Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: JOhv08IOamXP/Qba79xLxHH2z2QQwbjA3t832TGVzjc=
Subject key identifier: 86:3D:D5:06:24:65:BF:81:C9:00:6F:B0:8B:F6:8F:F8:DD:1C:5C:2F
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 019D25BA894B0BE145F025773661102B1B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:14 +0000
Manifest this update: Wed 25 Mar 2026 16:01:14 +0000
Manifest next update: Thu 26 Mar 2026 16:01:14 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: 2Ibl/DzWpCEUH0UlBJ/hPbsCrV+5wOiRLOZKm4g0vZo=)
2: lAqIj2UybXhOPBtGQcLNXWIjono.roa (hash: UVYOgTudlzpIM7zdesRsrm334w88DrZr8YDCmf2V4Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:89:4b:0b:e1:45:f0:25:77:36:61:10:2b:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Mar 25 16:01:14 2026 GMT
Not After : Mar 26 16:01:14 2026 GMT
Subject: CN=863dd5062465bf81c9006fb08bf68ff8dd1c5c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:7d:db:60:c7:5b:1f:51:2c:23:53:2c:76:
e1:61:f7:97:4f:ef:d7:84:7e:a9:16:a8:da:37:53:
35:bd:57:ae:6c:7b:dc:37:a6:1c:2a:dc:b5:d2:57:
57:67:18:e7:43:7a:ec:57:c9:d4:23:5c:a6:0e:f2:
ba:b0:b0:d2:f5:29:e7:53:3b:bb:f3:2e:dc:0c:1c:
46:08:b9:f3:ae:c4:4b:35:2e:47:95:07:a5:5b:37:
e4:13:c6:d2:a4:bb:d4:2e:09:10:6d:b3:81:22:3e:
76:ef:77:e0:d3:b9:71:0a:d6:85:4f:94:63:a4:38:
ff:dc:05:c8:6e:88:b1:45:ae:ae:36:32:fe:a6:40:
17:3a:66:d7:40:1b:78:b6:c8:d7:42:5b:4d:a5:b6:
b8:fc:99:6c:24:89:f1:ae:c7:38:2f:7a:9e:72:13:
3d:d8:27:1e:de:2f:ef:39:55:09:25:b9:73:8f:72:
3a:59:3f:72:64:04:8f:dd:0f:56:73:96:fe:57:3f:
16:69:d9:4b:ab:c1:4e:26:1d:2d:29:c3:50:ce:57:
fd:43:06:cf:b7:c9:9e:df:1a:a3:b8:d3:f2:cd:ae:
ee:50:16:37:f1:c6:83:33:7c:58:9a:47:d0:8f:d5:
ce:7b:0e:93:23:ff:68:28:dc:9d:c6:41:b0:4a:e8:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3D:D5:06:24:65:BF:81:C9:00:6F:B0:8B:F6:8F:F8:DD:1C:5C:2F
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2f:3b:11:50:62:55:b3:b2:56:b7:2d:72:77:9f:9f:6a:e8:
c7:3a:06:5b:e7:7a:42:5d:66:a9:66:e3:cb:63:33:2a:63:63:
7b:66:27:19:92:3c:6c:de:16:96:22:29:b3:44:0f:ce:dd:1e:
a2:e3:c1:5c:28:b8:ef:dd:b1:f0:25:37:49:7e:3e:fa:2a:93:
5c:5d:28:39:cd:78:df:03:4d:dd:b3:45:06:9c:a0:5d:ba:e2:
08:da:60:7e:05:b5:3e:17:ef:b1:c8:0f:57:c8:56:46:54:34:
34:79:fa:5f:f6:e5:ca:19:ce:1a:a6:31:56:2d:22:6c:92:ba:
e8:b6:26:a2:c3:f3:d7:0c:1d:10:67:c4:85:9c:2c:6d:a5:0f:
c6:37:7f:20:be:cf:ab:94:cc:e8:08:10:dc:26:37:0b:e6:92:
b6:86:9d:d1:da:5f:b7:ec:22:81:db:62:1d:91:63:50:e9:65:
2e:8c:b1:81:f1:69:47:49:03:81:50:a1:57:d8:2b:b6:be:eb:
24:39:1f:a4:de:90:27:dc:42:b7:11:f6:8c:f6:05:14:82:00:
2e:0c:23:0a:8b:ab:ac:eb:cd:85:a5:4e:f1:ce:89:78:df:38:
cd:c7:5f:f3:de:7f:7e:ad:2e:05:73:da:81:a5:6a:b1:88:67:
1e:b8:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:33 2026 by rpki-client