Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: +N5sjphPlU3o1xJ3swxv+lw2EY1My0VsTLC+ZHZaxGo=
Subject key identifier: EA:D9:71:C1:F4:CA:A9:88:F0:3F:92:A2:67:84:E8:57:AB:32:A6:84
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019CAD228C0383B66047E3529925D8358F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:00:48 +0000
Manifest this update: Mon 02 Mar 2026 06:00:48 +0000
Manifest next update: Tue 03 Mar 2026 06:00:48 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: 3F4l0793o9q7XmyrBByxSpod2YaPZagJfYbfVuYwVIM=)
2: ufSzeyDtwqyX2VcVaLd_bm70odg.roa (hash: mOh78oLKMhO8N2vOwgRV00Yf6t8BsMyPRhqMpzfai3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:8c:03:83:b6:60:47:e3:52:99:25:d8:35:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Mar 2 06:00:48 2026 GMT
Not After : Mar 3 06:00:48 2026 GMT
Subject: CN=ead971c1f4caa988f03f92a26784e857ab32a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:e0:2f:d2:f7:2d:37:99:63:2d:9c:56:d0:
34:02:81:24:69:a7:72:9c:ef:3c:fb:89:c9:d2:d8:
e8:36:13:0a:f4:39:7e:61:19:53:7b:06:82:81:13:
f7:82:f5:15:c4:e8:4d:3a:1a:b0:15:2c:62:3a:0f:
df:b2:ca:26:8f:a5:ad:dc:2f:f2:7c:51:23:f4:a1:
da:42:2c:15:30:cc:22:12:48:66:0c:fa:c1:02:39:
16:49:bd:02:fd:17:5b:bb:61:09:ea:bd:32:5d:b4:
cc:64:8e:5b:04:4b:d7:f3:4e:93:71:c0:da:3a:28:
e3:49:d5:00:3c:dd:0f:58:c4:a5:a8:2d:10:c8:58:
c0:be:8c:59:32:49:aa:5d:2f:89:73:4b:b4:96:20:
a0:69:b8:33:2c:0a:19:ba:ed:e4:37:5b:3a:61:2b:
b3:56:9e:3c:53:5e:4f:fe:4d:51:37:e8:91:06:45:
fa:9a:50:8b:03:b5:1e:5b:76:6f:15:8e:df:fb:86:
23:68:6d:60:b1:7b:e1:c3:78:d9:d9:79:1d:d8:c5:
e7:96:36:f8:bf:14:5b:00:cd:50:9e:15:54:d5:7e:
0e:b9:3c:f4:8f:8e:e3:3e:90:75:0d:70:98:ac:bf:
f7:93:a4:3d:72:0c:37:72:d1:b6:17:65:f6:28:2b:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:71:C1:F4:CA:A9:88:F0:3F:92:A2:67:84:E8:57:AB:32:A6:84
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:10:64:c8:67:90:4a:03:3a:a7:06:17:de:01:36:b2:0d:6e:
b0:bf:40:5e:48:29:cd:e6:42:07:6a:0a:e3:cd:1d:1b:92:23:
95:35:e0:22:33:b9:d6:43:dd:08:d8:e0:1b:95:81:81:b5:18:
73:3a:b4:c6:22:fd:c8:37:4f:9b:e9:8d:33:02:90:e5:45:3b:
93:59:ca:4b:f8:36:22:95:2d:57:5b:89:61:fa:5d:d2:e4:47:
71:86:00:18:d6:04:28:68:ca:69:eb:58:4b:d3:f7:cd:c2:2a:
f0:4e:f5:d2:97:7e:2d:b8:d1:b7:3c:ae:d3:83:83:64:cf:e1:
eb:ec:88:03:10:4d:3c:48:dc:8c:4e:85:c7:c6:d0:55:d5:8d:
1f:db:5e:86:c5:7e:4e:ea:a0:84:85:15:e8:a6:ae:3e:3c:43:
f1:1a:65:f0:a9:bb:5b:f8:97:46:50:12:e9:3a:2f:4f:4d:68:
52:6e:fd:8b:05:1f:2d:86:34:6e:f9:fe:79:84:3f:e4:22:b2:
07:b3:80:dc:75:20:b1:b5:c0:47:6f:64:71:52:60:a7:e8:ce:
a6:8c:60:62:87:5a:7b:97:b6:4f:4a:01:04:3a:3c:b9:8f:c9:
09:f0:e9:b0:cb:98:3f:d3:43:7f:e1:b1:8c:f7:5d:48:b0:0c:
40:7b:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:46 2026 by rpki-client