Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: zaXWUm8CfhKOH1hNe2dbiko+TUBxW3V0r+IyNY7t4Iw=
Subject key identifier: C5:96:5A:54:E0:7B:0B:C1:00:51:20:91:5D:6A:28:08:D9:CE:52:99
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 01A0D2373EF287137179DFD017680E52AE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 07:00:30 +0000
Manifest this update: Thu 24 Sep 2026 07:00:30 +0000
Manifest next update: Fri 25 Sep 2026 07:00:30 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: MNuczWZ3fjaPSmUSz8hrT7gqlfEX3Fygo0vlEVUSJJ4=)
2: lAqIj2UybXhOPBtGQcLNXWIjono.roa (hash: UVYOgTudlzpIM7zdesRsrm334w88DrZr8YDCmf2V4Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:3e:f2:87:13:71:79:df:d0:17:68:0e:52:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Sep 24 07:00:30 2026 GMT
Not After : Sep 25 07:00:30 2026 GMT
Subject: CN=c5965a54e07b0bc1005120915d6a2808d9ce5299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:07:d2:0c:0a:f6:c5:d6:c1:4b:3c:ba:cc:
90:e3:88:9c:48:70:a5:60:94:7f:3c:92:f6:12:0d:
04:3b:71:6a:31:0a:3e:cb:13:d4:02:e5:38:8a:92:
11:73:f9:73:23:7b:39:6f:3d:a0:22:82:57:7a:14:
04:ea:8e:99:25:bb:27:2b:7e:24:f1:dc:ec:44:7b:
e4:c3:0c:6d:84:78:ef:a8:9f:e5:98:19:0e:72:f5:
fb:4c:17:e8:fb:a8:c8:be:81:55:1d:9a:86:fd:a3:
87:47:01:8d:aa:57:98:03:32:d8:91:30:59:84:a8:
fd:49:df:2d:1f:fa:2a:a9:56:c7:e4:32:37:f4:9a:
5b:2f:e7:ce:ee:55:22:b9:28:bf:d3:6a:c4:3c:1b:
c1:67:31:34:5d:31:b4:ad:50:4b:cb:95:ea:5c:3b:
84:62:3e:87:94:65:38:ec:38:c5:1d:51:f7:c9:55:
d4:f7:54:31:fb:b5:6b:50:dd:4f:33:0a:64:2e:5d:
2c:0b:d8:f0:41:98:55:49:15:f6:49:c7:7a:1f:e1:
81:55:16:6c:22:ad:15:78:97:b8:2f:da:9e:54:c7:
49:26:c2:9a:34:2b:a5:66:35:cb:39:7e:9b:76:31:
da:dd:28:f7:71:4e:23:d3:b3:2c:f7:f7:62:42:3b:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:5A:54:E0:7B:0B:C1:00:51:20:91:5D:6A:28:08:D9:CE:52:99
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6c:62:c2:35:c9:71:9d:5d:27:59:e8:90:ce:92:1a:89:43:
74:74:5d:73:c0:b1:d6:a0:bd:cd:01:f9:d8:0d:eb:96:64:a1:
e0:d9:14:30:9a:a9:ad:c6:86:48:a8:3b:59:31:6b:37:88:87:
4d:d7:dd:f8:fe:2f:ee:12:0c:57:29:83:4b:65:61:ca:97:ba:
85:01:3c:c0:13:8f:1c:46:b9:76:28:5f:27:d7:e4:67:93:89:
24:ab:01:1a:02:47:e7:fb:90:48:e2:17:52:30:3e:65:63:70:
43:ba:d7:5b:4c:a9:8a:8f:fb:d8:a5:05:22:eb:3b:26:74:20:
25:5d:bf:29:4f:d5:5f:03:e4:d7:93:b9:1e:86:c1:84:19:24:
5b:02:89:c2:7a:b1:82:76:97:a5:c6:20:e4:20:75:50:09:98:
c3:96:5a:e2:01:1d:bb:1f:9e:ba:52:1d:de:90:72:71:b0:f8:
39:72:bd:dc:3a:91:ff:36:19:e2:88:e1:62:60:8a:20:58:57:
d4:ff:a2:4a:0a:bc:48:f1:e3:c0:f7:d3:55:08:ad:70:6b:bf:
ad:fa:f4:ca:46:aa:c8:da:04:89:6f:35:1d:01:8f:cb:87:52:
7c:23:71:8b:b2:88:7b:da:66:ad:0a:bd:ce:65:0d:3c:45:8e:
3c:cd:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:16 2026 by rpki-client