Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: UjCs4QQkgcRYQJpV6DS4Qj69MPwxqv9fKrsGVPSARn8=
Subject key identifier: BF:00:53:2C:F2:0B:97:EA:21:6B:0E:38:35:35:27:6B:B6:2B:E9:04
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019D26CD7D668B947E189CE2B26C18EB3EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: /9ky8FcEWuQS/YNn9Qsg4fwtTGf7IAsPgwp+WPRxnoA=)
2: ufSzeyDtwqyX2VcVaLd_bm70odg.roa (hash: mOh78oLKMhO8N2vOwgRV00Yf6t8BsMyPRhqMpzfai3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7d:66:8b:94:7e:18:9c:e2:b2:6c:18:eb:3e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=bf00532cf20b97ea216b0e383535276bb62be904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:7a:70:69:2a:d6:84:18:2c:40:4f:f4:cb:
5e:3f:50:cc:02:74:87:d3:3e:ff:1b:de:b3:a6:f5:
c7:ff:c2:84:11:55:e5:56:80:02:38:cf:e2:22:ba:
52:8f:f4:45:9d:ad:68:f6:8d:40:d4:86:2f:4e:62:
71:ae:0a:0d:61:0b:ae:91:b2:25:96:37:e3:4e:f8:
86:77:59:ba:19:0a:7a:57:d3:18:f9:c0:4a:09:8a:
a8:05:78:65:92:5e:92:29:b7:6e:44:23:85:6b:a4:
2b:6c:c8:7f:a3:14:08:d3:ab:8c:62:a7:fa:53:d1:
99:e6:bb:bb:8c:22:71:30:bd:b1:da:57:9f:5f:92:
ea:cb:0e:5c:86:02:48:8d:c8:28:07:6f:14:93:dc:
4b:0c:f6:a2:bf:56:0a:96:be:bb:de:00:ba:f1:95:
7e:81:99:f9:64:2a:15:58:09:d4:53:d5:73:f1:31:
50:9e:bc:5e:11:e7:56:e6:29:fc:47:3e:ce:6e:63:
29:5b:54:1f:8f:dd:7f:ee:39:11:00:f4:41:c7:e7:
5a:37:a5:99:c9:cc:91:29:ae:f0:fe:79:68:56:ec:
33:90:98:c1:79:61:9f:f7:3e:c7:36:01:4a:7e:b7:
e8:76:65:5b:e9:ac:f3:18:47:21:b0:e0:a9:22:d2:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:53:2C:F2:0B:97:EA:21:6B:0E:38:35:35:27:6B:B6:2B:E9:04
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:1d:5f:c8:00:bf:1e:e1:15:d7:0c:25:4c:26:40:38:d1:
0b:94:f5:a9:0a:f9:c9:03:c9:8f:60:52:14:aa:bb:63:68:9c:
e1:2e:b4:18:0a:dd:dc:c4:ff:a0:6e:6f:46:aa:f3:a9:0c:17:
bc:9c:18:2a:0c:f2:25:0b:46:64:bc:2b:fb:7e:ce:1a:93:70:
8c:74:4d:02:b3:48:df:6f:00:79:48:93:60:06:5f:35:fb:6c:
38:6d:b0:09:1a:a1:24:01:85:42:d3:03:31:33:2c:cc:79:ae:
c0:6c:5d:42:0d:81:ec:ec:4f:1b:37:ca:6d:8e:bd:0d:58:7e:
5f:75:9b:4b:7f:24:6c:44:a2:1c:e1:b4:ba:a1:6b:3d:c5:d3:
1f:7c:5e:d6:7d:19:a4:11:95:15:01:20:73:2f:89:e1:eb:72:
82:6d:06:85:7d:6f:84:e1:81:92:8d:b3:bb:c6:ea:79:6b:43:
c1:ef:1e:93:a8:08:60:af:8f:82:87:a1:05:47:a5:7f:1f:b2:
e7:82:c2:fc:a5:e8:1f:fa:7a:a1:c8:72:a0:e8:a4:ab:84:13:
50:17:25:37:c4:25:d7:dd:cc:92:3d:3a:8e:d0:f6:38:37:d0:
c5:da:03:8e:30:5d:97:a3:a3:0d:5b:05:15:58:2a:46:c8:05:
58:02:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:15 2026 by rpki-client