Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: 0uKSiW/xKDS9zCCM5PPZ3t7Z8pEPVF1ljvS2caUKYRQ=
Subject key identifier: 34:49:9E:C2:08:53:C5:BA:C6:C9:63:6E:EA:62:F6:4F:EF:FE:0B:D9
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019F94A4F3E2DF75F204C528E3B08F1CEAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 14A2
Signing time: Fri 24 Jul 2026 15:01:05 +0000
Manifest this update: Fri 24 Jul 2026 15:01:05 +0000
Manifest next update: Sat 25 Jul 2026 15:01:05 +0000
Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: sP0GoD0GxMXwXbzcLQZusR8/xlfWpHeP9/f8bQ/8fPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:f3:e2:df:75:f2:04:c5:28:e3:b0:8f:1c:ea:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Jul 24 15:01:05 2026 GMT
Not After : Jul 25 15:01:05 2026 GMT
Subject: CN=34499ec20853c5bac6c9636eea62f64feffe0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:dd:51:6d:0a:48:03:1c:b3:10:39:7f:8f:
83:c5:7e:bf:40:98:90:4d:35:0c:8c:bf:38:5e:65:
8c:c6:70:96:93:a0:9a:4f:a3:f5:f9:73:32:07:9b:
ef:29:ad:f2:cc:54:11:fb:01:2f:c6:2d:c2:1d:9c:
c2:c9:b4:ba:a0:4c:71:20:da:dc:16:84:d3:ef:43:
0d:a8:ed:89:14:5f:76:8b:71:4f:8a:d4:99:00:1d:
a0:05:38:d1:d2:9f:be:fd:8a:48:16:24:de:0f:15:
39:b1:ea:9b:43:08:a3:a1:b2:8f:7a:db:d1:95:84:
b7:a6:b3:d6:7a:3d:e8:95:a3:d0:6f:62:a8:3c:a5:
35:b8:cc:e0:bc:bf:02:10:ba:4e:2a:91:3b:08:40:
6f:0d:41:4b:10:8c:a8:c1:3f:41:a1:ac:0c:74:04:
af:70:d2:6e:2a:ff:41:7f:ae:56:7c:5c:4e:1c:ec:
53:af:f2:9d:71:6a:f7:07:f4:6a:83:47:1c:97:6a:
dd:55:ad:c2:a3:d1:46:87:a1:18:c3:a2:47:82:d1:
be:a2:54:9f:60:57:7e:00:40:1e:72:f4:90:35:77:
53:34:c8:ed:3f:4f:7b:0e:ee:e0:21:e7:56:40:8a:
81:cb:ea:e9:c0:4a:97:28:e3:cb:8e:87:12:2b:5c:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:9E:C2:08:53:C5:BA:C6:C9:63:6E:EA:62:F6:4F:EF:FE:0B:D9
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c8:c6:42:9e:58:61:1f:c4:b0:06:ce:e5:7c:e7:ce:ae:3b:
98:c3:7e:53:57:43:70:3e:51:f9:f2:c0:43:16:88:ac:7d:46:
29:88:c8:32:02:82:65:94:42:01:26:d3:3e:4c:18:d1:ac:a5:
50:43:7c:62:12:62:1f:aa:2a:b7:a1:48:69:78:1e:b2:72:b9:
df:f7:33:fd:c0:e3:c8:d1:0e:07:21:a5:7f:2c:83:13:9c:08:
29:de:4d:6c:db:7d:65:e9:06:da:c0:af:98:ba:0e:c0:2d:ce:
a5:97:b6:9d:6a:75:95:40:bc:1c:0c:73:2d:de:c6:4a:38:c9:
51:fe:72:cd:c5:94:d3:97:03:f7:f3:e6:d8:c0:fe:da:ad:14:
cf:05:e7:a3:9d:1e:50:5c:a9:1e:e6:2e:5d:f3:a8:28:ff:50:
27:70:ec:53:c1:c1:68:a6:6c:60:2b:d9:73:b9:5a:c4:cc:77:
eb:43:9f:4e:45:f5:21:e5:b0:90:fe:5d:87:a5:2e:32:53:4c:
bf:9f:4e:e0:a1:d6:16:a9:9a:0e:78:6f:ee:d3:ce:4e:bb:2a:
44:66:10:ad:2c:ba:cb:c8:10:55:a0:02:3a:6e:e1:68:a9:06:
de:e2:cb:08:aa:28:21:7c:0e:2e:93:8e:b3:ee:37:6e:6a:1c:
91:7b:48:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:03 2026 by rpki-client