Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: wCJdFXJHlkNsgCgzQJExepfS9bdj4436xcvUd8iVexY=
Subject key identifier: F2:4F:81:4B:AE:D0:63:B1:EC:14:F6:05:AB:EE:88:70:C1:55:6D:56
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019D2884D4F99A23CE711ABABCD088569E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: 21dEdElNkV3wCunznBThEBlJcX4.roa (hash: 5wxxdJq/NDV1f9XwNpVa9dOVitTrL0/8VPX3yplDJdQ=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: khcJlEJRH4bX6rsf1+4x83eVGuuYA2YCaPs55ODXwTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d4:f9:9a:23:ce:71:1a:ba:bc:d0:88:56:9e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=f24f814baed063b1ec14f605abee8870c1556d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:26:2a:5f:3a:14:8e:e5:0a:5d:59:0e:01:
74:c9:92:26:08:ff:8c:a3:c1:c9:f8:51:cd:2c:2b:
27:13:4f:02:37:e6:cd:e7:04:b6:f0:94:66:42:ce:
93:54:44:5f:db:84:87:8f:ea:1c:bc:a1:4e:64:61:
52:ec:bb:f4:53:b3:7e:4b:c2:21:9c:73:9e:ca:67:
27:5c:0b:dc:4a:bf:87:be:6a:15:58:14:54:fb:f1:
1c:50:9f:63:98:52:b0:23:d4:c5:f0:ef:a1:0d:c9:
ae:0c:5d:89:44:80:5a:7c:73:f5:32:09:c4:2d:26:
11:d3:cd:79:91:0c:b0:08:bb:7a:8c:ea:a9:dd:82:
bc:9f:d9:97:6c:e7:a9:db:01:f5:bf:45:32:e1:49:
70:e0:27:92:ad:18:cb:8a:a5:4e:3e:e6:2e:b6:75:
8b:53:1e:24:71:f5:c9:b6:4a:f2:63:64:c4:c3:e8:
d6:25:e0:b1:3a:12:af:2f:c8:10:1c:a3:d4:7f:ff:
9b:c8:8b:4c:08:90:25:7e:b3:b4:96:49:2c:fb:bd:
78:e9:69:33:b7:3e:0d:bf:41:65:88:61:bc:9e:f2:
a5:05:98:b1:e2:d0:70:e9:af:07:55:73:94:d8:6b:
ad:7b:ce:2f:69:f9:31:90:fc:cf:5d:29:25:bb:4e:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4F:81:4B:AE:D0:63:B1:EC:14:F6:05:AB:EE:88:70:C1:55:6D:56
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:48:38:91:ea:6e:cc:bc:7b:ae:62:54:8e:38:d3:0e:24:
50:0c:b8:e8:df:55:28:af:b6:dd:6d:c2:16:2f:ef:98:8f:fc:
0b:d2:76:ae:33:62:dd:8c:93:bb:01:ca:a5:6d:1a:a9:d5:8e:
b8:6b:61:9f:2b:f9:06:25:59:42:19:c2:ac:8d:a1:54:06:8d:
92:60:2c:d8:a4:c2:c7:08:2a:62:08:02:b7:68:9d:36:fd:8f:
bb:01:85:9a:a7:f1:94:a2:69:9d:af:83:f5:fa:61:1a:d9:62:
44:d8:cf:b3:b7:2b:73:92:93:8f:60:44:ad:cc:f2:72:3f:b6:
7b:ea:8a:4c:ea:56:34:47:04:4c:6d:16:18:79:ea:ea:64:d1:
17:27:81:b9:97:2b:ff:47:0d:51:18:d6:b2:59:5e:ca:ae:9f:
0b:b8:1d:1c:ec:6b:24:57:59:f6:66:da:15:52:e3:3d:5c:bb:
3a:42:c5:95:81:64:c3:de:a8:6a:a2:47:09:8e:02:92:5a:80:
65:d0:1c:9c:da:69:ca:09:5c:5d:38:ce:d9:dd:2b:3d:b4:27:
18:7b:c0:cb:06:5d:a1:df:5b:65:d9:23:d9:1c:0a:d6:0e:2d:
63:b6:62:3d:ed:1e:9c:74:5b:81:fe:10:70:98:c7:78:1b:38:
4f:74:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:40 2026 by rpki-client