Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: 5gbs5dfWwI16bTjLIIkuGwU1mzwjz46q2/qLj4Q/LyE=
Subject key identifier: 1A:8C:47:FB:E4:F9:86:0D:86:3F:96:58:B9:94:E1:BD:E6:72:2F:47
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019D25F16054792D280CC9D65A413971721A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 1878
Signing time: Wed 25 Mar 2026 17:01:08 +0000
Manifest this update: Wed 25 Mar 2026 17:01:08 +0000
Manifest next update: Thu 26 Mar 2026 17:01:08 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: z5IHTkCPqtGniJxHGRhosdftDDAOB4hdrMEsu0qsoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:60:54:79:2d:28:0c:c9:d6:5a:41:39:71:72:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Mar 25 17:01:08 2026 GMT
Not After : Mar 26 17:01:08 2026 GMT
Subject: CN=1a8c47fbe4f9860d863f9658b994e1bde6722f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:a3:58:3e:76:b9:d0:8e:e2:86:26:31:70:
03:66:7a:b3:99:d3:24:7a:71:49:50:b3:2d:18:ec:
dc:c1:c1:30:17:84:ab:3e:e5:c9:06:9f:78:c1:bd:
63:4c:00:02:52:44:32:4f:19:0a:d7:24:6f:9e:9c:
ee:e2:12:b0:82:91:6e:33:d6:77:49:10:d6:65:44:
44:79:5f:e1:19:7b:bf:ac:61:8f:c2:bf:63:5e:e6:
f7:60:a8:8f:01:0e:e5:76:91:74:21:d2:59:72:90:
53:6a:e5:50:62:10:cf:22:98:c4:01:54:62:54:72:
68:9c:0d:93:31:ca:10:68:cd:51:03:8e:3b:dd:36:
df:65:9a:d6:de:f5:f3:39:8c:83:44:31:45:4a:94:
11:bd:53:e8:e0:14:47:d8:f3:94:45:b7:06:99:1a:
67:0a:cc:4c:a9:f8:89:98:6c:4d:97:e9:55:87:c3:
e4:36:ce:f5:a9:28:d6:6d:d1:90:0d:63:bc:21:32:
63:23:db:f3:3b:49:da:61:fd:de:ab:13:1c:50:d2:
6d:84:32:38:c3:14:f8:e1:de:65:8a:20:9b:c1:05:
0e:28:37:c4:87:7a:63:f8:29:d1:a8:be:96:64:ed:
35:cd:0e:e4:88:f9:b8:4f:79:d7:f7:e1:5a:f8:f7:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:47:FB:E4:F9:86:0D:86:3F:96:58:B9:94:E1:BD:E6:72:2F:47
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d4:24:00:aa:59:c1:24:d4:2e:81:f9:35:01:60:6e:40:3d:
87:5b:8b:2b:2b:36:12:23:63:6a:97:b3:71:7e:a0:9e:c7:fa:
78:34:eb:1c:7f:ca:6f:ad:d4:83:fe:f1:ef:ae:8d:5a:57:68:
d2:4b:19:c2:67:bd:e7:7c:ea:2a:4c:b8:44:6f:17:95:db:80:
1a:cf:9b:16:e4:bd:94:d7:88:17:23:16:51:67:87:af:f1:aa:
e3:69:a7:23:22:f3:ac:4d:76:1c:8f:5a:bf:9a:24:93:2a:ac:
56:71:91:c3:1e:d0:da:cd:21:d7:41:cc:80:c7:7c:4e:c6:99:
b6:c1:c2:97:b7:66:c9:b0:79:67:62:f4:df:b6:b7:26:6d:52:
a3:75:a5:9b:8f:e3:bc:cb:a2:a8:e7:6e:41:ea:01:ef:e6:3d:
99:68:0f:53:64:fe:df:54:3b:aa:90:a8:be:8c:4f:02:36:cf:
b3:cb:3b:3a:76:a9:18:1e:6d:13:47:5d:65:92:96:8b:51:6e:
69:7a:e9:be:15:b5:62:b6:10:34:61:24:f8:72:9a:fa:20:4b:
f3:cf:d7:dd:f0:c1:aa:6f:ff:f1:f4:28:67:55:1a:1b:fd:11:
58:3f:14:c6:c3:86:e8:d9:c6:00:9c:63:ed:5f:2d:04:7e:3c:
ab:af:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:18 2026 by rpki-client