Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: Fisll/MGulUkG1yyPb85I0dTEqWnBXj+kfGwoPYE6+0=
Subject key identifier: 71:6B:13:EC:5F:2F:20:97:07:61:42:3C:CB:81:2B:F1:BF:1D:7C:95
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019D37F6F1BB041F9C818E2C82F2D8DAB701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: X2rGLba2PhHCVWc6LEsg92QgyWcoa6plWXcn92fHs4k=)
2: lyF2q1wLFWmF4Bje0J65OKCZKw4.roa (hash: nUHyFMygTv/krY1cfqzTeSySMum5LGIyQeqthF8Cr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f1:bb:04:1f:9c:81:8e:2c:82:f2:d8:da:b7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=716b13ec5f2f20970761423ccb812bf1bf1d7c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:33:96:d6:9f:e3:62:d7:06:9a:59:67:71:
da:ed:74:f3:2f:c7:bf:b6:6d:ef:e4:21:64:08:3e:
e7:3f:fe:c7:2a:64:bf:3b:5a:bd:ab:b0:d0:e6:b9:
72:27:18:ab:46:31:9b:eb:d5:61:03:d3:69:d6:01:
4a:f2:d0:d8:fb:d1:48:e2:c9:74:43:c1:92:a8:ea:
b0:55:c7:44:29:6e:69:71:78:63:76:77:d7:59:6b:
c2:32:10:2c:7f:fe:5c:bd:1d:91:ec:96:ac:b9:d2:
27:20:6b:73:48:94:1e:0c:b7:d8:26:96:d3:50:7d:
19:a5:25:cf:2c:23:f0:a0:7d:92:47:4f:bb:1a:78:
88:46:2e:84:d1:0b:3f:9e:49:c1:22:1d:7a:3e:e4:
33:e3:cd:cf:c5:8c:67:5d:35:7d:22:b1:e3:a3:85:
dd:87:ba:22:76:4a:57:19:21:96:dd:70:04:2d:0f:
72:f2:b8:48:ae:57:43:68:05:be:38:90:82:3b:a0:
b5:ea:d0:b9:65:fe:bd:5f:12:01:d3:a3:6f:55:0e:
61:9c:b1:8c:fe:a8:10:9a:9a:e3:31:12:ad:67:db:
19:6e:1f:fe:cc:95:0c:06:49:ee:4f:16:21:fe:43:
43:d3:e6:2d:77:74:ec:06:36:70:80:f6:ae:82:24:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:13:EC:5F:2F:20:97:07:61:42:3C:CB:81:2B:F1:BF:1D:7C:95
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:4b:e6:54:45:a2:a4:5a:b5:5a:ba:d2:1e:59:c9:30:79:
94:19:18:1e:e4:24:eb:c2:06:a2:6a:0b:14:ce:25:86:f4:32:
31:4e:11:e3:be:73:7f:04:f0:b9:8e:32:ea:96:62:9d:67:e0:
af:47:25:80:34:e2:cf:27:7d:06:28:81:fd:cc:7c:95:1a:20:
5d:4f:00:be:75:a5:f6:80:93:02:94:8a:99:e0:5c:32:37:90:
0f:29:63:57:1a:ad:87:20:9b:bc:2b:92:1d:36:be:3f:ed:f1:
1f:f7:96:ff:4b:27:c8:68:18:62:dc:18:d4:b0:68:84:95:0d:
b9:9f:b4:13:35:11:d1:a3:06:b0:a7:14:b2:da:ba:6b:4c:1f:
8e:3a:70:d4:d1:77:96:5c:70:e7:ac:79:71:d9:a6:55:5d:7e:
9c:57:ed:f3:bf:93:11:56:6c:74:c7:75:28:a9:ad:31:8f:07:
0f:12:d3:bc:87:62:54:9c:2b:a4:b3:86:df:b4:6a:b3:08:71:
56:7c:39:fa:43:f1:87:0a:e5:c7:f4:95:3c:00:2d:d8:81:6b:
f0:c8:66:1c:4b:f9:12:65:a8:64:10:23:6b:03:e3:7c:90:77:
4b:39:93:f5:55:a5:00:b2:00:1a:c5:ea:41:17:68:82:0f:2b:
95:31:bf:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vG7BB+cgY4sgvLY2rcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy
NTE0MmIwHhcNMjYwMzI5MDUwMDIzWhcNMjYwMzMwMDUwMDIzWjAzMTEwLwYDVQQD
Eyg3MTZiMTNlYzVmMmYyMDk3MDc2MTQyM2NjYjgxMmJmMWJmMWQ3Yzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtREzltaf42LXBppZZ3Ha7XTzL8e/
tm3v5CFkCD7nP/7HKmS/O1q9q7DQ5rlyJxirRjGb69VhA9Np1gFK8tDY+9FI4sl0
Q8GSqOqwVcdEKW5pcXhjdnfXWWvCMhAsf/5cvR2R7JasudInIGtzSJQeDLfYJpbT
UH0ZpSXPLCPwoH2SR0+7GniIRi6E0Qs/nknBIh16PuQz483PxYxnXTV9IrHjo4Xd
h7oidkpXGSGW3XAELQ9y8rhIrldDaAW+OJCCO6C16tC5Zf69XxIB06NvVQ5hnLGM
/qgQmprjMRKtZ9sZbh/+zJUMBknuTxYh/kND0+Ytd3TsBjZwgPaugiRMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFrE+xfLyCXB2FCPMuBK/G/HXyVMB8GA1UdIwQY
MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt
MTM2YzlmZmNiODJjLzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj
LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2VL5lRF
oqRatVq60h5ZyTB5lBkYHuQk68IGomoLFM4lhvQyMU4R475zfwTwuY4y6pZinWfg
r0clgDTizyd9BiiB/cx8lRogXU8AvnWl9oCTApSKmeBcMjeQDyljVxqthyCbvCuS
HTa+P+3xH/eW/0snyGgYYtwY1LBohJUNuZ+0EzUR0aMGsKcUstq6a0wfjjpw1NF3
llxw56x5cdmmVV1+nFft87+TEVZsdMd1KKmtMY8HDxLTvIdiVJwrpLOG37Rqswhx
Vnw5+kPxhwrlx/SVPAAt2IFr8MhmHEv5EmWoZBAjawPjfJB3SzmT9VWlALIAGsXq
QRdogg8rlTG/bA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:59 2026 by rpki-client