Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier: epr4R79NCC09118RgTBQHPHAuZESdLm8B3Fy9OXo6f4=
Subject key identifier: 7E:5C:DA:3F:18:E7:91:30:5B:2D:90:93:89:28:51:46:30:AC:37:C9
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 019D25F19F74290762E9CC629C1A581A04AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number: 1065
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: TqiVjewKysuaNRE7PaeFBOH7bwVScxEnvbpL1u/Cul4=)
2: VOGa2OgWjgky6pjaze0aKigA4Xw.roa (hash: AEeSZ9408PCHxw0xHDJSkG2Qd0qqfMOh4o/RtotNNi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9f:74:29:07:62:e9:cc:62:9c:1a:58:1a:04:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=7e5cda3f18e791305b2d90938928514630ac37c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:16:8e:3a:aa:48:b2:8c:67:fb:25:f7:c3:
37:ae:69:17:96:24:10:b2:c3:f5:70:cd:18:f8:a7:
4c:61:63:2a:99:db:a0:59:fc:52:57:d1:9d:56:36:
c0:42:19:2a:a5:5f:8c:a0:d7:d0:37:3e:99:cf:b1:
9c:67:04:e5:ca:86:1f:26:f5:77:51:d9:33:0c:3f:
48:89:4c:27:e3:82:65:4e:92:76:0b:a3:93:a4:47:
85:85:98:64:ae:21:b7:07:f2:9c:43:79:e2:0f:04:
60:63:98:82:da:ba:22:fc:9b:fc:eb:f9:39:f9:bb:
ea:2c:2c:35:97:1f:90:3c:56:d1:09:19:3b:5e:84:
a6:96:14:39:cc:55:1b:60:21:dd:47:b7:60:79:e1:
8c:de:96:a0:e1:01:82:aa:00:a0:17:5c:f5:38:e1:
53:1b:cc:e6:96:9c:33:7e:6e:75:79:f4:c4:f2:1b:
4a:71:9c:6a:ec:cb:54:83:47:f3:75:6a:c2:8e:ae:
1f:a8:aa:eb:60:2f:ca:a0:bf:62:b7:fb:45:c8:54:
98:c1:16:bf:5d:81:d0:62:68:ac:3f:19:49:54:e8:
76:28:b2:9f:5f:5a:f5:67:5a:3f:14:10:6b:95:65:
c8:94:7a:f6:a0:3c:4d:00:65:9a:57:9b:d1:95:a0:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:DA:3F:18:E7:91:30:5B:2D:90:93:89:28:51:46:30:AC:37:C9
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:9c:f1:ad:38:8e:36:7a:ad:4b:aa:6a:df:88:41:b6:db:
59:a3:fa:0e:e2:c4:5f:7e:f2:05:d1:c9:93:22:2c:a9:75:4f:
6c:d0:e7:f4:07:9b:e1:87:57:bf:89:1e:a6:23:d8:97:36:16:
01:bb:c5:ee:17:15:09:7a:f1:d2:b8:d2:35:c2:15:f8:47:8f:
fd:ef:ce:0b:8e:4d:36:48:bd:37:2e:eb:9b:55:ae:f0:45:95:
8f:c0:08:a0:ff:45:64:db:38:77:cc:c0:83:a2:00:c4:d1:a6:
a7:48:36:9b:23:0d:f9:2b:4f:eb:d0:46:01:65:6d:89:d7:29:
cb:aa:44:9c:ba:9a:fb:47:86:76:26:ca:d3:09:3d:d6:ea:91:
2e:ff:be:5c:d1:e7:cd:cd:c8:20:55:43:36:94:37:47:b2:64:
cc:69:13:f6:58:20:81:ed:d3:de:75:11:c6:cd:28:88:cd:f0:
45:28:16:6c:1e:5d:46:4b:12:16:4a:25:ed:02:cb:8a:ec:27:
9d:98:e6:f2:98:0c:1e:6a:fc:c0:49:a7:d5:ca:9f:b4:f8:4e:
6d:2d:41:d3:dd:96:5b:ec:77:78:42:23:72:3b:31:4f:b8:03:
fa:e0:fd:0e:c3:37:f3:c5:58:fd:50:19:67:5a:3e:5f:6c:3d:
99:a7:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:15 2026 by rpki-client