Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: mkwrOVh824IK+u372FXVn1zTVbQ3za+5W7vMuKP1D14=
Subject key identifier: BC:C6:77:4A:3B:52:68:28:42:FD:4F:CE:B9:94:40:A5:5E:43:65:0C
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 019D265F99431F1AF68E4F58012DCC1C66DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 05A0
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa (hash: l3PwDzdUu8sAqi7VNj0H3fSsXYCfHAzMO+z2/d+bwfM=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: bJTZ+5Veg9vcottB4bE7f8bPmKuXZDSnAXvHiFs/WJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:99:43:1f:1a:f6:8e:4f:58:01:2d:cc:1c:66:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=bcc6774a3b52682842fd4fceb99440a55e43650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:31:59:84:80:24:14:9d:80:cc:4b:7f:6b:
b4:34:d8:2a:fa:8c:5e:e1:4c:34:09:a5:3d:f2:cb:
d8:29:14:f0:37:04:3e:3b:5a:cd:d3:75:60:e8:54:
a5:50:5a:5d:71:86:50:15:84:5d:8e:10:42:f4:71:
44:f2:6b:6c:00:62:b0:ab:87:fa:68:c9:47:c9:f9:
be:39:72:45:78:5c:3c:0c:ce:22:d4:65:28:31:2e:
da:bf:ed:a1:51:99:a3:c4:ee:8d:0f:72:01:82:f2:
82:75:89:a3:8d:15:cb:a4:96:22:db:15:4c:6b:6b:
55:72:c4:50:fa:23:8c:f3:75:92:fe:3c:b0:fb:fc:
1f:24:e1:8e:1c:49:f3:74:14:11:ef:7f:0f:47:a6:
65:9c:0f:95:e5:20:ed:17:5d:84:df:76:f5:8d:4d:
5e:7c:ad:1b:3b:86:99:16:64:49:24:f2:6b:f3:bf:
36:24:32:05:fb:a3:cc:c1:bd:9a:f9:05:6e:ee:69:
81:7f:e4:78:3b:ac:d2:1d:13:54:be:e2:7d:e3:51:
7b:5e:53:60:12:57:64:90:83:1b:91:11:7e:af:2c:
5a:b5:9e:df:db:75:d5:8d:45:fe:49:de:0e:bd:84:
96:a4:02:c5:04:e8:4e:ba:03:f6:15:1e:8e:f5:2b:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:77:4A:3B:52:68:28:42:FD:4F:CE:B9:94:40:A5:5E:43:65:0C
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:95:f2:4d:45:27:4b:6d:32:1d:cb:fc:87:ab:6c:9c:b0:
33:13:41:fe:dd:ac:d8:6c:bb:ef:db:33:e7:1e:71:74:d6:65:
ca:cf:e4:2d:8e:7b:c4:e1:78:12:64:31:85:1a:75:35:57:50:
e4:b8:9c:61:8a:d4:57:c5:e7:1f:fe:e9:4c:16:13:73:13:19:
63:ee:74:79:26:a8:14:a9:6b:e3:af:db:3c:29:61:5e:3c:13:
d8:43:c8:91:72:5a:06:1d:4b:07:94:a1:c0:8f:32:1e:e1:f1:
22:c9:04:4e:64:7e:4b:e3:99:cc:1e:08:7c:eb:cb:1f:02:d1:
e5:0a:66:0e:c8:8f:7e:16:94:94:2e:ff:93:dd:44:cd:6e:fb:
c8:9a:08:38:c9:c6:5e:16:c7:19:e6:33:a1:cd:37:aa:39:96:
f5:32:e8:1a:72:ca:e0:1e:ab:6c:2b:50:4c:17:98:f6:db:84:
61:de:27:28:f2:c3:df:d4:ea:ef:19:01:31:64:b6:1d:85:2d:
07:d2:46:d6:3a:1c:d5:d2:ef:66:88:07:b8:24:c4:e3:40:60:
3c:b3:55:83:83:cd:27:e9:0a:47:ce:6d:90:3c:b0:fe:d3:71:
1c:b4:4a:ed:5a:1f:38:3a:4b:2f:ca:8e:bc:69:e5:90:5a:5e:
9e:22:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:08 2026 by rpki-client