Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: Qs0buwu/h+tlCyXI+BzyVLQqmkdUarklKbiTsbe+KVM=
Subject key identifier: A9:E1:6F:DD:08:31:6A:92:64:69:DF:82:C1:BC:AC:6A:28:B2:5E:DE
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019F18311AB5A124E47C95906EE64A68ED7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 11:01:38 +0000
Manifest this update: Tue 30 Jun 2026 11:01:38 +0000
Manifest next update: Wed 01 Jul 2026 11:01:38 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: 9BziyD0SfRlojdGgWbUqkm8Nre8iYrTeU+uM7/e/op0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:1a:b5:a1:24:e4:7c:95:90:6e:e6:4a:68:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jun 30 11:01:38 2026 GMT
Not After : Jul 1 11:01:38 2026 GMT
Subject: CN=a9e16fdd08316a926469df82c1bcac6a28b25ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:fa:90:d1:dc:d6:8c:9c:78:11:8d:6c:27:
21:f3:d1:08:1e:67:e7:51:69:67:c3:82:eb:3d:a1:
16:b2:ec:e3:ac:7e:2c:4a:fa:b9:98:97:b6:19:f6:
5e:04:19:cd:40:b9:98:13:38:69:ec:f1:29:70:84:
ff:ca:b5:de:d3:31:92:ce:87:05:df:e1:7e:91:ea:
36:12:43:a8:89:98:cd:52:c0:75:c3:1e:93:53:d7:
5a:40:33:4b:57:77:0d:7d:8a:7f:bf:07:90:e7:3d:
1b:10:07:8a:a2:72:2d:68:72:1e:45:7d:55:42:50:
f8:c1:b7:4c:20:f4:e5:6f:f9:9e:c6:51:ee:3d:8c:
63:b4:9d:57:5b:ad:df:4f:68:5b:38:5f:cf:46:71:
8e:d2:d8:c1:2d:61:5a:26:dd:82:ef:e4:5d:9b:6a:
aa:28:8c:ca:72:55:d4:31:dc:17:58:ab:66:46:4a:
e5:64:3e:78:37:28:19:d9:2e:91:29:7f:ab:72:93:
73:df:fa:5b:5b:79:9a:8d:c1:9b:cf:3c:29:9b:79:
9f:6e:d5:67:af:1c:8b:b5:05:50:50:36:7f:c5:56:
a1:09:77:4f:90:39:59:3d:6c:76:c5:4c:19:7e:3d:
fb:6c:2f:e3:fd:bb:b6:09:23:9d:96:c3:48:4c:3b:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:6F:DD:08:31:6A:92:64:69:DF:82:C1:BC:AC:6A:28:B2:5E:DE
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ae:a4:51:d2:e3:61:19:19:fd:80:10:f7:55:fc:55:11:32:
84:d5:7c:e2:ca:1d:a6:bf:75:72:99:d4:7f:8b:9f:59:fd:46:
77:d0:2f:94:35:b8:23:06:c3:9c:93:87:e8:5e:7f:6e:ad:7f:
69:fc:0c:6b:81:c3:93:4e:2e:53:65:7a:2a:af:b2:f4:a9:56:
d3:5e:fb:a8:66:ba:07:a3:ff:52:2e:c2:35:dc:29:13:4e:18:
b5:dc:53:9a:ec:52:09:a4:1c:d7:e5:58:81:6d:c7:35:86:e6:
46:38:bf:6b:83:32:6b:7f:19:47:41:e7:20:28:73:6a:82:95:
7d:a4:ce:d2:eb:8c:a5:d7:e0:3c:2e:1c:58:0b:b8:26:ee:72:
78:55:3b:0b:16:cd:08:39:2c:cb:95:b1:36:71:3d:05:df:e8:
60:65:d3:c1:58:62:31:a3:76:08:86:8a:f7:41:ed:b1:aa:26:
a2:78:ab:13:99:76:e6:db:e1:a2:51:94:1f:4f:ad:43:01:04:
57:60:37:5d:6e:b6:60:33:18:ce:5a:4f:ed:79:56:d5:2c:74:
9a:e5:ce:d6:05:f0:3d:d8:97:91:36:78:dd:3e:5c:15:9c:8f:
d8:a7:97:64:3d:2e:25:d1:4e:b9:e2:96:6b:bf:ca:ad:51:a9:
81:c9:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:41 2026 by rpki-client