Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: h+tpZanwAKq4B06t2SB/upeJpPTTvplj96uwIqTGaX4=
Subject key identifier: 4A:BD:B5:E4:B8:27:47:E9:82:22:38:4E:31:4F:86:2E:8D:B7:95:57
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 019F189ED84DAFB4F828EF148114F63FC96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0F8F
Signing time: Tue 30 Jun 2026 13:01:30 +0000
Manifest this update: Tue 30 Jun 2026 13:01:30 +0000
Manifest next update: Wed 01 Jul 2026 13:01:30 +0000
Files and hashes: 1: AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa (hash: IbeU1AeOys6rseJf5ugRnLAWWP/7mZIxuUtqX7netkk=)
2: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: YfcMsY+o+kENPEfaxva0bl3k7oKr6D7T0hYAcGNUCWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:d8:4d:af:b4:f8:28:ef:14:81:14:f6:3f:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Jun 30 13:01:30 2026 GMT
Not After : Jul 1 13:01:30 2026 GMT
Subject: CN=4abdb5e4b82747e98222384e314f862e8db79557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:c1:ce:a0:07:cc:16:b7:df:71:8c:50:58:
42:e9:ed:ae:36:9a:0a:77:64:e2:9a:5f:31:ea:f0:
f1:58:09:58:14:ad:da:40:be:ae:b3:97:f6:9b:77:
20:57:6a:09:af:e8:2e:f4:29:ba:5a:56:31:a0:96:
2b:15:1d:71:fc:d7:49:7f:65:fa:5e:0e:f7:52:51:
74:c6:60:7a:16:29:0e:2f:37:3b:22:d8:78:b2:5c:
a2:c7:68:05:09:cb:b2:ff:4f:e7:3a:68:11:3f:a5:
75:14:9d:2c:3c:1a:94:57:b3:b8:16:4b:8a:fa:f2:
1d:23:bf:cc:f3:fc:70:21:30:f5:98:7f:b4:fd:28:
ee:12:a8:c8:e7:cb:3f:d5:ff:d7:52:d6:bd:80:e2:
16:99:40:ae:b4:79:e3:ad:c9:77:57:e9:12:e6:0b:
a9:7c:e5:70:39:4a:20:42:cd:4b:68:44:4a:cb:13:
37:c1:54:6b:63:d5:f5:73:79:2c:59:0b:f7:87:df:
9c:cf:6d:69:1f:eb:7a:1e:55:ae:24:c0:47:01:67:
67:1d:4d:bc:9e:9e:fb:ab:60:be:7e:6b:8a:11:75:
56:c8:c5:3b:ce:b1:00:a3:42:dc:01:fd:26:0f:40:
ce:c2:a4:aa:8d:8d:9d:42:d4:5c:6a:11:1c:0c:85:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:B5:E4:B8:27:47:E9:82:22:38:4E:31:4F:86:2E:8D:B7:95:57
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:72:ef:5f:67:2b:bd:4c:ab:eb:ca:d5:38:a3:fb:7f:de:a3:
ea:45:7e:95:42:73:bd:e9:66:48:fd:03:14:57:18:6e:e1:ea:
c7:db:e3:a0:67:76:f7:93:3f:a4:57:b0:ae:d5:aa:68:38:9c:
ea:5a:76:5c:f1:72:4c:51:05:e3:4a:1b:4c:ed:99:fd:b0:29:
97:1d:a5:be:2a:be:22:2d:f8:55:a1:8c:a7:01:0b:ad:bf:29:
26:0d:56:17:07:54:48:00:66:88:b2:3a:11:f1:fb:fd:9e:e9:
47:95:92:2d:6d:90:ac:5e:97:46:e5:52:00:07:c0:a8:f4:b7:
45:53:fb:0b:1b:a5:b5:62:66:aa:95:c1:5f:ea:e2:38:97:e0:
a0:15:d7:bb:3f:89:94:b1:21:c0:d4:7d:b4:92:9d:1f:a7:fa:
99:8b:df:c4:5c:ca:43:00:73:7b:b3:0c:f4:e4:4d:d7:f0:8c:
60:07:12:69:36:fb:da:12:3d:da:f9:d3:be:b0:15:b6:30:af:
2c:41:71:fb:76:88:2b:16:65:74:f7:1f:27:0e:b4:27:c8:24:
29:dd:c7:25:b6:7d:69:3e:3c:b3:16:f4:bc:c8:f5:0d:b3:ed:
f7:78:c7:e1:64:08:da:97:09:56:ab:8a:f6:94:1a:e2:18:67:
15:22:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:31 2026 by rpki-client