Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: WYr2HAQnL5c/Yk2+bL47lg4UPY2/dbFf6SRa7IBo3SA=
Subject key identifier: C7:58:F1:A6:6D:CA:E3:F5:AD:B8:58:30:B0:9C:D2:4E:12:F7:5E:56
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019D28BBCAFD030A2AB19C519265211DC00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 1361
Signing time: Thu 26 Mar 2026 06:01:28 +0000
Manifest this update: Thu 26 Mar 2026 06:01:28 +0000
Manifest next update: Fri 27 Mar 2026 06:01:28 +0000
Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: LcPJbWRr9I4oGQf8v6A4la1lukvoPh55v3XPiiuKDxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ca:fd:03:0a:2a:b1:9c:51:92:65:21:1d:c0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Mar 26 06:01:28 2026 GMT
Not After : Mar 27 06:01:28 2026 GMT
Subject: CN=c758f1a66dcae3f5adb85830b09cd24e12f75e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:87:9d:5a:36:f2:53:b1:6e:e0:d3:1b:c2:
50:db:d7:76:b0:e9:78:4f:fc:49:41:7b:f0:31:a6:
93:14:e1:ef:6c:6d:26:d9:c0:3d:37:ec:a7:dc:3c:
ef:fe:95:06:9c:8a:cb:a0:52:64:5b:cd:2d:1d:22:
c5:40:56:23:d1:ff:38:74:38:29:4e:0b:c5:3b:02:
6d:cd:48:2f:cb:bd:9d:69:34:5b:76:f4:7a:b2:b2:
81:0e:14:22:e7:d1:4f:a1:81:b1:d0:61:72:fd:74:
27:06:6d:a8:21:3f:92:03:ee:eb:22:71:fb:73:98:
ca:38:28:e6:e6:e3:3d:78:19:36:e6:b7:fb:3c:e5:
24:0b:4d:50:03:9d:84:48:bd:c9:1f:b7:c2:3b:ce:
7f:1a:0e:a7:92:cf:9d:7a:2e:fb:9c:7b:80:06:27:
f1:fa:43:85:5c:7d:17:dc:58:27:b3:66:0e:dd:2e:
80:6e:5f:9e:1c:a2:41:00:9a:40:cd:9c:8f:57:30:
0d:ed:ed:2e:b5:02:ab:a5:0a:8b:db:83:ef:6d:27:
0d:75:f5:6a:39:4a:54:25:66:4f:60:bd:c5:85:b5:
58:39:66:28:0a:ab:6e:90:62:48:7b:04:e9:04:2b:
7a:ee:00:57:a9:56:7a:2a:b4:d2:31:b5:0e:20:30:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:F1:A6:6D:CA:E3:F5:AD:B8:58:30:B0:9C:D2:4E:12:F7:5E:56
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:8c:59:9c:b6:12:4f:8f:8d:30:ca:8a:c0:a6:ef:92:74:
0c:68:10:f2:29:a0:dc:d3:5a:9c:9e:4e:0f:ed:d3:a4:e8:b1:
da:4c:49:25:b1:60:68:43:bd:69:2d:83:cb:8a:e9:64:2d:44:
dc:53:93:b6:c3:43:09:4b:75:77:35:8d:3d:85:69:d8:c4:38:
57:2c:ae:d8:18:e0:9f:1d:91:7e:b1:26:5e:29:24:04:f1:c2:
08:07:3b:ce:c9:c0:76:91:ec:93:ce:db:d1:e9:ab:bc:49:09:
95:b1:7c:80:99:c3:6b:7b:4a:9c:54:37:24:0d:47:e3:ff:37:
bb:93:60:2f:96:36:19:92:11:69:05:cf:1d:10:d3:3d:67:0a:
61:67:c5:18:cb:f6:58:d8:57:3d:32:95:6f:0c:b7:22:c3:fd:
c4:bf:59:ca:7a:9d:c0:9c:22:01:5b:79:20:09:9a:c6:b0:cf:
47:48:63:6b:ab:fc:43:18:25:41:0f:75:a7:21:f8:b0:2c:e5:
1d:0a:12:d4:df:0f:56:56:30:72:92:78:b1:c9:a5:4e:49:74:
e8:6f:18:1c:c0:ac:fa:6b:bb:6b:bc:97:c3:76:8a:5f:a4:68:
e9:cf:8a:5c:b7:4a:75:17:0e:e3:44:c6:17:0e:92:de:31:11:
8a:21:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:51 2026 by rpki-client