Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: a5Vrd4jP8tzn3fKyMwdUUlIjkJZn2MAV/CJt8gtJ79k=
Subject key identifier: 4C:81:E0:8D:89:25:87:86:4B:6E:C9:E8:A1:2A:79:79:F0:7B:C0:B1
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 019CAAFD0A555BB35DDDA438285FAD62F534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 10AE
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: KBCfXYJwFkquSef2yrrGl61X3jAAIIjp4KHjjlnVZjQ=)
2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0a:55:5b:b3:5d:dd:a4:38:28:5f:ad:62:f5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=4c81e08d892587864b6ec9e8a12a7979f07bc0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:33:1d:27:c4:81:95:7e:0a:3f:10:d0:70:
bd:10:2d:9a:62:b0:ba:86:56:f5:c7:7c:a6:de:ba:
30:2c:a5:33:80:fd:77:91:65:91:83:c3:aa:55:b7:
47:7f:ea:4f:6b:62:30:6f:7b:0b:fe:ec:a7:06:e9:
56:62:16:26:cf:0a:c1:56:63:ab:3e:9c:ab:06:a5:
8f:ea:c3:92:23:9a:65:b2:b7:4d:9a:b5:80:b5:28:
b9:4d:78:25:1a:ef:10:db:80:44:2a:0a:00:3d:32:
00:68:34:78:a3:1d:4e:5e:e8:d9:5a:53:6f:46:7f:
25:b4:5b:2d:c1:c0:6e:b8:e5:64:e5:7d:ec:27:c3:
3d:18:5e:08:c8:df:b7:74:59:51:04:eb:3b:70:a0:
54:33:63:aa:6c:57:a2:87:97:46:44:13:4d:77:a3:
9b:49:12:50:54:28:5d:ba:85:9a:81:bc:4a:26:19:
e1:eb:c4:df:70:e5:4f:b9:b1:97:6b:e7:87:af:bd:
3a:5c:b1:f9:83:6d:b7:a0:e1:9f:02:d5:a8:ab:1b:
1d:e6:73:1f:ef:de:eb:7a:75:a1:32:96:4d:e4:cc:
0e:62:76:85:75:b0:7f:0c:fd:25:e8:a8:b1:45:96:
4e:ce:50:b6:05:88:ec:8e:ad:d1:44:38:f6:c7:22:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:E0:8D:89:25:87:86:4B:6E:C9:E8:A1:2A:79:79:F0:7B:C0:B1
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a7:f5:7d:58:46:f6:24:de:cc:4e:a8:21:03:2b:56:75:a3:
83:06:8e:09:4b:ee:2f:fe:d1:35:4c:f9:40:c4:df:bf:45:cc:
77:ea:48:ae:31:8a:67:0e:fe:0f:bd:aa:39:1e:d3:16:5f:6d:
ad:08:0c:81:9d:f1:83:c1:cb:64:2c:42:f1:c6:ff:0e:c7:33:
be:ec:23:94:c9:17:84:81:31:1f:32:bd:62:58:2e:e1:fb:0f:
1a:d1:c9:ef:8d:4c:b1:ce:3e:82:5a:65:63:59:a7:a2:94:ad:
75:9d:2b:a9:95:c4:47:61:8f:1d:a6:da:27:a3:b4:bd:f8:03:
8e:9a:bc:a5:91:b5:ee:9c:1e:23:03:da:c8:7f:98:d4:8a:4e:
7b:fe:d0:e3:dc:4d:e6:31:19:39:32:af:b9:2d:6b:75:f6:14:
6c:f8:3a:74:d7:e9:a3:1d:44:4b:2f:44:c7:74:6d:1d:e9:75:
96:1f:c6:3a:f3:a7:2c:dd:ca:bd:ea:4a:d7:83:d1:72:2a:60:
5c:de:bf:db:e4:69:4f:23:8b:17:d9:e5:55:e0:30:e3:41:3a:
b1:a8:b4:5f:8c:2d:7d:b9:ea:45:1a:97:89:06:f3:df:86:ae:
c6:0d:d3:9f:84:ab:b2:f3:f9:ef:65:63:de:ef:32:79:1d:9a:
b7:0e:8a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:48 2026 by rpki-client