Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File: 26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier: FZANRoCcZCmlFGbn28S6TUEwcOQmi2qfRDwf/szZjaQ=
Subject key identifier: 2A:D8:D2:5E:84:4B:58:A6:FA:91:6A:83:CC:72:7A:2C:8B:43:1F:5A
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer: /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial: 019D382DE2670456D8E84A6FAADD687E96FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number: 0508
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: cQXU6xdhewA81HQOxToXx0THlpagmZup9KgPdUa62sg=)
2: vU7OOAM1oU2KdgtDcq53PB71mUo.roa (hash: bWa7gI9NfYeqeGnGyvEymMLlvAT66yVfsa/6btBaFoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:67:04:56:d8:e8:4a:6f:aa:dd:68:7e:96:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=2ad8d25e844b58a6fa916a83cc727a2c8b431f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:de:f5:28:69:13:71:c6:40:77:ab:6f:24:
7e:96:a7:ae:71:40:d0:bf:3c:7f:ce:bb:7f:da:28:
ab:12:70:a3:ad:a5:c4:8c:36:ca:8d:88:b1:e2:c0:
2f:06:f3:b9:88:d9:4e:78:8f:ba:56:9a:99:08:60:
36:1b:e2:c4:83:0f:61:97:af:4f:b7:de:33:0f:26:
6c:2e:b3:d2:09:ae:d8:31:50:f1:73:76:02:bc:72:
6a:6f:37:64:bd:72:79:76:af:1c:ca:df:9c:e7:ea:
3e:62:36:c7:62:d7:f4:96:49:a6:c3:28:90:e6:82:
26:df:46:bb:8d:e7:e4:5f:a5:48:98:49:e0:f1:13:
d0:29:38:f5:f9:9c:a9:d8:e5:93:7e:cc:29:17:e9:
c5:24:d9:9d:1a:d2:09:ac:1b:a1:e9:db:a8:db:4b:
1a:69:51:df:49:27:ed:6b:00:b6:1a:46:eb:a2:75:
4c:5e:4a:0b:e0:6a:8b:19:e8:16:fa:ae:66:67:e8:
1c:0b:22:4e:c6:8b:38:97:28:1c:e2:92:ce:c9:56:
ba:51:fd:2b:5e:2c:68:1d:12:6f:b5:fb:0d:29:80:
72:c7:25:ee:34:c2:9c:d6:b6:36:c3:06:8c:b8:19:
12:74:05:68:a4:fd:0c:26:37:b4:71:98:3e:71:c3:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:D2:5E:84:4B:58:A6:FA:91:6A:83:CC:72:7A:2C:8B:43:1F:5A
X509v3 Authority Key Identifier:
keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d2:40:68:77:9c:58:e8:a8:c8:73:e3:06:d2:b4:28:f1:00:
c3:e1:be:ea:3e:48:51:2e:f8:8c:25:4b:8c:ae:42:49:a0:f7:
1f:3f:40:f7:85:4e:9b:66:1b:c9:50:32:a5:6f:6d:dd:6f:13:
9c:c5:10:af:a8:b1:9a:86:3d:9a:bf:9e:bd:91:ab:44:e4:56:
56:12:cf:29:cf:fd:24:20:13:96:83:c0:ee:bc:d9:f4:38:43:
c2:c9:fb:eb:62:93:7e:bd:42:68:f4:bb:16:83:37:d3:ed:f7:
ad:de:e2:62:68:e1:d2:9e:7b:84:8a:7b:dc:50:14:f1:07:c2:
a9:98:a7:5a:ef:d7:b0:15:a2:6f:fc:4a:ce:7a:17:49:30:9f:
00:e6:93:00:fd:3b:2d:c5:2f:a4:92:7c:98:43:16:83:60:0b:
01:df:e0:45:61:89:b2:51:35:5c:9d:f8:de:a4:1c:0d:70:f1:
5e:3a:03:54:1f:77:21:42:d3:63:a0:1f:60:6f:8e:c2:8d:cd:
36:b0:3d:b0:09:51:fd:f9:b7:cd:ab:f8:45:53:c3:0a:55:82:
aa:c5:47:1a:82:e4:7c:57:e7:0b:25:34:36:3a:7b:2c:65:3e:
e6:cf:a3:08:36:9b:c2:37:90:6f:b3:9d:e1:04:a3:13:3b:a2:
26:a0:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:59 2026 by rpki-client