Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: AHA0iuPG7UYUOsaKcIEJfSeFcSeA4VbJTYluyPjwxQE=
Subject key identifier: 6C:40:1C:B3:6E:4E:0E:53:58:53:7A:E3:A9:34:26:AF:E9:00:34:BB
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 019D28846C265CD624DAD9B33122BF8DE131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 10EF
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: UO8QCbumhwDed/dV2jbCUxspNnOS02fz7L6fEyhmkvQ=)
2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6c:26:5c:d6:24:da:d9:b3:31:22:bf:8d:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=6c401cb36e4e0e5358537ae3a93426afe90034bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:15:5f:26:60:2f:53:9f:cb:14:73:20:ea:
95:a0:41:be:31:6e:54:ad:31:49:05:c3:d6:d4:af:
89:8d:c9:cb:19:99:61:27:d2:4b:e4:6c:83:66:0e:
17:f5:67:e6:ac:18:74:f7:81:a5:0e:4b:b7:17:52:
48:e0:9d:a2:3e:1e:c1:44:be:36:66:1e:6b:40:24:
ae:10:dc:d1:41:b0:f3:2e:ac:47:47:df:ac:a0:44:
8d:d1:ad:b7:40:7c:13:f0:ac:fa:86:b6:86:ca:16:
66:05:e5:8e:21:fc:28:c3:22:0a:fc:41:16:73:04:
d0:b6:4b:55:dd:c6:cb:32:f6:98:7b:30:cf:45:ef:
09:94:6d:3f:2c:b2:76:82:88:45:81:59:7f:44:95:
7b:ea:2e:0a:17:d5:12:bd:da:19:34:a6:d4:61:ef:
82:6e:b2:39:7e:15:3d:3b:65:bf:15:33:cc:82:b1:
10:37:e3:ee:f9:29:ca:79:59:3b:1a:1a:d2:68:b5:
06:6b:c9:4e:70:f8:e3:3d:2d:43:29:ca:a5:eb:c6:
9d:74:26:db:73:c4:7c:b5:6b:4a:82:c1:42:93:2b:
89:1d:29:e7:2f:08:00:6a:96:0d:36:9d:bb:0c:9c:
72:61:ed:02:8d:1c:e4:10:0d:a6:d1:80:fe:1a:ad:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:1C:B3:6E:4E:0E:53:58:53:7A:E3:A9:34:26:AF:E9:00:34:BB
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ba:21:57:da:44:3f:b8:33:21:50:23:3b:62:b5:96:e5:2b:
4e:16:11:65:15:86:3d:94:df:11:12:b9:40:6a:0e:73:f8:93:
87:a7:83:45:8f:fc:15:70:74:56:cb:65:c5:bf:68:0c:ae:ac:
77:5d:09:a9:bf:2a:cb:da:88:de:69:52:69:48:b4:8b:b6:a6:
0f:22:54:18:2f:8e:9d:54:d6:cf:cf:05:3e:7b:2e:40:b7:90:
47:fa:3a:4f:08:21:73:50:7b:bf:a7:7f:0b:f4:c6:0f:60:95:
e4:23:b7:d9:86:08:9f:1c:40:00:f6:e9:bf:6a:fb:eb:e4:9f:
8a:81:7d:41:07:25:89:8a:a8:b4:fa:75:10:11:1f:51:18:61:
c2:6e:09:e5:3d:8a:94:e4:57:b4:7d:15:79:ba:e5:29:03:8a:
d1:5d:dc:f0:e7:78:78:16:51:7e:69:28:1c:e9:51:66:a9:3e:
9a:90:cf:cf:b6:ba:99:69:ba:7b:d6:17:a7:ac:ba:65:e5:21:
51:11:0e:5b:25:af:28:e0:54:a0:aa:ac:aa:91:22:d5:d2:1c:
28:0b:c5:1d:9f:1d:64:75:97:16:8e:04:f3:1e:7b:cc:41:5d:
7c:49:72:88:09:e9:e1:c7:86:a6:a9:91:40:54:e1:95:ce:17:
d0:56:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:41 2026 by rpki-client