Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
File: DRjKnIs9feaqzD0ULHfe9l2dmhM.mft (raw, json)
Hash identifier: FPrDKU3J34JOCHAG3eKcWNs8ZrhAFLdNpyx1B+Way2U=
Subject key identifier: AB:1F:E7:DF:1A:14:58:A8:6A:F8:5A:15:D8:5D:C5:FC:49:BF:B8:6B
Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
Certificate issuer: /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Certificate serial: 019D25BA67FCB7087E6F3BBF1D5CC91FB556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
Manifest number: AF
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: DRjKnIs9feaqzD0ULHfe9l2dmhM.crl (hash: vNfEDR2qjIDnKmGn+UxIPBVkE2uwAAgQnozIe0UL17Q=)
2: ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa (hash: ZGB8JxWLMriUzpJGh2DaBjMMjMXaanV6HNWfgfO/KEc=)
3: Jxxd5aNDgIwuXw-fe_JV9RJ9Vsk.roa (hash: ZyYRE97Gj5xlNTvz04w5Yl/LKVZnUZ+i5Xl5eo6U8Qo=)
4: fENZ45chq7I0lirDj-NqEzfJV48.asa (hash: Oziqs0HzmzOziXtI95DiC50goIAtPYUpO9KwNqQbRR8=)
5: pfh1mEMWGqfMBsjXKJm7o71cR4U.roa (hash: +3H4MNFNTpOXbo6c9xASz6EPy+aohNw/Bgmf/lrX1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:67:fc:b7:08:7e:6f:3b:bf:1d:5c:c9:1f:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=ab1fe7df1a1458a86af85a15d85dc5fc49bfb86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:0b:5c:76:8f:2a:1a:ca:e6:50:ad:1c:93:
70:bf:88:d3:27:d7:e8:d2:95:07:5f:17:a5:bc:d4:
88:71:6c:24:8b:be:0d:e7:0c:74:56:6b:e2:47:36:
1e:86:61:ba:4f:99:cc:3d:35:87:20:66:93:79:79:
bd:ad:77:de:19:51:04:b5:91:ab:a4:56:28:af:37:
e4:1c:f8:25:7f:ad:50:e5:c8:25:30:0f:85:02:3e:
dd:72:17:70:0e:c4:dd:03:60:56:0e:7d:74:4f:e7:
48:77:2c:06:d6:f3:fb:e1:25:5b:00:2b:13:4a:81:
8c:30:bd:c4:8c:07:0e:ce:e9:da:84:16:bb:2e:6d:
ef:8a:f3:cd:5c:ca:33:a0:d1:69:4e:cb:b4:1a:ff:
54:94:27:7f:83:36:48:a6:58:f4:5d:0f:d1:5e:d7:
57:ce:fb:4c:ce:6a:b4:c6:bd:34:02:7c:33:25:2c:
75:af:69:3e:b5:2e:55:40:97:b3:f8:4c:9e:8c:fb:
6a:92:21:49:ea:9d:dd:35:db:18:fe:af:7b:87:1c:
2f:7c:b9:71:ca:f9:13:cd:ee:1b:eb:80:2d:86:0f:
b7:9c:04:5c:25:c8:0a:e1:a9:28:1a:57:bc:f1:13:
20:5e:bd:eb:66:f9:a8:db:4f:7a:23:08:b9:4a:ae:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:E7:DF:1A:14:58:A8:6A:F8:5A:15:D8:5D:C5:FC:49:BF:B8:6B
X509v3 Authority Key Identifier:
keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:59:08:30:c0:e9:b6:bb:12:41:0b:2a:7b:6e:2e:25:6c:5d:
fc:eb:27:c5:58:46:66:cd:9d:ca:49:e6:9b:8e:90:c2:1b:6b:
93:1e:bd:01:7d:b3:84:dd:2f:8a:1e:3a:55:c1:b8:01:40:30:
a9:9d:85:8e:5e:73:ed:40:2b:a2:b5:cd:8b:8f:5a:60:ad:a7:
14:3f:f1:f2:8a:7e:45:aa:dc:41:63:9d:2c:25:96:7b:99:dd:
82:ee:b8:e2:6d:57:65:7c:a2:aa:b9:a3:ad:64:65:46:41:34:
2f:0d:32:3b:32:0e:a4:b6:7f:f9:57:c8:65:48:08:78:0f:b5:
ba:0d:fb:62:2f:6d:31:dd:6d:c1:64:c9:5b:16:02:d2:ef:88:
c0:5b:bd:92:79:77:bf:28:40:4a:51:04:48:46:ac:eb:bb:a1:
ba:d5:63:3b:2d:ec:aa:a0:14:af:40:98:49:eb:57:35:25:74:
56:3a:f5:8c:45:64:93:86:54:2b:8b:88:19:c5:ef:86:a3:83:
40:ef:6f:ef:a5:5e:9d:5b:21:54:a6:23:96:99:7b:fa:1c:97:
67:ce:47:ef:6f:a9:f8:4f:ec:89:4d:80:d1:b4:22:22:02:4d:
e4:98:63:81:c7:fe:6e:e5:ec:ef:ee:e7:bd:d1:49:d5:45:30:
21:6d:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:36 2026 by rpki-client