Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: KX8x+k2v7RpQWUaUTrRet5mtvPiTmw5bikbHzGAhj8k=
Subject key identifier: 61:EA:45:0F:2A:01:EA:2D:68:6E:11:34:12:9A:FE:A5:FC:16:CE:F5
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 019D29CE38C10E00417812AC9112CB8F56E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0D6C
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: BHhRBMi8J5aMLf2t4djbrKclzPP53oV1Rgt5brlsb+k=)
2: YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa (hash: c6e+XVaqZUDcD49245+mL48dQ3Qd5iEdgRHJAw8cJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:38:c1:0e:00:41:78:12:ac:91:12:cb:8f:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=61ea450f2a01ea2d686e1134129afea5fc16cef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:0f:ea:0b:47:ec:11:ef:13:ec:59:ff:7d:
ad:ff:3d:de:34:b8:84:8c:57:12:1c:dc:f9:ef:f0:
e0:6d:1e:09:c1:56:b9:4b:18:24:6b:9a:4d:5f:ac:
72:80:97:bf:32:b2:02:0a:83:e4:3f:af:2d:a8:d7:
ba:06:5f:9f:b8:49:27:8a:e1:59:a9:02:cc:a4:8c:
8a:7a:0d:d1:cf:1d:f3:e3:06:b4:0c:76:9e:0e:0e:
b7:cb:fd:8c:d9:8b:8d:cc:d0:76:6d:6e:20:9a:5e:
b8:70:63:e0:8d:84:22:91:67:02:1d:4c:b9:10:38:
06:48:48:c2:87:6a:35:7f:05:ce:eb:47:86:81:8b:
9e:fb:b5:96:27:bf:e1:a7:81:52:ae:0d:d7:b9:e8:
28:3b:c3:d2:b7:c9:8a:c0:49:c6:94:a9:36:15:0e:
c5:0f:1c:db:ac:a3:66:81:d4:9a:31:b7:1c:b9:fc:
22:10:9f:2f:aa:b8:1a:60:2a:56:4a:e5:68:8b:22:
fd:e3:e1:15:a4:6e:df:38:03:7e:d1:18:93:cb:b5:
6d:d0:20:08:f2:8e:08:b8:94:b4:04:96:ae:58:bd:
02:b3:bd:a4:c2:bd:a5:a3:6b:fc:e8:ab:09:9c:a6:
b1:c7:71:15:46:06:35:9c:5b:fc:f2:47:20:e0:9f:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:45:0F:2A:01:EA:2D:68:6E:11:34:12:9A:FE:A5:FC:16:CE:F5
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:d2:6e:27:a4:5b:03:b8:ab:81:31:2e:32:a5:ed:10:a9:
3f:43:05:18:d9:f5:f2:5a:13:a6:61:e3:87:e3:14:49:c1:47:
c9:fb:e3:cb:ca:d8:8d:da:10:b2:52:4b:69:6d:9e:d1:f7:5d:
a0:82:81:fb:68:df:a5:d5:04:3b:a1:30:22:59:53:d9:d8:e0:
dc:31:97:45:88:d6:a5:4a:67:10:12:4d:b9:25:bc:b4:78:25:
3d:8b:3a:23:a5:d0:cc:79:ab:ad:4e:b0:bf:a4:c6:fb:79:d3:
85:3e:72:3a:a8:f9:49:31:db:0b:88:aa:6a:70:61:6b:ea:45:
da:04:d7:81:70:f1:2b:c7:bf:2e:2c:46:21:21:ee:f8:e4:67:
01:ce:ce:39:a2:79:91:13:49:d2:9e:90:95:a3:01:56:a4:81:
d7:2a:de:ca:e2:d8:f0:52:15:08:5d:d2:ef:36:b0:1d:9c:25:
44:b8:68:42:7b:86:09:3c:05:0d:24:2a:b5:00:7e:81:ed:ab:
32:42:2b:b9:a1:a4:dc:d3:cd:01:fc:6f:68:5d:77:b2:1f:3e:
3e:91:bb:e7:5c:83:d7:e6:96:02:9c:87:ff:56:af:e5:d7:48:
f5:83:c8:aa:18:29:1c:cb:a3:da:ad:08:0d:0b:ce:3e:96:bd:
53:03:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:45 2026 by rpki-client