Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: nbFaN+NDMZgUIkGSwY9QalRYcIqXhtkLuKN9tR8+g0g=
Subject key identifier: 64:07:08:F9:84:A4:83:20:88:60:A6:B7:C1:4D:EB:AB:97:AA:5B:84
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 019E1D22CCDD9CBEEC43E269E167771F9947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0DEA
Signing time: Tue 12 May 2026 17:01:20 +0000
Manifest this update: Tue 12 May 2026 17:01:20 +0000
Manifest next update: Wed 13 May 2026 17:01:20 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: BS9o+2GlVJ7PI4vgj5No/FR7mjqF51BNSHSMDV2U4OI=)
2: YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa (hash: c6e+XVaqZUDcD49245+mL48dQ3Qd5iEdgRHJAw8cJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:cc:dd:9c:be:ec:43:e2:69:e1:67:77:1f:99:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: May 12 17:01:20 2026 GMT
Not After : May 13 17:01:20 2026 GMT
Subject: CN=640708f984a483208860a6b7c14debab97aa5b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:1d:48:61:43:e5:b9:bd:85:b4:b2:7c:02:
1c:aa:62:3c:4a:ed:27:03:ce:af:77:8d:e2:5f:2d:
89:85:ec:15:c3:53:d4:5b:a5:0c:45:98:b5:b6:92:
3d:2b:18:cf:9d:c6:4b:2b:50:3a:6c:4c:5b:50:3d:
6b:50:b7:91:1e:93:ab:6f:c6:76:ed:66:c3:db:22:
dd:e6:4f:ac:13:92:de:bd:7e:3e:4c:3f:6b:3c:2b:
8e:f2:d8:5e:7f:f0:d8:74:6d:eb:20:1d:bd:41:56:
ba:f0:57:f7:f0:6b:12:4e:5e:a3:48:cf:6e:a6:ef:
94:3d:d1:2a:1a:8f:e5:a4:cf:0b:84:15:33:ac:b1:
0b:a7:03:ff:fd:93:b7:13:04:e2:1f:e7:e9:74:08:
c4:72:1d:82:a8:a4:3f:c3:15:8c:c7:58:ff:e9:a9:
79:5e:94:8f:d0:c1:6c:f6:a0:91:78:56:e6:c4:f3:
2b:52:6d:58:16:90:29:95:fa:6d:0e:e6:54:f1:41:
a1:50:d4:4b:a8:79:15:36:ea:21:3f:3d:b0:ad:b2:
db:d3:cf:76:b1:5e:88:4f:9d:c3:1a:65:9a:b1:13:
61:8b:ad:16:9b:bf:35:41:b8:27:b9:f1:68:16:29:
6e:68:29:00:8a:02:1d:d9:4e:2a:f6:e5:55:61:e7:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:07:08:F9:84:A4:83:20:88:60:A6:B7:C1:4D:EB:AB:97:AA:5B:84
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:45:8d:27:d2:d3:b7:ae:2e:02:9b:42:d1:89:ee:17:ee:7b:
e0:5b:de:64:34:3d:0a:ae:4a:95:df:01:16:ea:0f:70:9e:db:
0c:c9:c1:7f:ba:31:be:ae:52:d1:d0:4a:de:97:cf:0c:62:7a:
6e:6e:29:80:0f:d3:1d:97:b3:ec:0b:dd:8b:2f:cf:f0:9c:50:
90:19:df:a9:38:25:a8:a5:fa:22:61:9c:ee:eb:1d:82:3a:34:
8f:22:b4:a6:76:bc:5e:ef:99:06:b5:6f:c8:d4:6a:23:7a:68:
63:44:e6:d0:15:b0:6c:9e:da:bf:6d:3b:73:42:32:f5:71:27:
d7:53:c7:fe:ae:c4:ba:f2:68:8c:bb:fe:81:ab:80:39:01:68:
8d:31:70:e8:8d:c5:76:27:d7:80:3d:2f:59:58:c9:5f:a1:4c:
34:08:27:17:dc:46:b6:61:40:73:88:83:db:48:1a:0f:55:af:
38:cb:61:6d:e4:0f:ea:be:cf:b8:79:a2:85:b0:5d:e2:33:47:
fb:5f:cb:91:e9:f8:6d:3b:9d:27:da:7f:9f:0a:cd:04:3c:ea:
05:49:de:1d:48:7e:7e:88:2c:c4:47:24:ba:6f:68:e9:31:5e:
3b:1e:64:70:33:38:5d:cf:73:5b:58:53:2e:ff:d0:33:4c:e6:
1a:08:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:40 2026 by rpki-client