
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: 3Jc8UDO4ATYISNSOj2i/9+1sp0poo7pD8sdAaadJ3L0=
Subject key identifier: A6:9A:06:6D:58:C5:6B:D8:95:55:B0:99:A3:9E:FD:67:1F:8E:AA:E0
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 01A001DCC93AAD9DD0C2A7B867737EA0AC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 20:00:41 +0000
Manifest this update: Fri 14 Aug 2026 20:00:41 +0000
Manifest next update: Sat 15 Aug 2026 20:00:41 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: iyRTNrCS2LXiXFfjG74PYk/CCGnt4UlRVSCk9sn0R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c9:3a:ad:9d:d0:c2:a7:b8:67:73:7e:a0:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Aug 14 20:00:41 2026 GMT
Not After : Aug 15 20:00:41 2026 GMT
Subject: CN=a69a066d58c56bd89555b099a39efd671f8eaae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:61:95:81:04:85:31:eb:a3:a0:11:eb:7c:
c1:d3:da:d0:9e:af:e8:86:97:a9:80:e0:69:1d:b4:
5c:f0:e0:12:10:17:ff:b6:fd:df:fc:6a:26:2e:b0:
77:79:2a:17:e5:d0:22:3d:ec:9c:66:a0:bb:e9:31:
18:38:2d:63:e7:ab:8f:58:43:cf:91:da:51:53:65:
66:a8:c2:9b:98:19:5c:7f:c6:fe:4d:bb:2f:ae:2c:
7d:01:c6:3e:81:2f:f3:e0:18:e7:d1:ef:b4:ec:91:
39:2e:93:29:c3:01:a6:2e:b2:cd:5c:b6:e6:56:d3:
35:32:8c:0c:68:af:a3:88:9b:0c:fd:9f:2b:cb:41:
50:c8:f8:9f:ea:d0:ce:21:95:ea:d7:4c:35:ab:86:
12:96:bb:51:1a:dc:a1:14:d9:8a:ee:0c:e4:f9:bc:
c2:a2:22:21:c5:71:42:d1:b0:5a:a3:20:f3:52:45:
19:47:b9:3e:20:cb:be:55:b2:8c:7f:96:9f:93:d4:
5c:a8:c3:54:7c:5c:fb:91:79:17:b4:77:9a:b0:1c:
3e:5e:e9:e7:4d:86:2a:07:7b:fc:e3:58:ae:55:73:
6b:68:be:1d:e1:6b:33:c4:ab:a6:ee:13:f3:ff:f4:
fa:18:7e:2d:44:0a:49:00:62:73:38:c3:9d:d0:c8:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:06:6D:58:C5:6B:D8:95:55:B0:99:A3:9E:FD:67:1F:8E:AA:E0
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5f:2b:ae:71:36:6b:5b:ae:49:8d:ad:93:3f:8b:09:3f:ef:
c9:aa:05:49:a9:8e:a9:3b:62:c5:eb:7d:7b:c0:85:a9:cb:5d:
de:06:f6:52:d5:56:85:73:7c:63:4c:45:c5:5c:d3:37:e4:68:
a1:43:c3:20:2a:12:d1:5e:9d:75:2f:c9:6a:b1:f3:22:f9:b1:
ef:57:09:07:3f:29:db:f5:bb:cd:6b:73:2e:c4:30:c2:48:d5:
3f:72:d6:ac:65:1d:a1:37:94:9e:6b:1e:7a:8c:61:5f:ec:34:
5b:4b:32:cc:08:0e:af:93:18:c3:c3:8a:1d:79:6e:a3:9e:03:
f3:1b:f1:96:bb:8c:d6:1e:fa:08:06:4e:89:28:21:b9:5f:ae:
e6:af:d0:4a:85:48:9f:20:3f:e4:84:f8:b1:2c:6f:f8:ad:ff:
e6:42:72:30:e7:cd:ed:bd:01:d8:47:55:ff:e6:d6:a7:5a:03:
a2:b5:5b:dd:e7:f4:0d:42:a3:c7:f0:d4:06:4f:9f:29:b4:70:
cd:a8:83:5d:94:d0:a1:ba:a0:a6:62:58:e1:2d:92:45:af:68:
74:72:2e:b2:b5:63:7c:57:bf:e7:6b:7a:44:fd:24:27:eb:98:
99:04:46:e9:4f:50:06:f7:c2:ad:1f:ea:95:22:43:79:17:0a:
1c:af:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:09 2026 by rpki-client