Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: FUpKnSU0saa0z1Q6KjbROVfDPFOZQIsPsSqZcdyl+dU=
Subject key identifier: EA:6B:1F:5B:CF:43:AE:77:D1:51:14:FE:60:37:05:BA:55:12:69:48
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 01A0C58DF957264C5E0D9D2A1CB47FE971D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 12CE
Signing time: Mon 21 Sep 2026 20:00:10 +0000
Manifest this update: Mon 21 Sep 2026 20:00:10 +0000
Manifest next update: Tue 22 Sep 2026 20:00:10 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: LJpEoxm0rhMEwaul9RsciZTSL6lEV1I2/6IvYlXFHWY=)
2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8d:f9:57:26:4c:5e:0d:9d:2a:1c:b4:7f:e9:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Sep 21 20:00:10 2026 GMT
Not After : Sep 22 20:00:10 2026 GMT
Subject: CN=ea6b1f5bcf43ae77d15114fe603705ba55126948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:5a:37:15:f6:98:05:0f:d4:ce:b9:e1:54:
fe:95:d6:4e:00:d2:87:07:ee:a6:39:1b:56:4d:bf:
c2:db:ad:2f:0b:fb:d6:a8:80:f5:78:fb:a9:ce:8f:
7c:d4:04:8c:95:50:e2:95:66:32:a3:0f:28:0c:93:
8d:22:8a:8f:7a:87:d8:d5:fd:2a:de:66:a7:e4:48:
62:37:0a:43:0c:02:f1:21:11:fc:cf:bd:ee:67:57:
5d:3c:0f:90:45:6f:01:51:5f:31:a2:2e:f3:01:da:
1c:69:76:13:19:26:7d:79:9d:1c:d1:15:77:e5:42:
7e:3b:f1:37:9a:55:0d:94:ba:f2:e0:fd:bb:f1:31:
8a:b3:c0:4d:d9:a5:66:24:3d:36:4c:33:6b:17:bf:
1a:e3:21:77:97:07:95:73:ed:e5:87:0e:20:37:17:
b1:38:b9:cb:4b:3a:99:36:77:18:9c:e4:43:37:fe:
9b:6d:f8:74:8c:a6:9f:87:33:00:df:78:94:ec:53:
62:9b:07:2b:40:c3:ec:27:1c:ac:0b:d6:e8:33:1d:
c2:45:22:0a:8c:1a:cf:45:17:6d:f2:5a:ac:ee:fd:
ab:e4:46:a5:86:eb:44:e8:69:e1:bc:f8:db:02:e3:
72:55:ca:f1:0f:7a:65:0d:60:2f:ee:d0:0f:f5:32:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:1F:5B:CF:43:AE:77:D1:51:14:FE:60:37:05:BA:55:12:69:48
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:e8:69:8e:aa:61:07:3f:8f:4b:4a:56:8f:ca:c1:6c:4f:
54:21:98:84:92:47:5a:89:33:ba:24:85:29:65:67:99:2d:54:
84:00:22:53:e6:28:e9:39:1b:90:1f:70:6d:94:62:55:60:03:
24:2c:22:f5:c1:03:b7:f8:47:ec:eb:61:76:d0:bb:bf:a1:b4:
fb:ad:f3:ca:d6:fa:54:76:f3:94:d8:a5:db:40:b2:1a:d1:f6:
79:5f:b8:81:d6:50:e3:f5:eb:87:71:63:00:ba:d0:cb:74:fa:
98:cb:36:37:7c:52:7c:cd:18:15:78:13:0b:c2:a5:03:ad:2c:
14:af:a4:0d:de:d4:34:6d:20:c1:f8:66:35:b1:d7:45:04:0b:
f7:c6:28:21:37:a0:b7:eb:3f:5d:40:f8:a1:8d:20:c6:96:01:
b1:25:fa:34:86:15:b3:23:3b:9d:ff:6a:fd:96:57:8e:2d:3d:
a2:78:67:43:d2:dd:0d:f3:24:52:fe:4e:fc:0c:1b:11:d8:0a:
f9:b0:28:3a:7d:6b:67:04:ec:74:db:d1:48:fe:2c:e6:5e:be:
dd:82:50:56:8c:e0:b3:33:14:ed:39:21:6c:8b:04:a8:46:2d:
01:87:4b:c1:c7:be:e4:21:96:48:4c:33:9f:0e:11:f4:93:45:
30:0e:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:20:33 2026 by rpki-client