Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: h5w+Ns14sbYN1KdTsJk+cokdhucrVo4HYndUVcpLyag=
Subject key identifier: 1E:36:15:C0:C6:97:7F:90:43:E5:F5:89:3D:BD:F7:F3:34:33:09:53
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019E1DFE0D194415B99A45651F0003CD3B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:00:49 +0000
Manifest this update: Tue 12 May 2026 21:00:49 +0000
Manifest next update: Wed 13 May 2026 21:00:49 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: +2pXiJOZ4npmKJgFVzXX9JH6+4Qlmo4IA0edF1YIfck=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0d:19:44:15:b9:9a:45:65:1f:00:03:cd:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: May 12 21:00:49 2026 GMT
Not After : May 13 21:00:49 2026 GMT
Subject: CN=1e3615c0c6977f9043e5f5893dbdf7f334330953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:4a:45:43:53:aa:e6:a1:42:38:04:d8:d7:
96:27:53:a1:be:0b:13:1d:62:bd:f7:2b:c3:0e:e5:
76:5c:5e:fc:af:a0:70:81:7d:70:33:47:c0:45:6d:
71:19:2d:5e:78:0a:3a:3d:b8:72:b9:4a:a0:c0:52:
77:18:56:d4:9f:1d:8b:f6:5a:5a:43:4c:66:65:cd:
e1:6a:fd:86:14:b0:a6:83:eb:e5:6e:dd:71:9b:d7:
94:3c:87:79:d6:09:c9:b0:00:18:aa:81:a0:14:3a:
6b:26:8c:d4:a0:bd:ae:05:c8:7f:7f:3c:5f:0d:01:
07:cc:5c:d8:fc:b7:64:5f:83:57:06:0c:44:35:98:
78:76:06:a4:ab:bc:5d:0c:0b:98:74:f2:b4:2f:62:
1e:0b:62:01:1c:a4:27:f5:80:e2:24:7b:4d:67:76:
ea:9c:c3:70:8e:ac:9e:6f:0a:f6:22:60:0c:7b:48:
f7:b6:de:27:64:1a:e5:9d:20:ac:a8:23:24:cf:ba:
5a:2a:e1:09:96:ca:fa:46:d9:f7:fb:12:f6:43:dd:
01:3f:a1:af:0b:65:5e:86:79:dc:db:57:c4:87:6e:
9a:bc:29:63:8e:c9:8e:2d:c7:63:fa:f4:c7:08:89:
d6:7c:66:a2:37:71:2c:50:b5:26:db:46:91:9a:c8:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:15:C0:C6:97:7F:90:43:E5:F5:89:3D:BD:F7:F3:34:33:09:53
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:84:dc:bb:10:49:cf:0b:fc:28:8d:cc:1a:bb:30:cf:8b:46:
5b:22:66:91:ab:bd:95:e3:1a:36:bb:96:52:22:5d:ae:2f:0a:
62:9e:1a:c2:19:04:34:14:83:11:36:c6:91:2b:cd:a0:8a:e5:
76:c7:e6:1d:df:5b:9c:a3:e5:3a:61:c8:4e:24:f9:6a:3e:4c:
d8:63:ea:dd:2e:45:50:c3:95:7d:30:82:b5:14:45:3a:dc:20:
35:3f:a4:5a:c6:36:1a:eb:3a:fc:1b:40:cf:96:76:32:22:6d:
a7:21:66:4a:18:cc:c8:38:43:74:88:85:3d:de:80:19:a8:b2:
e7:c5:4f:79:4c:09:16:1c:47:5f:4d:34:ed:9e:65:0d:1f:b6:
17:aa:56:e8:b7:8f:78:f4:06:8d:11:8e:0a:fa:b2:19:e2:fa:
cd:75:0d:e6:cd:f0:92:20:c1:54:90:a3:db:dd:c1:bc:92:9d:
ad:1f:c5:76:82:89:29:1f:7b:76:bf:67:4d:ac:8c:db:b5:58:
5d:ac:7f:88:ed:9e:2b:70:9a:7e:ee:2f:49:4e:58:d1:bb:3e:
36:18:20:e3:88:ac:b0:7a:59:46:72:c7:c2:5e:2d:e8:c4:4b:
14:89:67:fd:96:90:ed:99:9e:af:d7:ed:ef:4b:87:13:d6:db:
a2:91:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:32 2026 by rpki-client