Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: M6dg0SVBXdxOxvEFuzpoHbUbj4QSJCwt9T8LeDEocKk=
Subject key identifier: 9B:BC:A9:6B:90:00:52:CB:99:02:FD:4C:EB:6E:06:90:3D:7E:06:CD
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01A1DA93E970F84DB3B87648D36F4D13CC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 15:01:28 +0000
Manifest this update: Sat 14 Nov 2026 15:01:28 +0000
Manifest next update: Sun 15 Nov 2026 15:01:28 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: k7PZE04+QNzbqoS7ajyE1rmNvMny39MqVcJt7Uyvv9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:e9:70:f8:4d:b3:b8:76:48:d3:6f:4d:13:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Nov 14 15:01:28 2026 GMT
Not After : Nov 15 15:01:28 2026 GMT
Subject: CN=9bbca96b900052cb9902fd4ceb6e06903d7e06cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:59:fe:09:54:ec:03:58:96:40:5b:aa:24:
6d:4f:48:9f:90:bd:04:fd:c7:70:2d:25:48:17:1b:
38:8d:de:ac:a8:62:40:4b:fe:48:23:2a:26:d3:f4:
cf:e4:07:20:27:9d:f2:75:0c:e7:61:57:b9:46:3d:
a9:d2:d4:a7:cb:ae:70:17:55:3c:19:1f:24:ea:4e:
63:22:e4:69:75:43:48:ba:84:73:f2:25:98:47:66:
c9:be:3b:5c:3b:54:82:5d:fc:dc:be:80:f6:63:83:
f9:92:e9:a7:ed:99:c2:f6:f1:1b:35:a9:15:ab:48:
df:96:60:0b:93:92:fd:41:b8:53:29:6d:47:12:3d:
ab:b4:71:5d:ab:da:dd:f3:31:87:f8:25:8c:8d:b3:
8d:aa:da:97:5b:d4:fd:82:5f:7a:81:95:1b:12:78:
39:9d:ec:46:83:9e:78:03:98:a7:00:90:9e:df:cd:
9c:72:47:72:83:14:1c:0e:31:75:62:24:c3:4b:98:
ca:a1:0b:f4:46:1f:07:0a:90:33:c9:93:ef:47:8b:
cf:39:b1:94:e4:86:23:70:5f:6d:8e:ed:73:7c:4d:
51:12:ba:7f:9b:7d:bd:b2:d9:e4:f8:14:1b:45:9e:
86:a3:e1:f1:80:a3:7b:28:fb:bc:e3:a9:6a:fe:2a:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:A9:6B:90:00:52:CB:99:02:FD:4C:EB:6E:06:90:3D:7E:06:CD
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:a1:54:07:13:2e:7a:ef:f3:98:8a:c8:29:f8:b9:55:7d:
e1:ed:c8:48:58:1b:ef:bd:91:2a:43:ca:17:90:08:1f:e4:37:
1e:9f:c1:35:26:84:17:57:4b:d6:ee:6d:67:99:0d:6a:43:57:
28:7f:5f:e5:e8:28:88:be:17:c9:bf:e4:83:20:f3:27:d4:48:
0b:c9:cb:92:d7:ba:ae:b0:8e:9f:74:58:cc:ef:79:d7:fc:3a:
ff:6a:a3:d9:96:62:f3:f7:ad:20:23:58:16:df:54:5b:15:e7:
e4:ae:f2:25:d1:14:fe:cc:8c:64:03:6d:8f:f4:8d:be:0d:25:
f6:30:8a:86:40:8f:96:30:6b:39:c3:ca:cf:a5:66:fa:c9:65:
e8:79:09:83:a9:9d:3f:a9:f6:29:4e:ad:02:ec:5e:95:77:0a:
7e:f3:be:ef:f4:40:79:76:78:b6:0a:30:05:7e:f3:e2:26:3b:
aa:52:6c:b9:f5:0b:6c:8e:ec:b7:3f:f7:45:14:38:25:e1:25:
58:26:11:0e:26:25:c6:d7:b5:f8:2a:13:51:a7:64:ca:ce:7b:
ba:99:09:43:40:4f:5e:50:70:cf:ae:10:d8:0a:c2:5a:fe:71:
2e:92:6b:77:9d:29:2d:71:b4:ef:29:90:de:ba:fa:af:8a:b9:
dd:f2:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:52 2026 by rpki-client