Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: QfFwV34ldXpcV6rhtoU/3y8/13lhSR9NC6MONwToVSg=
Subject key identifier: E5:92:DB:FD:EB:F1:1F:FB:5D:E6:E7:F8:AA:E5:2D:14:80:0B:CC:BC
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 019F92486ABCE984D1F4F75AF7E476112B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0FCE
Signing time: Fri 24 Jul 2026 04:00:47 +0000
Manifest this update: Fri 24 Jul 2026 04:00:47 +0000
Manifest next update: Sat 25 Jul 2026 04:00:47 +0000
Files and hashes: 1: AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa (hash: IbeU1AeOys6rseJf5ugRnLAWWP/7mZIxuUtqX7netkk=)
2: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: jbLGgierK/Ra770HiBg1POAOmdvLxLg7WfbpSkxmmTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:6a:bc:e9:84:d1:f4:f7:5a:f7:e4:76:11:2b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Jul 24 04:00:47 2026 GMT
Not After : Jul 25 04:00:47 2026 GMT
Subject: CN=e592dbfdebf11ffb5de6e7f8aae52d14800bccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:a2:01:07:4c:ed:33:61:2a:06:c7:1d:c0:
6b:d2:78:b5:89:6a:49:a8:5d:00:2f:3d:f7:04:ba:
ed:21:4a:03:94:e4:ae:55:08:b7:b1:94:3e:22:51:
9b:0b:94:2e:27:1e:0e:dc:e9:bb:be:c9:5c:08:10:
b0:af:e1:3a:f1:bd:67:55:ba:3c:73:fe:cb:5d:e6:
8b:f6:18:56:91:cf:50:85:9b:85:54:5c:67:42:75:
dd:18:ae:7d:a9:71:99:27:fd:5c:1e:15:8b:a5:cc:
ac:d8:49:a9:ef:58:98:74:55:19:9a:f4:d6:00:b6:
03:ee:53:69:1a:da:34:a7:f0:d1:a7:be:c9:27:08:
e5:46:c5:78:54:15:ef:8a:7b:d0:cd:09:b6:cc:71:
be:f0:ff:26:24:f3:38:42:12:51:4c:30:d3:e7:27:
54:d4:2c:51:7e:bc:43:99:be:e8:83:76:db:06:44:
f5:dc:6b:40:ef:1e:0c:c3:37:03:98:4f:ca:46:46:
54:b3:c3:99:98:fb:34:e2:fd:a7:ca:a0:c8:54:33:
1b:fb:f7:e5:de:92:c6:0c:64:47:90:24:d9:95:df:
33:8d:fa:93:78:57:f4:30:a1:42:06:d3:80:96:d1:
f7:45:35:99:4a:5a:96:11:6a:b9:d7:16:b8:79:2b:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:92:DB:FD:EB:F1:1F:FB:5D:E6:E7:F8:AA:E5:2D:14:80:0B:CC:BC
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:63:c5:8f:2b:a2:6e:25:72:b2:2b:2b:0a:28:ec:30:65:
13:ac:5c:17:fb:91:75:d8:8f:d5:8f:2a:db:fb:5e:41:55:65:
66:13:4f:42:13:06:00:73:88:76:f1:49:b0:aa:a5:0b:f1:c8:
eb:10:9a:8e:ad:bd:16:39:10:50:ee:7e:2e:e3:ce:2d:d4:82:
80:58:3d:cf:3f:55:27:d1:83:b3:61:64:91:08:25:5a:de:0a:
bd:fc:f3:60:41:a0:96:f6:4c:21:57:61:f1:5a:bd:5e:d8:37:
66:6e:c9:6a:86:ed:ce:bf:fa:ae:68:54:f2:09:20:2d:de:97:
cd:4e:d4:b3:12:b8:f5:e5:b0:f9:f4:75:2c:69:ba:51:82:55:
da:8c:e2:69:02:f5:53:e2:6d:2c:4a:cc:a7:06:69:ab:90:de:
22:5d:9d:86:35:6c:ed:30:5d:22:8f:e6:d6:02:57:97:29:71:
06:d4:91:12:4d:e4:eb:32:7e:b5:ae:ca:64:05:98:19:8d:43:
34:cd:05:bb:79:a3:4f:1f:0f:a8:01:a7:ae:f1:93:74:58:35:
85:13:51:7e:02:55:48:44:2f:3a:3d:18:48:46:d6:97:dd:18:
15:14:78:4d:fc:fa:88:67:c4:a9:16:b4:41:3c:ed:ad:a1:ab:
79:55:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:44 2026 by rpki-client