Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: xhSjL9XbW0kzqFthvr6sYHzMbNWgo4ZO1pfdh86CX2E=
Subject key identifier: D3:C0:5C:95:98:7A:8A:6E:31:DD:39:48:57:A8:3F:85:18:B1:E5:8C
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019E1EA2F25BDBF96DC298F635BC04092F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:00:55 +0000
Manifest this update: Wed 13 May 2026 00:00:55 +0000
Manifest next update: Thu 14 May 2026 00:00:55 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: VtCkqemNWqLUPc39sPmfPZ3rwq791mNJNBTNv5fweAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f2:5b:db:f9:6d:c2:98:f6:35:bc:04:09:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: May 13 00:00:55 2026 GMT
Not After : May 14 00:00:55 2026 GMT
Subject: CN=d3c05c95987a8a6e31dd394857a83f8518b1e58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:84:b3:9d:3f:fd:b7:8f:0c:5a:88:37:52:
79:e7:67:a4:9b:59:f5:91:c3:fe:f1:73:96:69:b5:
87:70:7b:f3:ca:6f:f1:58:8a:69:5a:20:8b:d4:c1:
83:88:05:2e:55:51:24:68:d6:54:5c:cb:b7:4c:93:
3f:b1:f9:ce:1b:c2:f3:e8:68:c5:4a:90:69:59:a3:
52:df:84:0e:f2:43:d9:48:1f:10:35:13:e9:88:e1:
53:42:5a:57:14:25:a0:09:e9:2f:0e:f7:d4:ef:8d:
b3:3b:6e:d8:66:79:3e:c8:37:e5:f7:20:72:9f:fd:
0d:79:4d:2a:94:b6:57:85:de:9c:b2:f8:ec:46:ad:
80:9d:cf:2c:e6:2c:5d:16:9e:e1:43:61:fb:e7:da:
d6:8d:73:a2:42:40:27:2f:bc:82:da:7f:5d:1b:47:
5d:95:e8:58:c6:88:4c:6f:51:52:1e:61:e7:18:98:
84:ae:90:01:b3:da:4d:33:44:99:6e:3a:71:d6:2b:
57:ff:94:43:c0:f5:21:5c:5e:40:6c:fd:ed:ba:17:
b5:7b:89:ea:e0:f2:0c:7c:d3:7d:4b:16:0e:db:c8:
c3:59:62:bf:aa:ce:d2:be:0d:30:b8:62:62:15:e8:
56:9e:6a:21:34:ff:f6:c9:ce:1a:37:47:59:57:01:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C0:5C:95:98:7A:8A:6E:31:DD:39:48:57:A8:3F:85:18:B1:E5:8C
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:6b:7a:b2:1b:5e:98:34:25:91:7f:2a:46:40:dd:12:97:
de:ca:b7:45:b0:3a:00:7c:72:49:bf:21:f1:a4:a8:55:64:86:
b9:45:e3:95:d9:a8:03:b3:a4:3f:cc:00:7b:ea:1c:ec:f9:2c:
73:c9:6d:33:52:1c:d0:28:50:0f:99:cd:b0:2b:df:5f:a8:76:
cb:9e:4f:17:07:5a:9e:07:35:2a:e3:36:c4:a3:47:77:02:42:
78:03:53:2f:11:eb:34:3b:3b:16:fb:e7:2c:1b:d2:6d:9b:21:
20:b1:c9:13:b6:8c:0c:f8:2a:d5:d3:6b:87:98:e2:d5:16:5d:
a8:e3:94:fe:27:5c:11:8c:47:c1:76:08:0a:25:aa:d2:e1:d5:
01:7f:61:cb:d0:20:6f:c2:8a:f7:63:77:b6:a9:48:da:1e:92:
f6:0a:d7:b6:26:d5:2a:5b:4b:1b:fb:ad:00:7b:04:c9:49:09:
fc:44:20:09:9c:9a:82:be:27:b6:6e:e6:b2:56:1f:b2:30:4a:
ca:43:89:3b:2b:d2:62:da:73:60:96:49:ee:ee:82:ea:0f:12:
9a:df:1b:68:13:4b:87:95:55:76:27:f5:39:0f:07:2b:28:09:
93:08:eb:e4:e6:91:36:3a:00:dc:27:55:d6:0e:ab:70:67:11:
17:38:40:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:51 2026 by rpki-client