Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: NgyZDAJcgS1xmLpEo8ET7h/kTfFeTUoVv21c28jQFo0=
Subject key identifier: 92:78:D0:D3:73:90:97:0D:51:D8:3B:C6:0D:33:E6:97:1B:28:21:82
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019D26CCE10F3FCAE0DA6A0FE79535BA326D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: lr/9q5dkybtZb/QwFJG9o5l46e4DPFrBG3nkIMsmmAI=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e1:0f:3f:ca:e0:da:6a:0f:e7:95:35:ba:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=9278d0d37390970d51d83bc60d33e6971b282182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:b6:03:da:6b:27:a8:f7:a6:84:6d:1a:6b:
57:1f:6e:d5:a8:50:81:79:92:49:43:2e:2a:28:8a:
c7:6b:6b:d5:10:54:b2:29:d6:54:d4:11:9a:fc:97:
99:b4:69:b6:f5:60:5a:b7:eb:86:36:5c:24:c2:5b:
60:34:96:15:42:ac:70:24:50:0d:32:19:bf:8d:4f:
73:d0:83:18:d3:55:0f:48:6d:eb:f6:a2:5e:52:8c:
f1:15:44:0e:7a:8a:1d:b8:8f:0b:d9:cc:99:f1:5f:
2c:95:b0:30:3a:2b:f7:f7:97:e8:9e:7a:36:7b:c4:
c5:86:72:0a:f7:2e:e1:b0:3c:3e:70:ba:92:95:70:
9c:37:db:ec:bc:42:0d:5b:d8:63:b3:c3:61:03:07:
96:67:e7:e6:08:c6:6f:7c:21:50:df:ca:8e:0e:d3:
d0:f7:59:08:59:3a:cb:ec:2f:3f:80:cc:d2:62:c8:
2c:4a:81:ee:38:eb:89:5d:14:51:81:09:de:3d:49:
68:1e:ef:0b:ef:05:7c:80:45:a9:81:4c:d7:f4:f7:
04:fb:25:b8:df:13:6e:ed:5d:db:fb:96:71:88:53:
63:07:16:73:7b:1d:cc:69:87:02:08:e8:18:cd:67:
45:02:a4:37:bb:61:aa:9e:1d:ef:d1:21:15:59:8a:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:78:D0:D3:73:90:97:0D:51:D8:3B:C6:0D:33:E6:97:1B:28:21:82
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c4:a4:31:68:76:63:80:be:56:0b:11:5b:cd:59:b5:0d:b7:
3c:39:eb:84:c5:f4:28:ba:59:80:8f:7f:79:17:1e:56:06:34:
9b:7c:89:92:59:b0:7f:0c:d7:48:83:e5:1b:7a:bf:e7:9c:12:
cf:ec:d4:85:69:bf:c7:f3:7a:6d:4e:53:2c:ba:26:fd:e7:ff:
80:e7:16:f3:db:a6:39:bf:d8:ca:19:67:b9:41:e3:7d:65:9c:
12:e0:3b:11:91:13:f9:a2:39:45:3d:1d:89:d8:32:68:2a:45:
ca:41:f5:f2:31:a4:dd:d9:59:cb:1e:83:a0:9a:94:4c:1b:78:
3f:b5:6c:f1:49:36:a9:82:af:29:1b:34:8f:a6:e7:76:49:83:
ab:50:5a:2d:40:cb:ce:df:78:14:0d:de:68:e3:b4:c7:1e:58:
67:9c:70:87:0c:fb:c2:cd:7f:42:e4:6b:9b:1b:80:b8:e3:16:
d8:ac:2d:2b:12:c0:ab:19:47:92:bf:86:46:6f:38:c5:6d:70:
ac:b8:60:ab:e8:01:da:dd:30:37:48:db:79:bb:63:77:ff:1e:
ba:0c:54:bc:9b:13:47:2a:61:4d:0a:da:60:7c:33:85:cd:63:
c5:5c:30:3f:fe:b5:0d:63:f0:51:3b:2e:76:2c:28:17:bc:69:
4b:d4:71:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOEPP8rg2moP55U1ujJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMTAzN2MxN2JjMTVhN2M5ZDg1Njk4ODdmNWIwNTgzNWNl
MzJkMjcwHhcNMjYwMzI1MjEwMDU0WhcNMjYwMzI2MjEwMDU0WjAzMTEwLwYDVQQD
Eyg5Mjc4ZDBkMzczOTA5NzBkNTFkODNiYzYwZDMzZTY5NzFiMjgyMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9e2A9prJ6j3poRtGmtXH27VqFCB
eZJJQy4qKIrHa2vVEFSyKdZU1BGa/JeZtGm29WBat+uGNlwkwltgNJYVQqxwJFAN
Mhm/jU9z0IMY01UPSG3r9qJeUozxFUQOeooduI8L2cyZ8V8slbAwOiv395fonno2
e8TFhnIK9y7hsDw+cLqSlXCcN9vsvEINW9hjs8NhAweWZ+fmCMZvfCFQ38qODtPQ
91kIWTrL7C8/gMzSYsgsSoHuOOuJXRRRgQnePUloHu8L7wV8gEWpgUzX9PcE+yW4
3xNu7V3b+5ZxiFNjBxZzex3MaYcCCOgYzWdFAqQ3u2Gqnh3v0SEVWYrBxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ40NNzkJcNUdg7xg0z5pcbKCGCMB8GA1UdIwQY
MBaAFAwQN8F7wVp8nYVpiH9bBYNc4y0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMt
OGM1MDAyOTVjYjk2LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMtOGM1MDAyOTVjYjk2
LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMSkMWh2
Y4C+VgsRW81ZtQ23PDnrhMX0KLpZgI9/eRceVgY0m3yJklmwfwzXSIPlG3q/55wS
z+zUhWm/x/N6bU5TLLom/ef/gOcW89umOb/YyhlnuUHjfWWcEuA7EZET+aI5RT0d
idgyaCpFykH18jGk3dlZyx6DoJqUTBt4P7Vs8Uk2qYKvKRs0j6bndkmDq1BaLUDL
zt94FA3eaOO0xx5YZ5xwhwz7ws1/QuRrmxuAuOMW2KwtKxLAqxlHkr+GRm84xW1w
rLhgq+gB2t0wN0jbebtjd/8eugxUvJsTRyphTQraYHwzhc1jxVwwP/61DWPwUTsu
diwoF7xpS9RxWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:51 2026 by rpki-client