Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: VsVNgFGRc5wLA+TjYN7qKLkSIYP21XpVm9NsapDTB/8=
Subject key identifier: 21:B8:82:F6:F6:7D:5B:9E:47:BD:A8:BC:59:EC:29:7B:6B:E3:CD:36
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 019D2772269C780CF29120C9A5F34520A0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0C6D
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: JQXNwlWAxbP4wOUbQdviNexXSON9x/M/SNJtVsDlBKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:26:9c:78:0c:f2:91:20:c9:a5:f3:45:20:a0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=21b882f6f67d5b9e47bda8bc59ec297b6be3cd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:c3:b5:44:00:c8:f6:16:c5:d5:0a:5d:87:
96:99:f4:1b:39:c1:16:93:23:8b:2a:53:a9:6d:13:
86:75:bc:65:cd:90:18:8b:05:71:f9:e4:85:34:ab:
20:0b:9a:da:ec:e3:52:67:69:50:4f:2c:79:54:89:
7f:93:d8:3b:5d:f2:4e:d4:58:bd:53:ab:b9:b8:3e:
1d:da:90:f1:db:e2:50:be:50:69:98:71:46:1b:c6:
48:a4:c9:38:af:af:06:e2:d5:b7:97:c0:f8:ce:37:
66:dc:21:64:1f:9a:45:a7:6d:1d:dd:33:3a:d2:a2:
1c:7a:08:8c:08:6d:de:4f:ce:6a:6a:4d:28:4f:4c:
26:09:41:d6:07:2c:6d:b2:53:b0:c0:88:92:bd:7a:
38:cf:b7:04:1c:19:e8:66:ba:8d:b7:6c:60:ed:e1:
da:a3:ad:fd:f1:38:c6:8f:3e:b3:31:88:b1:b3:d2:
19:fd:96:4e:ee:c0:71:96:7f:7e:a6:4a:6d:0a:57:
fb:1f:d0:01:c6:05:1d:48:60:b0:14:56:b8:7e:d4:
f3:bd:8a:7d:49:4b:22:8b:0d:5d:d9:dd:d1:99:37:
e7:1c:27:1b:7d:3f:ec:9a:eb:75:a5:a8:49:07:c6:
2f:7e:20:bb:9c:10:f5:6a:e7:34:a8:f4:14:02:25:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:82:F6:F6:7D:5B:9E:47:BD:A8:BC:59:EC:29:7B:6B:E3:CD:36
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:96:64:39:3a:59:ed:07:7d:c1:f4:0b:1f:3b:ff:a9:6b:e0:
dc:6e:7b:84:12:78:7a:2e:19:1c:9f:25:7f:37:73:8d:47:2d:
a6:ab:69:1b:1e:6b:42:6c:02:4d:46:f8:5e:4a:e1:61:68:d5:
c8:ea:a2:1b:4b:c8:9a:8a:4d:cf:e2:56:41:5e:b8:4f:4b:1a:
b2:0c:28:af:ea:2c:aa:4a:08:92:8f:7f:94:e3:1f:ee:0e:92:
d6:9c:47:9c:0d:8d:e5:f2:bd:7a:25:ec:f8:2f:d8:d9:1d:e3:
b8:bf:41:49:ff:4c:c7:03:4f:74:58:a2:ba:7d:42:34:a6:e8:
be:8e:fd:8a:7b:a2:c0:68:e1:47:90:0e:43:f8:1f:9a:92:0e:
b2:5b:66:46:0b:ab:ae:28:be:33:92:c3:b5:66:e7:1b:1c:5f:
ab:a0:e7:fa:a5:25:e9:61:b9:95:ee:ac:c0:10:00:b0:7e:f7:
88:fb:d8:d9:dd:55:1f:c6:ed:a1:99:ce:0b:f9:2c:ec:35:e9:
60:65:82:bf:23:27:79:b9:89:26:6a:02:56:d9:75:d7:1d:9f:
65:27:75:f2:0a:d7:68:03:b4:c2:63:c7:7c:ce:87:df:2a:99:
cc:6a:69:03:a1:63:c2:6c:91:dd:c2:ef:81:86:fd:be:3e:c4:
bc:0a:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:42 2026 by rpki-client