Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: bsVxKYUUDmmeX2r5SwB+HoqKpV4d943XIQun7ASM/fU=
Subject key identifier: 4A:58:EF:D8:5A:CF:D2:90:D0:DC:A3:C2:87:7E:D1:9A:D4:71:1D:B7
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019E1D2266FF62223D70AAF079F977556E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: o6whBIZp4D7SdO0x6XNrh/Awn+N0aOkelR2lpy7SCgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:66:ff:62:22:3d:70:aa:f0:79:f9:77:55:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=4a58efd85acfd290d0dca3c2877ed19ad4711db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:cf:0a:b4:b3:4f:ff:7b:69:4e:bf:f2:05:
ad:c5:ae:1f:90:5a:1a:bd:4b:54:e3:7a:8a:63:fb:
c3:67:42:ae:57:2c:13:eb:d9:49:1f:d9:51:55:ad:
da:5b:f1:69:51:f6:c9:3d:11:bd:2f:cd:24:7b:2f:
c2:e2:b6:1d:41:17:e0:12:06:0d:cc:63:18:5f:2c:
0d:85:3d:12:6e:40:c4:51:a7:f1:45:42:6a:fc:d6:
a5:8c:3a:7f:d1:70:bb:2c:a0:3b:6c:00:88:b4:69:
19:c4:0d:c2:51:3d:5b:b9:f8:a5:e0:8e:be:a4:a9:
8c:c1:c8:bb:36:24:d1:d6:1b:91:e9:72:ad:36:73:
79:f5:c7:92:82:38:b3:14:f3:fd:32:31:4b:d5:85:
d7:b8:89:da:01:bf:cd:9e:d7:03:f1:4c:1f:f0:3c:
f9:86:18:e9:43:fe:99:f2:da:25:ec:fe:fb:00:d4:
fa:92:16:8d:1d:e1:54:ef:74:38:f8:e8:72:0c:da:
17:a8:4e:13:62:51:d4:ba:99:2a:82:4d:5d:95:09:
3d:91:33:82:8f:85:80:f8:66:90:71:99:f9:6b:16:
ea:36:05:d9:01:dc:97:43:e7:d7:88:d0:9f:ae:46:
02:55:58:45:0c:80:0e:e6:b0:a3:8b:75:9c:ac:0b:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:EF:D8:5A:CF:D2:90:D0:DC:A3:C2:87:7E:D1:9A:D4:71:1D:B7
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:6b:7a:00:bc:fe:4d:43:f0:bc:c4:40:5e:0c:17:f2:4e:
f8:b7:02:59:3f:c7:2f:6e:1a:84:12:e0:89:e3:31:92:96:e1:
15:16:ca:72:5e:5c:b9:82:25:68:8e:22:e5:1f:16:e4:ee:83:
16:00:1b:96:aa:89:c1:63:10:cb:d1:72:69:ff:dd:63:31:f6:
f5:c9:46:05:d9:e6:79:77:43:92:d8:70:ed:a8:24:5d:f3:22:
b0:60:22:f2:9d:16:19:bc:6b:27:d6:4d:7a:e1:7c:10:c9:c8:
e4:7c:f4:98:1e:b1:90:6c:fd:7c:9f:51:c0:9d:0e:f4:a7:43:
85:e9:ac:8e:59:05:cd:0a:d2:a1:d5:34:a6:6d:6f:ef:73:c3:
9c:79:23:13:06:11:2a:8c:d4:fd:45:2c:0b:3f:c5:8d:f6:7f:
88:f5:d6:3f:2b:c2:4f:f7:01:e0:1a:9c:f4:7b:ef:59:f4:2c:
40:32:c5:dd:3b:bd:64:72:b8:af:07:52:ab:a5:24:16:6d:b3:
bb:79:34:93:c6:f1:54:d0:88:c7:53:25:bd:61:f5:84:32:62:
d9:80:df:2f:3d:8f:8b:6b:19:0d:f0:38:8a:ca:4b:41:30:31:
e8:2c:16:64:92:ff:8e:99:ca:57:47:81:fa:96:35:f5:3a:75:
1a:a7:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:14 2026 by rpki-client