Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: OX/ZiIZgczesKRuCFdoBURGKRC8vkNd9e+XClRSZ3cI=
Subject key identifier: 73:C5:94:2E:69:8C:5A:0A:9B:5D:8E:B8:26:EC:3C:6D:80:25:65:43
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 019D3909F27E77A8F6729FE31F2F6DCC00C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: DqknSODSt23jlUvNdiqHo8ETkFplF8vo+J91BtJffec=)
2: lAqIj2UybXhOPBtGQcLNXWIjono.roa (hash: UVYOgTudlzpIM7zdesRsrm334w88DrZr8YDCmf2V4Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f2:7e:77:a8:f6:72:9f:e3:1f:2f:6d:cc:00:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=73c5942e698c5a0a9b5d8eb826ec3c6d80256543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:f9:5b:e6:20:5c:69:ad:71:55:57:8e:7e:
e6:db:9f:d1:39:3a:e4:45:21:f5:55:fa:1d:2a:82:
0c:4b:49:85:c0:d8:76:01:8a:ce:be:21:f8:62:d3:
cd:66:b3:5d:de:3b:90:d3:dc:54:75:24:d2:ca:44:
d6:64:d5:63:8d:b9:44:9e:ed:36:8a:b9:ac:f5:27:
45:2a:ed:50:ed:a7:00:1e:b8:14:cd:e5:56:81:a0:
17:36:7e:e5:5d:4e:b0:d6:c1:67:ec:fb:e5:26:f8:
0a:05:95:b2:66:62:6b:08:a7:62:84:3d:3c:eb:f7:
8a:cf:3f:1d:19:56:38:1b:39:c9:1b:69:59:10:c1:
f1:ac:e3:c0:c5:23:aa:fb:cb:d1:36:d3:be:c9:4a:
79:29:98:c4:ce:c2:8c:10:f7:5c:19:2c:7f:d4:94:
c5:d4:5b:31:82:1e:00:84:c0:f2:5e:78:73:e9:a4:
41:93:71:5e:ad:eb:aa:cb:b5:df:d9:24:6e:ce:46:
fa:31:ad:35:ef:6e:fb:c2:54:65:1b:b2:a3:64:bd:
dc:49:53:b3:57:be:a6:f6:63:e8:b9:f2:e6:a1:48:
8b:7e:9c:b5:2e:49:6f:3d:36:8f:d1:74:8e:f8:e7:
a8:72:df:26:59:a3:e4:f2:36:7e:68:db:40:99:6d:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:94:2E:69:8C:5A:0A:9B:5D:8E:B8:26:EC:3C:6D:80:25:65:43
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:89:b9:95:e8:8a:52:6a:40:45:4d:8c:07:7e:bf:f5:62:d5:
3a:25:37:79:85:06:09:39:62:72:09:b2:c1:e6:16:46:8c:cb:
4c:53:1f:8a:fc:10:53:01:e7:2a:ec:00:fe:ea:8d:79:58:71:
e7:ec:06:18:c6:bc:cf:4d:56:f9:e4:3c:42:e5:da:9f:4b:68:
a3:9c:a9:09:04:d8:77:f4:ac:23:19:b1:52:da:81:50:06:8b:
70:9e:a9:5b:01:68:c3:1a:b2:d1:44:2a:63:16:01:aa:93:72:
07:e7:e0:15:c1:11:0a:12:75:b9:d3:8c:c1:44:4c:c0:7f:9c:
60:98:b5:a5:15:c0:8d:d6:20:16:e4:f0:94:c2:7e:04:d9:b0:
d9:83:bb:07:b5:22:b4:f6:46:a1:0e:57:01:83:69:2e:e4:85:
15:bc:4d:57:e5:03:7b:10:a4:e2:60:3d:fa:be:f9:17:4b:54:
b2:a3:e2:1f:d4:a6:3e:bc:6c:82:1a:aa:2a:69:63:63:81:74:
2f:cf:61:6a:be:70:45:17:73:a2:70:f0:1e:99:8b:d7:11:78:
9d:b5:8c:80:6f:53:14:7a:33:50:20:1a:c3:a2:33:a6:04:9a:
07:35:8f:3a:3f:62:32:79:6c:2c:a0:09:00:0e:a4:9f:25:26:
97:4b:a4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CfJ+d6j2cp/jHy9tzADGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz
NmFkYjIwHhcNMjYwMzI5MTAwMDQ2WhcNMjYwMzMwMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg3M2M1OTQyZTY5OGM1YTBhOWI1ZDhlYjgyNmVjM2M2ZDgwMjU2NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k/5W+YgXGmtcVVXjn7m25/ROTrk
RSH1VfodKoIMS0mFwNh2AYrOviH4YtPNZrNd3juQ09xUdSTSykTWZNVjjblEnu02
irms9SdFKu1Q7acAHrgUzeVWgaAXNn7lXU6w1sFn7PvlJvgKBZWyZmJrCKdihD08
6/eKzz8dGVY4GznJG2lZEMHxrOPAxSOq+8vRNtO+yUp5KZjEzsKMEPdcGSx/1JTF
1Fsxgh4AhMDyXnhz6aRBk3Fereuqy7Xf2SRuzkb6Ma017277wlRlG7KjZL3cSVOz
V76m9mPoufLmoUiLfpy1LklvPTaP0XSO+Oeoct8mWaPk8jZ+aNtAmW0XIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPFlC5pjFoKm12OuCbsPG2AJWVDMB8GA1UdIwQY
MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt
OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4
LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGom5leiK
UmpARU2MB36/9WLVOiU3eYUGCTlicgmyweYWRozLTFMfivwQUwHnKuwA/uqNeVhx
5+wGGMa8z01W+eQ8QuXan0too5ypCQTYd/SsIxmxUtqBUAaLcJ6pWwFowxqy0UQq
YxYBqpNyB+fgFcERChJ1udOMwURMwH+cYJi1pRXAjdYgFuTwlMJ+BNmw2YO7B7Ui
tPZGoQ5XAYNpLuSFFbxNV+UDexCk4mA9+r75F0tUsqPiH9SmPrxsghqqKmljY4F0
L89har5wRRdzonDwHpmL1xF4nbWMgG9TFHozUCAaw6IzpgSaBzWPOj9iMnlsLKAJ
AA6knyUml0ukDg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:23 2026 by rpki-client