Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: 3AOXqhcam4XodaBqhsuJDUShT1oNInBDotwwmy0JD+Q=
Subject key identifier: 30:12:9D:27:AE:5E:5B:67:E0:90:88:06:CB:8A:91:1B:17:ED:DD:39
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019D98BD349142EAB7311C52069D3C84B7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:00:29 +0000
Manifest this update: Fri 17 Apr 2026 00:00:29 +0000
Manifest next update: Sat 18 Apr 2026 00:00:29 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: Xu5av5LxwUJJGEJSF75IN+sw1ZuprZMdy0MvcSP4+gI=)
2: ufSzeyDtwqyX2VcVaLd_bm70odg.roa (hash: mOh78oLKMhO8N2vOwgRV00Yf6t8BsMyPRhqMpzfai3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:34:91:42:ea:b7:31:1c:52:06:9d:3c:84:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Apr 17 00:00:29 2026 GMT
Not After : Apr 18 00:00:29 2026 GMT
Subject: CN=30129d27ae5e5b67e0908806cb8a911b17eddd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:27:49:39:59:88:b9:15:e9:43:33:10:53:
f6:48:6b:a2:53:b1:73:12:3e:f8:a8:2a:96:a0:b0:
6d:76:f0:c6:83:96:37:fa:ea:16:b1:01:6a:6a:7b:
f0:67:e9:a9:57:a4:4a:15:2a:d1:6a:68:39:6a:02:
23:a2:0a:89:a4:15:b5:f7:0a:42:ae:1f:cf:f0:a8:
5e:e7:83:e3:7b:8c:b7:28:a4:c0:c6:22:50:ac:ee:
fe:58:dc:99:4a:39:f2:f6:d1:cd:82:03:d0:5d:7c:
c0:f7:f7:a2:bb:09:8d:4d:50:5b:70:13:bf:4b:8c:
f4:c0:e8:06:ce:4b:5c:4b:9e:37:0c:67:23:ef:3e:
c0:80:05:5c:85:7f:db:1b:f8:71:af:80:78:5c:f5:
78:c8:d7:b9:0b:aa:22:d2:68:3a:c1:fc:c0:5f:15:
5a:29:68:21:b5:77:da:df:a5:fe:eb:9e:90:8d:d5:
41:63:d9:ae:6a:e7:03:d1:5b:37:f0:05:93:74:b8:
02:9a:61:23:eb:37:d8:8f:2f:0e:8c:89:8a:11:d4:
b1:88:c4:60:c7:ce:70:53:e6:2b:7f:d6:2e:8c:94:
c8:38:37:1a:de:98:38:cc:1a:0a:99:ac:34:18:a8:
f5:ce:73:a8:3c:e7:ea:f7:23:eb:97:70:ef:bf:da:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:9D:27:AE:5E:5B:67:E0:90:88:06:CB:8A:91:1B:17:ED:DD:39
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:8e:14:8e:65:a5:1f:1b:11:a0:01:1d:5e:be:35:bf:0c:
cc:f3:84:f6:7c:c2:24:fe:a6:90:ae:e3:a3:5a:aa:a7:fe:69:
51:10:fd:0f:93:ba:93:62:8b:d0:24:fb:85:68:82:ea:81:25:
72:df:0c:fb:31:e2:a6:3b:86:9d:63:98:89:4f:8c:af:d7:1b:
0c:ee:86:a7:ae:7e:5d:6c:cf:ee:5b:02:f8:8c:fd:64:ef:f9:
a3:88:9f:80:88:13:71:13:02:26:e9:42:2a:ed:fa:ed:bf:80:
cb:68:9f:59:53:a0:1d:98:ab:59:8d:eb:18:bc:99:ce:42:5b:
16:61:f7:56:ae:b8:ab:df:79:d8:a0:e4:e8:fe:97:7a:6f:64:
b0:2f:80:66:39:87:b2:e0:30:23:0f:00:6b:bc:98:45:81:87:
9d:77:30:24:02:58:b9:48:fe:b5:1a:65:26:04:f8:b5:11:27:
9d:22:63:85:cc:d2:e4:e3:7a:1f:a1:61:7c:e2:11:47:1f:9f:
40:2d:20:36:c5:48:11:4a:7b:15:c0:39:53:e2:2d:8e:65:e0:
91:cd:3f:7f:b9:b9:93:6b:ca:ce:74:15:ae:3c:9c:c3:16:ac:
3a:c1:24:40:af:d8:f1:ae:f5:a7:1f:1d:80:9f:e6:a5:2a:7d:
a0:5f:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:32 2026 by rpki-client