Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: bX/zMnBA3PXUVZjIJzXGa/Vg17OJaPh/WGuRW57oDYA=
Subject key identifier: D9:4B:98:17:8B:45:E0:64:6E:32:F2:4C:A5:B9:4A:79:A3:79:3C:9C
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019D3752B23C7F7F6EB8CB8F77484EA53901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: sTbNTAn2jzUhZJ3VROKFpPDljDeoN5xba2JiCtKQyC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b2:3c:7f:7f:6e:b8:cb:8f:77:48:4e:a5:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=d94b98178b45e0646e32f24ca5b94a79a3793c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:f8:4d:e1:ce:56:e1:a6:da:cc:79:69:67:
fd:6b:67:31:5c:43:ab:97:c5:5f:7a:bd:f1:d8:6b:
2a:8a:31:89:56:60:f8:ae:e3:4b:44:2f:f1:1d:07:
14:4f:e1:f9:b7:36:f5:65:48:e3:85:d9:8c:be:24:
88:d5:39:c9:29:a1:f5:bd:c2:89:02:3f:8a:c0:7f:
56:d3:0a:d0:1e:ee:1b:59:3a:02:d0:f4:59:57:45:
59:04:7c:1b:73:00:fd:34:1f:2b:58:52:16:6b:4f:
48:44:0c:00:b3:16:b8:0c:67:06:d4:60:61:a9:1e:
3a:fe:3a:35:b5:61:94:07:9b:04:f0:e8:90:02:86:
dc:e4:d7:8c:66:c8:61:0c:b6:a6:39:8d:19:c1:e0:
11:1a:81:a4:80:c4:a1:5c:84:8f:72:85:be:d1:26:
8b:84:eb:c4:c8:70:62:95:90:b3:4f:6b:4d:50:e0:
fe:96:d4:0f:f0:80:0b:38:f0:cc:a7:63:37:fe:15:
2d:cf:29:c6:b8:aa:31:4f:cf:b9:eb:a7:fa:39:b7:
72:17:c8:4d:87:b9:a2:30:a4:ab:c7:f6:29:62:0e:
17:46:d7:cc:36:08:77:10:54:a8:c7:cd:2a:81:f6:
2a:d3:86:8b:b5:87:c5:f0:65:a6:6f:0c:a8:b1:fe:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:98:17:8B:45:E0:64:6E:32:F2:4C:A5:B9:4A:79:A3:79:3C:9C
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:03:68:31:6e:3d:04:0c:e0:03:21:7b:10:ac:18:b4:b3:20:
d9:bf:c5:83:55:fb:67:ca:4b:40:40:82:86:cf:da:76:a9:d9:
3d:de:7e:f2:91:dd:d4:31:2c:4b:c3:21:fa:ce:84:7c:58:ad:
6a:f1:eb:a9:44:f7:55:c8:9d:9f:55:de:2b:61:e4:19:8a:75:
5b:b8:9c:13:c2:de:2f:5a:4e:02:67:95:e9:0a:46:5f:9e:cb:
53:2e:5e:84:a2:3f:55:84:7b:53:7a:87:19:78:f5:cc:4c:51:
5d:68:d5:6a:db:99:09:c6:41:17:82:ff:d9:62:d0:c2:84:0e:
2d:bb:a0:94:51:a1:16:a7:7d:ab:48:a9:a0:7a:d6:c6:7b:92:
94:02:f7:a1:99:f1:d2:d2:1e:20:c6:d4:7a:eb:21:ba:31:bb:
93:52:88:b5:e5:91:be:ca:79:38:d2:8e:3f:9a:e0:6c:1d:f7:
2f:9e:ca:88:33:ba:ba:84:48:ed:c4:89:61:f6:be:c9:0c:1a:
ff:af:ff:a9:0a:24:e5:fa:92:f2:b6:db:e5:eb:cf:eb:a5:31:
be:96:d7:23:5a:06:79:60:0f:3f:b1:76:e0:4d:af:1e:fd:2e:
18:43:a3:28:6d:83:9f:fc:55:0f:ba:1f:d2:0a:aa:3b:41:1a:
04:2c:3d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UrI8f39uuMuPd0hOpTkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjYwMzI5MDIwMDU5WhcNMjYwMzMwMDIwMDU5WjAzMTEwLwYDVQQD
EyhkOTRiOTgxNzhiNDVlMDY0NmUzMmYyNGNhNWI5NGE3OWEzNzkzYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNX4TeHOVuGm2sx5aWf9a2cxXEOr
l8Vfer3x2GsqijGJVmD4ruNLRC/xHQcUT+H5tzb1ZUjjhdmMviSI1TnJKaH1vcKJ
Aj+KwH9W0wrQHu4bWToC0PRZV0VZBHwbcwD9NB8rWFIWa09IRAwAsxa4DGcG1GBh
qR46/jo1tWGUB5sE8OiQAobc5NeMZshhDLamOY0ZweARGoGkgMShXISPcoW+0SaL
hOvEyHBilZCzT2tNUOD+ltQP8IALOPDMp2M3/hUtzynGuKoxT8+566f6ObdyF8hN
h7miMKSrx/YpYg4XRtfMNgh3EFSox80qgfYq04aLtYfF8GWmbwyosf6hywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlLmBeLReBkbjLyTKW5SnmjeTycMB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwNoMW49
BAzgAyF7EKwYtLMg2b/Fg1X7Z8pLQECChs/adqnZPd5+8pHd1DEsS8Mh+s6EfFit
avHrqUT3Vcidn1XeK2HkGYp1W7icE8LeL1pOAmeV6QpGX57LUy5ehKI/VYR7U3qH
GXj1zExRXWjVatuZCcZBF4L/2WLQwoQOLbuglFGhFqd9q0ipoHrWxnuSlAL3oZnx
0tIeIMbUeushujG7k1KIteWRvsp5ONKOP5rgbB33L57KiDO6uoRI7cSJYfa+yQwa
/6//qQok5fqS8rbb5evP66UxvpbXI1oGeWAPP7F24E2vHv0uGEOjKG2Dn/xVD7of
0gqqO0EaBCw9dw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:32 2026 by rpki-client