
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: pekzALC4ljHzU8kH4urc/EJqJ4+RUaRnMA6VH2qUeEs=
Subject key identifier: 62:72:C8:6B:0B:C3:1F:C1:61:D7:51:3A:0C:D1:92:C9:EF:75:90:68
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 019D378986955518CE93CE2FC49F035C8545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 0B8B
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: OI678exd-nLeHUEfOxB3Wwb9ZJI.roa (hash: WlEEPa3tPqSDyIk1vz7Wm/A/Yv8DcUi3nrYAumkqlDc=)
2: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: 4BssFUlVCn15IjMLZh1RoRLU72ih7BEBOSGN6KztWeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:86:95:55:18:ce:93:ce:2f:c4:9f:03:5c:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=6272c86b0bc31fc161d7513a0cd192c9ef759068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:db:df:f6:2a:e4:fc:b2:57:1c:dc:01:45:
99:a8:ba:90:c7:93:60:c8:c7:38:b2:78:bd:27:34:
67:94:91:16:69:2d:67:0d:cb:d1:08:66:de:02:a6:
ca:39:c4:9b:a4:42:41:03:e5:c6:82:77:37:bc:cc:
29:90:0c:08:53:87:b6:42:8e:45:5d:dc:86:33:57:
f9:03:d5:59:45:42:07:f0:d3:bb:c8:a9:f2:bd:08:
c4:dc:fc:6b:2c:37:d2:94:33:b7:f2:74:94:c9:a3:
69:17:3e:a8:36:d3:a1:a3:19:a7:b4:e3:33:89:1d:
9f:32:29:49:9b:07:61:d6:e4:12:08:0c:68:52:09:
7e:71:2d:5c:cf:72:0d:d3:15:c6:98:02:f0:35:cf:
3d:f1:7e:ea:8d:c5:2c:7e:87:69:a4:4a:08:0a:cf:
74:df:cf:ba:ad:5d:cd:2f:68:7b:e2:9b:2b:35:cf:
f5:e7:f6:8e:d7:8d:f8:c0:f5:0d:76:7b:24:fd:a7:
42:1e:8e:42:07:01:10:fe:0f:17:b6:c1:18:b4:69:
ed:da:47:96:40:0d:5a:3b:b6:1f:ce:10:b5:91:e2:
17:18:e0:cd:a0:30:c4:93:f2:cf:94:5e:7f:0d:b4:
7a:43:ca:b1:a8:1e:e0:04:83:8e:5f:83:66:3e:37:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:72:C8:6B:0B:C3:1F:C1:61:D7:51:3A:0C:D1:92:C9:EF:75:90:68
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:ef:ab:df:68:53:f1:ef:71:f1:56:50:93:cd:4e:b6:7b:
f7:e5:7c:b8:b2:c3:76:fa:27:97:2c:94:53:1b:a7:27:ff:b3:
01:d6:a2:90:b9:12:af:80:13:ea:49:91:1b:8f:10:37:56:8a:
23:2c:94:3d:f6:d3:b8:54:ec:7e:7f:14:c6:b2:e1:be:f7:54:
3c:6f:eb:5d:39:ee:12:d4:80:62:69:dc:e2:1c:1a:4a:45:9f:
96:5f:5b:53:53:d9:61:73:ed:0c:da:f9:f0:99:af:b9:9b:d1:
11:28:1b:d4:ad:00:b8:f0:88:7c:c9:35:58:1a:7a:f5:13:eb:
e6:3b:20:53:b3:4e:7d:27:44:48:45:9f:55:76:15:a0:79:fe:
e2:55:1c:c5:14:da:ad:cf:a8:ec:27:1f:63:e8:ec:68:e3:d7:
10:53:e3:e7:84:2c:8e:e8:8a:14:fc:98:0e:56:9c:91:f5:e6:
7d:23:59:5e:4b:d9:b5:53:03:2d:f8:8a:cc:1e:f1:60:9a:f3:
10:01:46:b4:5e:e7:5a:eb:c4:63:39:69:de:11:0b:53:85:f8:
6b:98:2b:b7:c4:00:ab:e8:74:af:b1:77:dd:30:3a:ab:bd:9d:
03:c5:a3:af:e4:96:84:31:79:e1:6b:3e:ed:e9:2b:f3:69:58:
2f:48:74:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iYaVVRjOk84vxJ8DXIVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MThjMzZkMDQxODIxZjg2YjM4ZDMyMjNkNDNmZTVjZGIy
MDExYTAwHhcNMjYwMzI5MDMwMDUyWhcNMjYwMzMwMDMwMDUyWjAzMTEwLwYDVQQD
Eyg2MjcyYzg2YjBiYzMxZmMxNjFkNzUxM2EwY2QxOTJjOWVmNzU5MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGLb3/Yq5PyyVxzcAUWZqLqQx5Ng
yMc4sni9JzRnlJEWaS1nDcvRCGbeAqbKOcSbpEJBA+XGgnc3vMwpkAwIU4e2Qo5F
XdyGM1f5A9VZRUIH8NO7yKnyvQjE3PxrLDfSlDO38nSUyaNpFz6oNtOhoxmntOMz
iR2fMilJmwdh1uQSCAxoUgl+cS1cz3IN0xXGmALwNc898X7qjcUsfodppEoICs90
38+6rV3NL2h74psrNc/15/aO1434wPUNdnsk/adCHo5CBwEQ/g8XtsEYtGnt2keW
QA1aO7YfzhC1keIXGODNoDDEk/LPlF5/DbR6Q8qxqB7gBIOOX4NmPjcNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJyyGsLwx/BYddROgzRksnvdZBoMB8GA1UdIwQY
MBaAFHQYw20EGCH4azjTIj1D/lzbIBGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQt
NGI4MWQ2MmMzYjUzLzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQtNGI4MWQ2MmMzYjUz
LzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzHvq99o
U/HvcfFWUJPNTrZ79+V8uLLDdvonlyyUUxunJ/+zAdaikLkSr4AT6kmRG48QN1aK
IyyUPfbTuFTsfn8UxrLhvvdUPG/rXTnuEtSAYmnc4hwaSkWfll9bU1PZYXPtDNr5
8JmvuZvRESgb1K0AuPCIfMk1WBp69RPr5jsgU7NOfSdESEWfVXYVoHn+4lUcxRTa
rc+o7CcfY+jsaOPXEFPj54QsjuiKFPyYDlackfXmfSNZXkvZtVMDLfiKzB7xYJrz
EAFGtF7nWuvEYzlp3hELU4X4a5grt8QAq+h0r7F33TA6q72dA8Wjr+SWhDF54Ws+
7ekr82lYL0h0hQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:40 2026 by rpki-client