Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: MotPSpkSPsvzPWzWtXmTc3rswIZju9njhilyU3zEHVs=
Subject key identifier: CF:47:BD:7B:BB:5B:E3:99:EA:AA:27:7D:C6:1C:34:3A:56:5C:8F:6D
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019CAE353AB20C96B167FD55699D58BF4967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 183A
Signing time: Mon 02 Mar 2026 11:00:49 +0000
Manifest this update: Mon 02 Mar 2026 11:00:49 +0000
Manifest next update: Tue 03 Mar 2026 11:00:49 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: yPUXxeu++mL3EatXBR/GNWRzL1Mwg0JTJ5wOlf3xLu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:3a:b2:0c:96:b1:67:fd:55:69:9d:58:bf:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Mar 2 11:00:49 2026 GMT
Not After : Mar 3 11:00:49 2026 GMT
Subject: CN=cf47bd7bbb5be399eaaa277dc61c343a565c8f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:a1:aa:21:f4:86:e6:c0:8e:7e:56:67:8d:
aa:4c:a0:81:2c:f2:08:63:7e:08:b1:81:fa:c5:36:
0a:94:4a:b8:74:13:14:fd:d0:9f:ae:ea:e9:94:b9:
40:e5:d1:34:bd:4d:da:1f:db:68:9c:1e:68:19:1b:
3c:0b:b8:53:be:3a:a5:88:8e:5e:ce:be:db:47:f8:
1a:94:87:92:22:f3:ca:ff:81:7c:b2:52:1a:36:6d:
65:f1:b2:ea:4c:6b:4f:65:2f:a9:de:9d:e6:1a:93:
fe:b9:fd:1e:01:fa:06:39:40:51:8a:1e:0e:ee:7e:
25:10:7c:9a:b3:dc:e8:12:01:8c:2e:40:91:32:d7:
05:81:39:48:c1:9d:79:90:22:e0:e2:13:bb:65:90:
65:92:c1:d5:29:c2:a8:f3:b1:bf:f9:b4:f2:b7:85:
aa:6c:10:b7:29:47:e6:ae:88:2d:67:47:40:16:3b:
d3:dd:31:dc:3b:46:38:e4:75:78:9b:54:d0:ad:ce:
d5:57:44:d2:c0:45:5d:70:72:b6:27:75:4b:cc:c0:
7d:36:5a:44:45:8c:7d:a4:12:f5:01:68:cd:0b:59:
e2:8e:f9:85:e6:1e:ba:55:b5:ae:8f:01:45:e8:b5:
a1:41:42:cb:cf:e1:57:5d:0f:78:40:67:5a:a3:8b:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:47:BD:7B:BB:5B:E3:99:EA:AA:27:7D:C6:1C:34:3A:56:5C:8F:6D
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:f2:46:fd:4a:04:58:93:a0:35:31:71:96:3e:4e:cd:93:
48:c2:eb:b3:e9:aa:94:77:6b:85:b9:8d:58:99:de:c1:e3:32:
aa:57:df:d1:0b:56:98:a9:86:11:dc:ee:25:24:f8:d1:d3:51:
95:ad:67:65:82:02:53:16:3a:e6:c6:55:23:66:75:16:1f:50:
f0:60:da:90:f3:7b:51:f9:c8:97:d3:c7:36:53:8d:66:aa:94:
39:c8:7e:b6:aa:93:19:65:79:2d:2d:bf:05:7d:9e:f3:87:30:
5d:2a:93:e5:c1:54:42:62:0a:2b:45:e4:fa:b3:e1:2b:4a:1f:
8d:81:fd:c8:85:95:e5:7a:81:0d:32:3e:2c:83:32:dc:23:96:
df:b4:c4:6e:76:10:b2:9a:7a:fb:1d:c9:58:60:c1:8c:cb:1c:
92:87:5f:30:a2:f1:c2:95:cf:97:1f:90:21:82:45:c7:54:51:
4b:6f:a4:2f:3c:83:a7:9b:e4:46:d7:35:71:fb:89:08:c5:2c:
64:ee:49:4d:b0:61:a5:4e:ba:20:2c:c8:7c:b5:84:3c:16:c0:
af:f1:29:ea:c4:a7:6d:3d:01:f4:c0:e7:81:99:42:22:b4:ab:
e9:68:83:16:e4:67:47:ea:c0:fa:af:36:f5:b0:5a:62:0d:40:
1c:f8:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:49 2026 by rpki-client