Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: kreH9i/uWRzihuAcuKTfqXd2EP7sS8cc1q4eqzD2/4s=
Subject key identifier: D0:B5:A2:E8:DC:0A:BB:AF:EF:34:C0:9D:19:96:8B:41:C8:D1:62:98
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 01A17A0438512CB819B37431B72732227193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0EAA
Signing time: Mon 26 Oct 2026 21:00:59 +0000
Manifest this update: Mon 26 Oct 2026 21:00:59 +0000
Manifest next update: Tue 27 Oct 2026 21:00:59 +0000
Files and hashes: 1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: +CyNExPz9uXfloAgnAFT3YHGchltOmO/BGylKYnSULk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:38:51:2c:b8:19:b3:74:31:b7:27:32:22:71:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Oct 26 21:00:59 2026 GMT
Not After : Oct 27 21:00:59 2026 GMT
Subject: CN=d0b5a2e8dc0abbafef34c09d19968b41c8d16298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:17:da:d6:39:e2:98:fb:4f:a9:b9:62:94:
92:34:ea:9b:54:47:34:a3:36:e0:32:1b:14:e0:4f:
5a:7b:b4:bf:9f:23:8f:d5:69:aa:f2:c2:ad:85:76:
35:89:4b:11:c8:08:e6:e3:96:dd:70:0f:e8:7d:e7:
50:f8:f9:75:a0:d1:f2:40:4e:f5:fe:6b:9e:c7:53:
4f:47:4d:cd:61:9e:b9:ae:5e:3a:c3:dc:be:df:6b:
e0:3d:ff:d3:ed:aa:7d:3c:37:3a:ae:f8:cd:b1:47:
2a:b0:45:d4:97:8c:c6:51:2e:91:d2:06:bf:c0:5a:
61:43:78:ed:b7:e9:45:7c:80:4a:14:5c:11:4c:b9:
00:50:ae:f0:e3:2e:61:ca:3c:d9:f0:ee:42:41:25:
f1:72:25:fe:11:06:c1:4f:82:c6:56:14:f0:67:5e:
c6:9a:28:b0:f6:67:6c:f0:db:55:f6:e9:01:55:f5:
28:2f:2b:d2:5b:71:e2:bd:69:3d:dc:b9:41:f7:da:
32:8a:10:bc:b2:9a:95:a7:71:d7:1f:e2:f3:76:74:
6d:33:02:1b:89:c5:59:8f:96:8e:cf:4f:2d:83:ca:
b0:68:5c:16:41:36:6f:28:59:e7:be:e7:f9:92:8d:
c0:d5:36:92:26:3e:67:6e:e4:70:b9:0a:e1:3f:c4:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:A2:E8:DC:0A:BB:AF:EF:34:C0:9D:19:96:8B:41:C8:D1:62:98
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a2:a2:5d:5b:11:9e:b5:ab:c3:3a:3a:03:ed:5b:c7:17:9b:
0c:69:c2:a9:87:12:b8:56:8b:40:b5:b3:8c:5f:e0:e4:d6:9b:
03:3d:a1:2b:bb:cb:d1:ec:8f:de:09:9e:5e:79:e1:ac:3e:cf:
03:72:07:68:0e:41:81:30:e9:b5:57:04:c0:55:eb:65:9a:49:
ff:0e:e3:d7:aa:d3:f6:13:e2:46:7b:cf:d8:5e:37:84:d6:84:
31:c9:e5:ae:f6:a5:68:c0:c3:20:a8:ec:73:7f:4b:ed:95:3d:
c3:ec:f7:3f:e9:f8:7f:7b:20:09:01:bd:c7:85:0c:ac:b0:f1:
69:aa:59:11:51:73:6c:8d:45:9c:91:39:5a:d5:8a:98:8b:ee:
ef:e9:da:ff:4b:bf:84:ed:f3:ac:06:38:c3:6d:83:71:fc:96:
5d:9f:b9:7b:2a:16:da:52:b0:62:d9:05:5e:48:6c:b2:7b:19:
dc:c5:d4:48:7c:38:4c:e8:c8:4e:3e:39:37:a7:15:3c:a9:44:
82:ed:d1:d8:90:de:53:06:69:4f:53:94:21:86:e7:92:42:1a:
53:42:06:a9:b1:4c:bb:a5:52:6a:30:07:0e:b1:00:ae:85:d3:
de:5f:d1:3c:e4:9d:17:dd:7f:9d:32:82:ea:1b:49:33:29:d5:
7c:1b:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:20:03 2026 by rpki-client