Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: DivSkHHy2JnlT0d6zMyYnhrVbPS6XRWZjfBbislb/yo=
Subject key identifier: 52:C9:C9:56:D9:12:8F:8A:40:E8:E9:96:E2:0A:EB:E3:F2:ED:66:B3
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 019D28F2D27E0EB0EF99D71892E04F712DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 0F2B
Signing time: Thu 26 Mar 2026 07:01:35 +0000
Manifest this update: Thu 26 Mar 2026 07:01:35 +0000
Manifest next update: Fri 27 Mar 2026 07:01:35 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: +LdbVB0xe023Y1XI7mrDMuk+k5dZucKxgwtN7YfAcPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d2:7e:0e:b0:ef:99:d7:18:92:e0:4f:71:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Mar 26 07:01:35 2026 GMT
Not After : Mar 27 07:01:35 2026 GMT
Subject: CN=52c9c956d9128f8a40e8e996e20aebe3f2ed66b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:ad:fb:b5:92:f7:a0:15:30:12:d7:f2:48:
f8:87:e3:c0:01:24:36:dd:6c:89:fe:6b:a5:d8:51:
f8:95:92:76:89:c7:b3:39:f2:35:78:50:01:a9:2b:
5a:b2:c6:f8:f0:c9:1f:40:c4:7d:3d:af:c0:99:73:
fa:69:20:8f:66:07:d8:04:5d:42:39:dd:aa:ff:35:
c6:44:f9:4c:a0:12:20:16:6f:2d:44:5e:b6:6a:c7:
c1:89:2b:f4:d7:b8:14:c1:ac:2f:f8:35:63:11:59:
18:e2:fd:86:1f:6b:24:bf:ba:7f:d7:df:b9:a2:2c:
75:73:20:41:bb:d4:13:27:a6:4b:72:a5:fc:37:6d:
a4:a3:9e:ae:dd:2f:c9:99:3c:89:1e:13:fb:0b:6a:
05:67:21:e1:df:ec:4e:91:04:9c:88:0c:b6:b8:6b:
94:f4:ab:ec:99:41:8d:04:30:22:55:79:64:37:41:
56:84:8d:08:18:65:05:22:2b:9a:10:8f:1b:0f:b5:
05:cb:39:f9:58:db:d9:d3:7b:55:bf:1c:5e:29:14:
9c:9e:7b:ef:ea:43:d3:38:ce:c4:a7:52:ae:d5:05:
49:5b:83:84:7b:fe:a4:23:a0:04:3f:42:af:17:d8:
88:dc:52:2a:9c:62:75:fd:01:cd:96:7f:d6:72:14:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:C9:56:D9:12:8F:8A:40:E8:E9:96:E2:0A:EB:E3:F2:ED:66:B3
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:33:b1:99:34:d4:fa:74:f7:97:7a:b1:28:fe:63:d5:a4:f6:
43:dd:ae:f4:9a:29:3f:0e:f6:9d:b8:16:c8:47:98:3c:c1:ec:
71:19:6d:e7:74:b1:1a:42:cc:d9:6f:76:03:ef:fd:34:14:68:
55:fb:08:b5:25:55:bb:b8:8d:9e:68:93:1f:97:c4:90:b3:cf:
bd:6f:b0:29:8d:7a:68:cc:76:4a:5a:4c:93:f2:1b:4b:84:cb:
e5:87:b0:62:35:ea:3c:7b:b5:9c:c3:51:64:68:61:cb:a8:9b:
98:ba:46:e2:5f:25:08:cf:b7:d7:24:5e:f8:df:bd:14:f4:cd:
a2:74:f7:71:c7:13:ce:94:ec:52:45:33:f6:2d:4f:fc:34:1f:
00:a3:8a:c4:ca:a1:0e:a8:7e:f6:1f:17:1d:d7:a4:71:54:e9:
fa:67:5a:de:31:fa:95:1c:a1:15:31:97:77:e6:a0:87:91:5c:
41:85:99:0b:a9:9b:38:40:00:7a:b6:d6:b6:b5:c1:18:d4:8e:
fb:a6:73:20:30:8a:ff:60:f3:96:fe:0a:06:1b:33:95:ba:44:
ee:7a:8a:f0:77:f6:79:f5:a1:a5:d8:c1:cc:e8:0e:cb:92:43:
9d:72:08:05:ca:ee:ac:53:f6:da:f1:b8:3d:c5:54:6e:21:cc:
05:30:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:16 2026 by rpki-client