Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: 2yXnRn4iRx6erJMRZ8luHD3U3UwXuN1g9O8tAtGbAwc=
Subject key identifier: 52:92:CF:C5:B0:31:90:94:19:93:59:C0:13:64:B6:CB:CC:D7:AB:7F
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 019E3229A3EEA70BC38FD87D0E30D7538724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 19:00:50 +0000
Manifest this update: Sat 16 May 2026 19:00:50 +0000
Manifest next update: Sun 17 May 2026 19:00:50 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: nuQazUKgIuBapv8qqhA7ZOl+CeyfK4dJHHDccNZ405o=)
2: lAqIj2UybXhOPBtGQcLNXWIjono.roa (hash: UVYOgTudlzpIM7zdesRsrm334w88DrZr8YDCmf2V4Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:a3:ee:a7:0b:c3:8f:d8:7d:0e:30:d7:53:87:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: May 16 19:00:50 2026 GMT
Not After : May 17 19:00:50 2026 GMT
Subject: CN=5292cfc5b0319094199359c01364b6cbccd7ab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:db:f2:ce:e3:48:89:87:ba:cd:2f:c9:c1:
4b:ff:2e:ce:16:f3:ee:d3:25:ed:0d:49:7b:00:95:
d6:09:59:4c:13:55:d6:b6:ef:c9:9e:56:8d:4d:59:
fc:79:da:49:f7:f2:05:f7:74:48:5f:0e:c4:0b:1d:
23:6e:c9:78:f1:42:50:1d:4a:bd:cd:83:33:29:98:
30:4e:60:ed:07:6f:3d:b9:30:59:93:f4:f2:00:d0:
bf:9b:14:d7:f1:bc:36:2b:71:c7:ce:ce:fa:e8:41:
f5:dc:57:0c:88:38:7d:6d:b7:2d:19:e1:05:ee:4b:
5c:35:d2:c3:df:2b:d0:a8:8d:4d:16:64:4b:78:16:
1f:a1:0f:13:cb:bc:c2:76:54:ad:59:1c:51:0d:9b:
a3:13:14:de:da:53:04:a4:a8:68:96:06:63:99:e8:
ec:7c:e4:e7:19:4d:78:4a:e6:ab:65:c0:fe:2a:09:
c0:09:16:b5:7c:38:c1:f8:e9:c3:ff:80:d1:e5:cb:
00:cb:59:6d:a0:26:17:b7:87:8a:79:cd:71:f6:c4:
c2:d0:0b:2f:db:fc:97:a0:19:cf:06:67:4d:62:d3:
12:83:0f:37:a5:cc:e5:2c:d9:54:82:ae:44:ee:fd:
dd:0d:26:f2:e0:c3:0e:3d:a0:0e:81:6e:a1:bf:89:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:CF:C5:B0:31:90:94:19:93:59:C0:13:64:B6:CB:CC:D7:AB:7F
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:96:6f:d2:2f:0d:8b:cd:5d:1e:8c:82:e6:a4:86:2d:84:
48:e0:d6:2d:63:0e:99:82:ed:04:65:e5:85:0d:d7:1d:c5:e3:
c7:8c:a8:cb:dc:dc:aa:6d:e2:02:b8:2e:7d:90:87:1b:9f:8e:
31:a6:88:76:59:89:bf:de:95:49:68:94:fb:c5:4d:0e:59:6f:
f9:f0:88:3a:4c:d5:82:d0:cf:e3:d6:c9:7a:35:07:7b:4c:a1:
8c:c1:6f:ec:98:8e:e0:a3:83:62:d8:ac:96:eb:5c:69:ec:fd:
0d:b9:b3:6a:14:67:3b:dd:1c:a6:db:04:75:97:94:af:35:9f:
36:b1:ce:a8:fd:80:f4:41:f6:ed:8e:22:35:89:51:80:98:a8:
44:d3:b9:27:9d:44:0c:55:65:4d:65:f8:6e:60:4a:f6:1f:75:
d3:6a:d2:48:52:3b:76:90:d2:8b:84:db:6d:f9:d9:70:6a:67:
07:61:32:59:a3:d2:c7:01:c4:33:30:da:05:b8:20:3b:80:e6:
34:54:03:7e:a1:96:94:cc:ed:c4:bd:14:fa:8b:6d:bd:38:b3:
22:4c:73:fc:82:36:b0:6f:5f:2e:35:0d:41:f5:43:f2:e2:39:
d4:82:a6:48:42:41:76:be:9b:5b:63:d4:39:c1:b3:cf:fa:5e:
cf:2f:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:12:36 2026 by rpki-client