Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: sGAekXNzloHFvfLYPOwbHYC+owdE7Ly+rR0BNDLZl10=
Subject key identifier: 4A:4F:DA:71:7D:1D:CF:95:AE:0A:24:59:22:FA:46:16:4F:68:5D:8A
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019EC1498B6B83A736D1EAE92D27B2A4481C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 194D
Signing time: Sat 13 Jun 2026 14:01:22 +0000
Manifest this update: Sat 13 Jun 2026 14:01:22 +0000
Manifest next update: Sun 14 Jun 2026 14:01:22 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: eipHcsQ/Oyp+76NHkSz19jFOoN4RKzX878ghlurvoBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:8b:6b:83:a7:36:d1:ea:e9:2d:27:b2:a4:48:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Jun 13 14:01:22 2026 GMT
Not After : Jun 14 14:01:22 2026 GMT
Subject: CN=4a4fda717d1dcf95ae0a245922fa46164f685d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:13:c1:36:6c:31:c0:b3:43:7f:0c:3f:05:3f:
16:2f:6c:e6:34:60:e8:54:d6:94:eb:66:db:67:85:
52:74:a1:24:b7:10:0e:dc:2f:d7:1a:4f:3d:bf:ea:
60:10:6a:49:ab:85:aa:2d:c4:b6:ed:33:84:a6:46:
3f:e3:08:b8:11:c9:c4:df:f1:5b:92:7e:52:ef:bd:
19:c4:ee:3f:0c:5b:39:c2:4c:a4:43:78:0b:b0:ff:
3c:ca:0a:c6:4a:0f:a3:76:14:48:89:a9:6d:53:c8:
56:e7:af:24:0f:a3:39:d3:88:27:d2:e5:e8:3b:98:
22:99:e9:2d:2e:5b:89:da:fc:ab:33:11:98:d1:e1:
78:c0:9c:79:1c:e1:7d:d9:cb:cb:ce:b9:48:f1:99:
2e:ef:0e:ba:ef:cb:d9:14:7c:f8:e9:ae:ce:02:c5:
6f:d5:a7:f0:f3:ab:64:a8:38:ed:ca:2c:40:fa:81:
af:70:7e:6f:d4:b0:7b:75:31:00:80:25:ba:5b:0b:
e4:4e:f5:ca:b2:b4:eb:a7:f4:28:a8:6f:15:15:98:
df:27:9a:e2:9b:8e:dc:6f:e1:4a:22:9b:f7:5d:c2:
c0:b8:5f:04:e6:02:78:f0:ae:a8:29:8a:ad:7c:0b:
98:38:95:70:7a:28:a2:e7:f9:54:0f:db:3a:b8:ba:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:DA:71:7D:1D:CF:95:AE:0A:24:59:22:FA:46:16:4F:68:5D:8A
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:08:7b:53:5b:6b:2d:1c:4b:e4:71:24:e6:cf:07:ca:e3:b0:
df:f8:1c:90:62:60:d0:4c:d2:ca:e4:68:71:fc:05:dc:21:64:
c0:6b:cc:8f:ea:fb:29:49:c7:bb:14:66:cc:66:b1:bd:0f:aa:
99:cf:c1:3f:10:8e:98:0c:5e:43:1e:de:b7:e7:a4:a2:f0:9f:
2a:e2:79:76:bf:17:a8:cd:97:52:27:b8:c4:e0:14:16:10:d3:
ce:b6:82:49:3c:0f:9f:6c:69:00:45:59:f8:73:6d:8c:e5:96:
ba:27:8e:d7:23:0d:7f:1a:a4:dd:71:ba:f9:05:18:37:76:5f:
58:c6:a0:79:be:40:fa:f2:d1:9d:57:6c:ce:34:37:ad:e6:21:
bf:14:40:55:3e:29:c0:66:e9:5e:da:1c:3b:36:90:ff:ac:05:
82:70:dc:87:55:13:79:32:77:ed:04:4a:5f:40:88:c7:1a:7b:
af:89:de:cb:ba:1b:48:c9:d5:33:1a:6c:f6:e8:d1:1d:57:ac:
cc:0e:4d:dc:94:95:17:9a:21:a1:b0:d8:83:72:2e:34:92:39:
ee:d4:0c:83:ac:bb:10:09:8c:3c:9e:ce:dd:de:ca:f2:d6:53:
c2:b7:de:71:8e:dd:79:93:e9:c7:5a:5c:b0:e7:8b:7a:f2:56:
18:2c:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:49:00 2026 by rpki-client