Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: +A1oLK5CRCHJsAWzjj/1L/ygHs/jNMzJBseM0+d0L3A=
Subject key identifier: 2D:11:2A:D6:A4:A9:52:93:13:0E:DD:A6:A6:FC:52:EC:67:72:A5:75
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 01A1C668650717D1335E53F78372339E3F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 1353
Signing time: Tue 10 Nov 2026 17:01:32 +0000
Manifest this update: Tue 10 Nov 2026 17:01:32 +0000
Manifest next update: Wed 11 Nov 2026 17:01:32 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: dAHvqt8Ih+tAXqaJWpAa4Ot3k8wjPAGaoxIP5GQKNhA=)
2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:68:65:07:17:d1:33:5e:53:f7:83:72:33:9e:3f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Nov 10 17:01:32 2026 GMT
Not After : Nov 11 17:01:32 2026 GMT
Subject: CN=2d112ad6a4a95293130edda6a6fc52ec6772a575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:59:2b:f9:63:39:2a:e2:74:0c:da:72:e2:
ee:36:82:7f:fe:7b:9f:bf:c1:b8:c3:ae:d7:9d:fd:
07:6d:ce:4f:e0:0f:ea:03:1c:65:e2:16:78:8d:f8:
65:d1:55:c3:8f:96:48:be:62:e0:eb:f8:c1:6d:48:
d2:68:a7:ef:4c:51:0e:dd:95:20:b0:a0:cf:0d:a4:
7c:15:80:e2:1d:f7:ff:e6:14:5d:b1:a0:9e:93:cd:
df:d1:e6:ff:4c:93:7d:4d:1b:27:ac:bf:84:e3:b3:
c7:e7:56:f6:27:0c:3c:cb:9e:ac:13:6d:52:35:59:
a4:25:82:78:f1:13:ef:9d:53:5c:9d:d3:0d:9c:48:
46:fb:36:62:9c:66:26:7a:0e:5e:8d:b2:0b:49:de:
cc:9e:11:fc:aa:24:7d:0b:92:33:1c:da:2e:4e:c0:
d9:01:6e:f0:bb:6a:c4:2d:43:d7:08:09:fd:d6:ef:
9c:7c:1a:fd:af:a7:bd:be:c2:7b:12:3c:cb:bd:16:
2c:5c:9d:93:a2:0b:69:cc:f6:d5:74:ac:50:41:30:
54:d6:66:ae:9a:22:6e:21:2d:98:ca:a2:31:78:71:
3e:39:72:32:35:a8:d9:c3:e2:a0:4d:51:84:a3:46:
5b:8f:af:47:e4:ea:2d:0b:95:fe:56:85:36:4c:f5:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:2A:D6:A4:A9:52:93:13:0E:DD:A6:A6:FC:52:EC:67:72:A5:75
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0b:a9:c1:16:76:eb:fc:d3:e4:06:92:48:55:e0:bf:ff:4d:
27:bf:7e:4d:b7:9f:b9:3d:c6:6b:f0:a3:c5:cf:a1:23:12:4c:
cb:8b:75:17:01:ff:33:fd:b7:4e:f7:f1:d8:fd:4a:e9:63:4c:
1d:76:b8:8d:75:80:bb:12:27:2b:f1:e2:b9:d9:e2:2d:6a:b7:
78:e9:1e:e3:af:cd:b3:31:31:6b:60:4d:a3:b5:ed:71:9e:e3:
43:79:f6:0c:4c:73:cb:47:f6:d9:61:5e:0b:e3:01:72:24:00:
f6:77:1e:a7:63:5e:0a:39:60:8c:6a:59:56:c2:c3:fa:aa:ec:
a3:83:7a:ad:c0:3b:a1:18:54:25:30:cb:72:c9:2f:0a:15:a7:
1c:f7:20:f6:37:56:a5:72:ee:5f:d6:b3:61:69:ee:b0:68:80:
6c:d3:7b:6d:08:e9:e0:75:54:8a:25:0f:04:40:a1:de:2c:71:
9a:ac:be:b7:99:87:03:4e:25:71:70:4a:97:df:85:fa:fb:3a:
5b:a9:ce:33:4a:eb:9b:6c:7f:9b:b2:58:3b:f2:7a:cf:87:4f:
49:35:cd:37:05:da:39:1a:30:51:87:7e:bc:b2:85:63:a9:83:
7f:f0:a1:b8:a1:8a:f0:7d:e9:a9:7e:7d:a8:7c:5a:29:96:11:
cd:72:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 23:05:10 2026 by rpki-client