Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: j5EKYCd6kVsD3aA7foFwlWDHhH+WhMg4NZa2rwxyojc=
Subject key identifier: 6A:55:23:40:81:1A:04:E4:B8:B4:3D:2D:14:55:0F:2D:19:FB:D1:BC
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019D322BD6475EB6AEECEC9C0A3BF5020DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 02:00:26 +0000
Manifest this update: Sat 28 Mar 2026 02:00:26 +0000
Manifest next update: Sun 29 Mar 2026 02:00:26 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: vCJuBgAT6L3quAffA/2REh+ZdPk/6I9Y4uYma2p2reI=)
2: lyF2q1wLFWmF4Bje0J65OKCZKw4.roa (hash: nUHyFMygTv/krY1cfqzTeSySMum5LGIyQeqthF8Cr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:d6:47:5e:b6:ae:ec:ec:9c:0a:3b:f5:02:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Mar 28 02:00:26 2026 GMT
Not After : Mar 29 02:00:26 2026 GMT
Subject: CN=6a552340811a04e4b8b43d2d14550f2d19fbd1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:7f:ac:54:e7:8c:f6:d3:69:c7:c6:5a:50:
4f:b2:df:27:df:41:fc:42:6d:9d:c1:51:33:ab:0e:
aa:25:17:6d:93:f6:a9:bb:c4:41:34:84:f8:74:72:
91:43:14:5b:f1:81:94:47:03:35:64:10:62:e9:d5:
8b:85:bd:b3:35:fd:f5:0b:8a:73:aa:3a:58:d9:5d:
80:37:79:44:02:ba:fa:95:9d:e5:dd:ff:24:01:a1:
3c:05:6c:8d:ed:21:0a:d8:22:dc:b2:ce:00:44:1d:
43:7a:8f:ba:0c:e1:5d:fa:3c:6e:43:18:e0:3e:d3:
9a:73:73:47:38:e8:81:50:a5:1f:ae:23:6f:21:65:
9f:6d:60:a9:30:2e:4d:4b:af:8c:87:ca:62:a1:85:
28:78:32:f9:7a:a7:de:18:c3:e8:32:bb:01:91:b6:
c5:b3:63:5e:0a:a9:67:f6:66:7f:1e:ea:70:07:8e:
ef:9a:f5:32:5d:3d:cb:fe:58:3d:18:95:0d:cf:58:
84:f8:95:1f:e3:e5:d3:1e:72:8a:de:d8:4a:22:cd:
35:cf:14:87:ff:ce:8a:c3:c4:2b:44:6e:a5:48:39:
95:91:02:2f:cc:fb:7d:f7:01:69:a0:2d:c5:c9:b5:
e5:b5:d8:47:fe:99:d9:bd:2b:5c:1b:58:04:c9:04:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:23:40:81:1A:04:E4:B8:B4:3D:2D:14:55:0F:2D:19:FB:D1:BC
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:d8:59:59:38:42:a1:91:fa:78:d8:b5:f2:2a:75:8a:bd:
97:6d:21:61:1e:db:90:8b:1f:a0:22:23:b4:a5:68:b8:bc:4d:
be:1d:89:fe:af:49:5e:96:6c:f3:52:5f:8d:8b:fe:e6:09:41:
06:7a:75:47:dd:2a:a9:5f:81:e9:1b:25:81:45:01:69:df:17:
e1:48:3c:60:6f:b2:6e:c3:12:60:de:e8:2b:47:57:dd:57:d1:
d8:7d:80:ce:c4:84:f7:12:b8:1d:c0:b6:71:3b:39:e1:c6:c9:
84:15:1d:d2:aa:06:bc:71:38:1f:b4:9f:3e:57:fb:6e:93:57:
ae:af:f1:db:66:67:5c:80:8f:6b:37:ac:0a:80:b9:91:e8:13:
47:55:25:7b:79:97:a5:49:ec:58:77:4a:dc:c4:de:5c:ac:eb:
44:36:72:a1:60:92:71:23:9a:ad:93:2f:20:48:bb:7e:e3:33:
dd:b0:c6:62:c6:99:94:21:d1:dc:c1:ac:28:8b:39:41:43:cb:
06:32:d8:84:15:79:9b:5b:80:65:1f:97:09:a5:10:a0:4a:e9:
4a:9d:5e:68:a4:fb:f4:7a:e5:30:e0:a6:63:8d:c2:44:1d:80:
46:16:73:33:5c:d5:68:87:b3:da:63:5f:a3:6f:16:26:af:1f:
69:97:65:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yK9ZHXrau7OycCjv1Ag2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy
NTE0MmIwHhcNMjYwMzI4MDIwMDI2WhcNMjYwMzI5MDIwMDI2WjAzMTEwLwYDVQQD
Eyg2YTU1MjM0MDgxMWEwNGU0YjhiNDNkMmQxNDU1MGYyZDE5ZmJkMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviR/rFTnjPbTacfGWlBPst8n30H8
Qm2dwVEzqw6qJRdtk/apu8RBNIT4dHKRQxRb8YGURwM1ZBBi6dWLhb2zNf31C4pz
qjpY2V2AN3lEArr6lZ3l3f8kAaE8BWyN7SEK2CLcss4ARB1Deo+6DOFd+jxuQxjg
PtOac3NHOOiBUKUfriNvIWWfbWCpMC5NS6+Mh8pioYUoeDL5eqfeGMPoMrsBkbbF
s2NeCqln9mZ/HupwB47vmvUyXT3L/lg9GJUNz1iE+JUf4+XTHnKK3thKIs01zxSH
/86Kw8QrRG6lSDmVkQIvzPt99wFpoC3FybXltdhH/pnZvStcG1gEyQRL0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpVI0CBGgTkuLQ9LRRVDy0Z+9G8MB8GA1UdIwQY
MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt
MTM2YzlmZmNiODJjLzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj
LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM3YWVk4
QqGR+njYtfIqdYq9l20hYR7bkIsfoCIjtKVouLxNvh2J/q9JXpZs81JfjYv+5glB
Bnp1R90qqV+B6RslgUUBad8X4Ug8YG+ybsMSYN7oK0dX3VfR2H2AzsSE9xK4HcC2
cTs54cbJhBUd0qoGvHE4H7SfPlf7bpNXrq/x22ZnXICPazesCoC5kegTR1Ule3mX
pUnsWHdK3MTeXKzrRDZyoWCScSOarZMvIEi7fuMz3bDGYsaZlCHR3MGsKIs5QUPL
BjLYhBV5m1uAZR+XCaUQoErpSp1eaKT79HrlMOCmY43CRB2ARhZzM1zVaIez2mNf
o28WJq8faZdlxw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:40 2026 by rpki-client