Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: j7NVxHDnfACdK7RkOJOFaxpfagCl6R1thMO1cg8t6K8=
Subject key identifier: 36:E1:65:9A:7D:BD:1F:4A:6E:96:79:53:68:18:24:3A:0C:9A:A7:7C
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 019D333EA2A74F2709667616A5C20AB4C652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 03ED
Signing time: Sat 28 Mar 2026 07:00:35 +0000
Manifest this update: Sat 28 Mar 2026 07:00:35 +0000
Manifest next update: Sun 29 Mar 2026 07:00:35 +0000
Files and hashes: 1: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: 6RHaXZgFCmRwoSNfFMrQgu+C9LGuXtm0fLUXjfi20Ho=)
2: sSTPNFsIM_pP58lAmJ2VifEkHkE.roa (hash: U/3F8egAN1yDpn1UU3R15xmn8D/CQ/5823ShE3x+1Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:a2:a7:4f:27:09:66:76:16:a5:c2:0a:b4:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Mar 28 07:00:35 2026 GMT
Not After : Mar 29 07:00:35 2026 GMT
Subject: CN=36e1659a7dbd1f4a6e9679536818243a0c9aa77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:e1:00:d0:77:e5:57:f5:3b:dc:f8:3c:56:
35:11:4a:2c:03:fb:e3:6f:51:ba:aa:5b:d1:dd:c5:
c8:24:0f:4d:90:7e:83:fa:c9:b5:57:dc:ef:1b:3c:
6c:f5:0e:fc:f1:aa:ad:f8:d3:f9:2f:39:95:96:c8:
d7:87:fa:4b:9d:27:ac:6e:94:96:36:c3:c2:5b:27:
dd:fe:25:61:5d:35:f5:6d:80:91:12:a2:48:4e:9e:
d2:6f:94:1c:a9:b5:f7:b5:eb:74:f0:fb:4e:dd:ac:
03:5c:8b:42:9c:d5:72:ca:04:39:1a:99:f2:b0:af:
bf:4c:81:c2:e0:5e:cc:52:15:80:b1:bc:f8:37:4d:
9b:ab:61:13:93:06:40:62:f2:69:35:8d:85:3b:95:
a9:d7:c7:58:ce:62:10:df:d8:c0:2d:99:d3:47:87:
55:c0:0b:9e:0d:47:6a:74:90:52:e3:66:dc:da:fa:
af:b8:04:96:b1:52:f3:95:8b:22:66:e5:a2:73:5f:
82:20:c9:fd:64:d8:3b:b5:cb:5e:b6:a2:c5:cb:b6:
f7:92:ba:2b:ca:fb:4b:9b:69:04:d4:18:7d:93:94:
af:63:27:07:49:fe:66:18:9a:b4:8d:9e:97:6f:d2:
ac:48:9e:f4:75:80:8b:b5:96:99:51:41:8a:13:e2:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:65:9A:7D:BD:1F:4A:6E:96:79:53:68:18:24:3A:0C:9A:A7:7C
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:79:3c:59:ce:48:ec:b3:8b:bb:14:9b:e2:70:e7:65:a1:
83:37:4b:f6:f0:57:d3:8f:0e:14:25:76:9f:91:dd:49:ac:00:
44:7a:4e:5c:0f:c5:99:a0:00:0e:1f:2b:99:bd:77:70:b4:9d:
ce:60:89:ac:b6:ff:1d:19:45:f4:3e:9f:f5:94:c2:70:fa:78:
79:a8:1c:bd:5f:1c:7b:0e:89:7a:e1:35:c1:28:ff:79:36:e3:
3d:7a:8f:81:6b:14:8a:f1:01:48:f9:34:d8:9b:98:d8:77:bd:
56:1a:8f:29:0f:9c:9f:0c:04:c9:ea:e1:1f:02:f0:83:a0:b4:
58:22:d9:25:91:64:2a:a9:dd:e3:c0:03:fc:29:35:4a:c6:3c:
d5:5d:3e:d7:a9:7b:37:a3:3b:ff:83:db:d7:8f:d8:67:5c:44:
90:2f:37:67:6b:8e:59:65:25:ce:c8:a1:62:58:4e:8d:bd:10:
c7:fd:3a:12:ed:97:93:bb:47:d0:ee:ce:4f:fe:56:eb:9c:bd:
7c:93:35:c5:af:80:40:88:ca:a3:9d:99:ea:7e:4c:48:7e:a4:
9a:0f:7b:ba:6a:87:3c:ef:4e:84:b7:2d:27:8e:aa:5d:06:15:
e0:35:c3:a9:ad:ab:c7:f2:de:8a:f0:de:c4:d3:ab:6a:78:ce:
c0:18:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:06 2026 by rpki-client