Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: D+Msa3yAaJ0LxGwQ9oluoDbYTFZa9v0DXwW+/amPycY=
Subject key identifier: 36:BA:A0:B4:96:7D:0B:35:AA:D8:D1:23:95:FF:25:9D:6C:70:5A:DC
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019D28166AB4686991D2F83AE9A8ECEC654A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 11B0
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: k9tIQW2vl8sCKD59D8BTOJt3PsGlofrGKx2KDumdjkU=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6a:b4:68:69:91:d2:f8:3a:e9:a8:ec:ec:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=36baa0b4967d0b35aad8d12395ff259d6c705adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:55:73:1f:9f:2d:1a:8a:74:f5:ab:79:b9:
cf:04:cf:db:c9:73:2f:ba:09:0b:89:21:c7:5a:f3:
c5:12:1b:98:fa:c9:42:99:4b:bc:da:42:82:6d:eb:
99:68:27:b8:29:f5:e9:a3:23:34:42:f0:d6:ba:7c:
03:0c:da:8f:00:d4:e1:bf:e7:0c:6d:83:d4:d7:b9:
ec:60:01:d2:48:91:a6:be:97:bc:34:a8:a9:0f:86:
94:5d:2c:07:75:cd:3c:0b:7c:a1:1e:41:03:c5:ca:
1c:18:db:14:b9:1a:e8:03:3e:50:93:0d:10:7e:89:
98:05:0c:ac:dc:61:d6:85:3c:46:fc:2a:26:14:37:
b1:77:a4:df:73:58:7c:8e:01:72:d1:fb:3d:ee:4a:
5f:6f:cf:74:2a:06:c5:93:0a:4e:5c:0d:d4:60:88:
b1:7e:8d:b5:0a:e3:0a:39:c7:98:23:1e:f2:ae:64:
0c:39:7d:df:56:d4:66:b1:3c:51:5c:b6:7e:5b:db:
e8:9d:d5:ca:a8:da:84:78:92:d8:34:9c:34:c5:8d:
90:69:e1:4b:e5:a3:72:9a:9b:5a:05:37:4c:00:4c:
3d:a3:4a:06:1b:d4:82:76:56:75:e7:f6:f9:9f:96:
93:01:d6:19:0a:19:82:44:cb:af:11:97:35:ae:e4:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BA:A0:B4:96:7D:0B:35:AA:D8:D1:23:95:FF:25:9D:6C:70:5A:DC
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:70:c3:e4:32:42:c4:29:13:91:56:5e:4e:ac:b2:0d:00:c9:
25:16:8d:ed:c8:69:9b:8b:56:f3:95:97:05:23:48:6e:4c:a2:
cb:c8:79:aa:50:e8:6a:59:98:40:89:a2:94:14:10:20:de:e8:
96:d5:a0:f4:9a:03:20:ef:f4:da:f4:32:fa:00:1f:41:aa:26:
a7:84:c9:c9:44:6e:cd:d9:d4:ee:83:90:7a:12:d7:fb:59:66:
35:d0:1d:5d:a4:00:b0:19:06:39:5c:0a:0e:25:f6:a5:57:ef:
ec:a8:d1:43:ba:2f:58:34:24:7a:e0:3e:d0:00:32:48:b4:29:
1c:c4:53:e0:3f:53:e1:50:ee:ef:b2:cf:0b:7b:2a:38:43:af:
b5:10:28:2c:ac:49:58:86:b8:1b:11:77:67:7e:2d:f5:2c:3b:
9b:a8:13:40:30:76:ae:b1:f4:99:87:69:a0:7e:d3:df:86:a8:
10:00:2f:14:ae:08:ad:4b:8b:b3:df:ac:0f:af:a8:ff:e0:8c:
6c:a0:37:13:74:e0:d6:45:b4:05:b9:ad:f1:49:ba:a1:a3:2d:
ed:70:c8:f9:59:d6:cb:c5:30:b9:21:36:37:35:04:d7:e0:f4:
6c:4f:97:a5:4a:08:c5:e5:d0:05:46:10:d2:9e:1b:ac:65:48:
d1:ba:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:45 2026 by rpki-client