7A:90
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019D9BBF744CFBC943139DA4333A744D250A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 18B5
Signing time: Fri 17 Apr 2026 14:01:48 +0000
Manifest this update: Fri 17 Apr 2026 14:01:48 +0000
Manifest next update: Sat 18 Apr 2026 14:01:48 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: zumSqZc2z7aQIXjjHCZyNO5c7eydzPRxX+U7qt8DNQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:74:4c:fb:c9:43:13:9d:a4:33:3a:74:4d:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Apr 17 14:01:48 2026 GMT
Not After : Apr 18 14:01:48 2026 GMT
Subject: CN=b20961662f3d7a826da36ef7c96d5ab20bb67a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:f6:eb:f9:c3:5f:5d:27:4e:18:ec:c7:a7:
80:f2:ef:4c:d7:17:72:fd:16:77:0c:c2:49:7b:29:
1d:1f:25:17:8f:cb:a7:84:15:15:a8:3c:ab:e9:17:
a2:c0:5a:d9:8d:21:fa:e3:f6:30:21:09:da:2a:8e:
5e:f6:5f:43:b2:19:3f:8a:a7:a5:2c:ea:51:4b:68:
e5:fc:93:a4:7a:36:fd:96:fe:48:34:3b:80:6f:03:
c2:a4:5f:e1:ef:aa:2c:5a:22:a5:ee:f6:7d:41:85:
54:39:38:a3:eb:74:8a:65:bb:5c:b4:f7:4c:ef:9b:
16:41:5d:81:79:f0:8f:0b:55:67:3a:72:9a:e5:d9:
22:8e:87:5e:02:be:01:52:db:3d:a6:f1:fd:98:87:
37:14:bb:a5:79:38:6a:f1:03:a7:54:18:46:0b:ce:
8a:b4:7f:97:54:90:c2:77:d6:68:55:96:d6:1d:34:
47:22:04:de:b3:43:d9:5c:97:96:f4:1c:fc:ba:9a:
87:1f:9c:58:1f:f8:f1:b0:ca:e6:60:94:e5:8a:96:
c6:e1:23:68:bb:fd:ce:81:a6:ee:89:8e:f8:4a:49:
92:e7:2b:e8:c7:d4:56:ba:0c:d8:5a:be:de:d0:a0:
2d:10:1f:1d:8b:f9:f1:d0:5b:79:63:48:7a:02:b2:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:61:66:2F:3D:7A:82:6D:A3:6E:F7:C9:6D:5A:B2:0B:B6:7A:90
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:17:0a:a5:3f:f8:67:11:ec:6b:92:67:53:f0:b0:3a:ca:eb:
4e:81:cd:8e:a5:56:37:2e:bb:4e:32:74:e7:07:ef:53:68:b6:
fd:b3:06:ee:d0:65:5a:3b:a4:43:60:f9:39:1f:f4:4b:b8:99:
a2:de:14:09:d5:c5:23:af:e5:b9:b5:bd:da:e3:9e:4d:c7:13:
dd:7d:58:cd:bb:69:f8:5e:da:3e:7e:2f:62:ba:90:0c:2b:af:
4c:b0:bb:8c:71:86:62:23:ad:f8:ff:ca:f3:a3:95:0a:67:e4:
9c:1a:82:37:c3:99:f8:97:5d:ef:fc:05:c0:a0:c7:39:5a:a1:
37:4f:69:3f:e7:26:8a:88:a4:56:3d:1c:1f:fe:15:0b:bd:dc:
e5:49:ef:ad:f0:f2:65:82:e2:ab:32:60:0d:d2:a6:11:f4:61:
9d:12:b6:1f:7f:29:c9:22:f3:c3:49:be:a8:9e:c3:5e:08:35:
88:6d:7e:9f:7f:83:9b:77:2b:27:e6:14:19:33:44:3d:47:2c:
e1:f5:f3:a8:08:0b:23:2a:ad:7a:f0:d7:4e:ae:63:a5:6b:e4:
33:ec:6e:3e:f2:c5:ad:c2:7e:4d:26:02:a5:69:bf:24:4e:c2:
8d:eb:60:8c:0a:17:63:10:de:f8:0b:f6:9f:96:a7:c9:ca:4f:
db:fe:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:00 2026 by rpki-client