Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: K/JqDPq9gbKvQ0kVcSHQxD2IyGTrdFq2G9JYKvjRCAc=
Subject key identifier: 80:CE:FA:2E:EE:C2:E6:95:23:E0:4E:3B:EE:DA:31:DD:50:6C:CA:6E
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019F8F102EDFAF1B611931E7F144E5A79C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 0BEF
Signing time: Thu 23 Jul 2026 13:00:30 +0000
Manifest this update: Thu 23 Jul 2026 13:00:30 +0000
Manifest next update: Fri 24 Jul 2026 13:00:30 +0000
Files and hashes: 1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: k6lQYXivGg1K/nQNkyAgYiF16N9EJJ0cwGMlVbGU+Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:2e:df:af:1b:61:19:31:e7:f1:44:e5:a7:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Jul 23 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=80cefa2eeec2e69523e04e3beeda31dd506cca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ac:ba:16:59:0c:d1:eb:60:5e:33:a3:1c:01:
59:b6:67:16:2a:b0:b8:1c:aa:a4:35:35:60:ec:49:
7e:f2:f6:ee:d2:d4:c3:2c:d4:ba:a6:db:0d:05:fd:
5e:22:50:df:e2:e9:7e:c7:1e:11:d6:70:da:ce:66:
d4:2d:d8:00:f2:cc:56:a9:f3:6e:40:44:31:dd:9c:
d5:d0:d3:ff:f3:13:87:b6:15:bd:b4:30:59:69:89:
7f:f8:b4:aa:83:b3:a6:f6:39:7e:08:70:83:52:13:
4c:05:c4:cb:37:5b:5b:f9:d9:1e:30:67:85:56:10:
fd:83:83:d6:5b:4d:e8:cc:28:4d:40:b0:d2:ec:3d:
ac:ad:9e:21:68:43:20:54:51:40:ca:40:2c:2e:ab:
77:b2:0e:7a:f4:de:95:4d:3b:b9:9a:0e:b4:a5:cf:
7c:7c:59:6a:c0:9d:dc:fe:96:f1:78:eb:da:04:76:
94:fd:5d:a6:19:e1:30:1a:8d:5e:e7:fc:3d:29:c9:
18:92:8f:91:7e:b5:f4:0c:24:60:fd:6f:45:27:e5:
69:53:92:37:a8:da:84:b3:13:03:6e:5e:aa:ac:9f:
9b:cf:be:67:3b:d4:e2:88:82:cd:de:48:d4:47:e6:
42:a7:e0:73:26:56:94:ff:a2:d5:29:e4:59:c2:43:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:FA:2E:EE:C2:E6:95:23:E0:4E:3B:EE:DA:31:DD:50:6C:CA:6E
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:91:42:21:c7:ba:e6:fb:39:39:37:5b:87:ec:57:40:e1:
17:49:fd:27:2a:52:c0:7e:df:86:c8:35:46:1c:1d:b6:3e:e8:
22:dc:4e:43:82:bc:5a:a5:7e:f3:34:fe:5a:0f:28:2d:aa:17:
c5:4b:74:7f:46:c3:c4:4d:07:08:71:5c:47:fe:bd:ba:1b:d1:
0a:ed:6b:ea:34:0b:fc:1c:85:19:47:f5:69:33:50:11:3f:22:
c8:26:a7:58:a6:10:84:7a:63:db:81:98:a5:12:17:00:61:b6:
ac:b3:9c:71:51:ff:36:f0:5a:97:69:82:1a:de:12:fc:45:d9:
2a:ce:00:54:e8:9d:bf:57:04:13:6f:4e:d6:42:2c:45:6c:3a:
ac:27:67:fe:76:ce:5f:16:64:f2:69:58:54:5d:21:9b:f4:ea:
0d:19:8c:db:2c:a6:67:3d:ac:ff:83:5b:3f:3d:dd:a6:dc:f1:
bd:30:ee:d0:66:4a:29:50:61:e9:22:e1:b4:15:40:87:b7:7c:
5d:c4:e0:be:b3:c6:c9:79:a9:ac:94:be:e8:5a:56:cd:67:5c:
bc:5d:68:da:31:7b:46:af:2a:ac:d9:ba:0c:ee:dd:5b:25:78:
f6:ca:0e:6a:bd:7c:76:69:23:bf:65:a4:7b:15:94:b2:d5:94:
78:d4:3d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEC7frxthGTHn8UTlp5yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjYwNzIzMTMwMDMwWhcNMjYwNzI0MTMwMDMwWjAzMTEwLwYDVQQD
Eyg4MGNlZmEyZWVlYzJlNjk1MjNlMDRlM2JlZWRhMzFkZDUwNmNjYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ay6FlkM0etgXjOjHAFZtmcWKrC4
HKqkNTVg7El+8vbu0tTDLNS6ptsNBf1eIlDf4ul+xx4R1nDazmbULdgA8sxWqfNu
QEQx3ZzV0NP/8xOHthW9tDBZaYl/+LSqg7Om9jl+CHCDUhNMBcTLN1tb+dkeMGeF
VhD9g4PWW03ozChNQLDS7D2srZ4haEMgVFFAykAsLqt3sg569N6VTTu5mg60pc98
fFlqwJ3c/pbxeOvaBHaU/V2mGeEwGo1e5/w9KckYko+RfrX0DCRg/W9FJ+VpU5I3
qNqEsxMDbl6qrJ+bz75nO9TiiILN3kjUR+ZCp+BzJlaU/6LVKeRZwkN7rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDO+i7uwuaVI+BOO+7aMd1QbMpuMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9mRQiHH
uub7OTk3W4fsV0DhF0n9JypSwH7fhsg1Rhwdtj7oItxOQ4K8WqV+8zT+Wg8oLaoX
xUt0f0bDxE0HCHFcR/69uhvRCu1r6jQL/ByFGUf1aTNQET8iyCanWKYQhHpj24GY
pRIXAGG2rLOccVH/NvBal2mCGt4S/EXZKs4AVOidv1cEE29O1kIsRWw6rCdn/nbO
XxZk8mlYVF0hm/TqDRmM2yymZz2s/4NbPz3dptzxvTDu0GZKKVBh6SLhtBVAh7d8
XcTgvrPGyXmprJS+6FpWzWdcvF1o2jF7Rq8qrNm6DO7dWyV49soOar18dmkjv2Wk
exWUstWUeNQ91w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:35 2026 by rpki-client