Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: UEEz5XwgHO+Cav+OMPb9dWs6nAevpvavEdU1lEaJRRY=
Subject key identifier: EF:DF:80:FD:B7:5E:1F:F8:5F:E9:12:BD:DB:D3:21:3B:6D:0F:34:EC
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019D382E4E8903E5185FE56FCA73C99BF04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 1369
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: cbodo78pwl91XutUx+Eg3TFQci9tK5fnZ3NbNpcvbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4e:89:03:e5:18:5f:e5:6f:ca:73:c9:9b:f0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=efdf80fdb75e1ff85fe912bddbd3213b6d0f34ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:a5:56:0e:0a:c9:d8:9d:b3:ab:50:03:b4:
75:7d:fb:c2:ff:77:d2:17:df:3c:53:7f:c4:04:2c:
50:5b:83:53:63:73:8a:71:89:9e:18:51:93:37:f5:
42:2e:bb:52:96:24:d3:ca:19:e4:92:71:e5:da:b0:
e7:b6:22:63:47:a6:01:8b:9a:57:b5:45:48:a4:89:
3d:27:7c:63:48:f2:a2:b8:7d:3e:a2:09:e6:76:f7:
04:fd:f9:d9:e0:7b:2d:26:e9:8b:22:e6:3a:98:ba:
6f:0c:d9:e6:5c:61:9b:69:49:22:6c:34:be:44:f6:
05:bd:7b:8d:d8:3d:3a:c6:65:43:29:f9:d3:bb:09:
89:4f:06:88:33:0b:0a:3a:96:91:c6:1c:da:08:d6:
6e:a3:10:7d:f3:08:cb:80:27:f5:e2:33:f9:58:9f:
0e:c4:4c:8b:b3:4b:a6:21:59:a2:42:51:0c:93:32:
3c:45:5c:65:39:ce:69:b4:37:cc:6c:d9:6b:70:62:
ea:4e:41:53:1a:87:a5:48:0d:17:ab:7c:2b:7a:aa:
14:a9:36:1e:3b:d3:d8:37:21:9a:5d:d8:6e:40:3a:
df:92:60:6e:b2:31:30:a1:29:41:db:da:7b:47:4b:
bb:36:9c:02:2e:3e:d6:c1:53:05:8d:89:a6:6e:ff:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:80:FD:B7:5E:1F:F8:5F:E9:12:BD:DB:D3:21:3B:6D:0F:34:EC
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:13:fe:89:e1:ec:0b:55:02:cf:22:03:e6:f9:8a:60:2a:
b0:ba:5b:50:81:f1:b5:f8:98:cc:5f:d6:aa:de:a6:fa:12:e8:
44:8f:3e:38:68:c8:d1:d8:35:3c:60:64:9e:5e:54:79:96:0b:
9f:4b:d1:eb:16:fd:0d:02:66:a6:81:c9:f2:a7:79:31:7e:31:
96:a3:c4:0a:14:9b:24:8d:8c:11:96:22:7a:95:bd:36:39:68:
d5:f4:b4:cb:7f:83:f5:1e:7e:59:92:4e:57:78:86:d3:c1:0b:
e7:f8:7c:f8:56:a9:bd:8a:d7:d5:ca:af:0a:31:3b:b2:2f:a0:
b9:fd:58:ef:22:1b:ab:db:01:e9:a5:9f:d5:1c:b1:78:5b:21:
c4:de:9f:06:e5:1f:9a:89:7c:e3:67:16:f6:73:c5:ae:70:5b:
d2:8f:38:e5:4b:34:1a:64:d5:65:f5:0f:ce:12:35:fa:fe:94:
61:79:a1:be:5b:33:7c:c9:0c:85:3c:d4:81:4e:c0:fc:03:9c:
66:85:43:28:13:a7:c2:9c:04:77:d2:37:e5:9f:cf:3a:85:5f:
ec:69:6d:4d:f6:73:b1:2b:0a:4b:f8:af:0c:c7:b5:e4:b3:88:
db:e3:65:bc:1d:57:5f:56:f1:f2:56:80:c7:b2:3a:28:e2:e3:
2a:1a:da:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lk6JA+UYX+VvynPJm/BMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjYwMzI5MDYwMDUxWhcNMjYwMzMwMDYwMDUxWjAzMTEwLwYDVQQD
EyhlZmRmODBmZGI3NWUxZmY4NWZlOTEyYmRkYmQzMjEzYjZkMGYzNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUSlVg4Kydids6tQA7R1ffvC/3fS
F988U3/EBCxQW4NTY3OKcYmeGFGTN/VCLrtSliTTyhnkknHl2rDntiJjR6YBi5pX
tUVIpIk9J3xjSPKiuH0+ognmdvcE/fnZ4HstJumLIuY6mLpvDNnmXGGbaUkibDS+
RPYFvXuN2D06xmVDKfnTuwmJTwaIMwsKOpaRxhzaCNZuoxB98wjLgCf14jP5WJ8O
xEyLs0umIVmiQlEMkzI8RVxlOc5ptDfMbNlrcGLqTkFTGoelSA0Xq3wreqoUqTYe
O9PYNyGaXdhuQDrfkmBusjEwoSlB29p7R0u7NpwCLj7WwVMFjYmmbv9UNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/fgP23Xh/4X+kSvdvTITttDzTsMB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsoT/onh
7AtVAs8iA+b5imAqsLpbUIHxtfiYzF/Wqt6m+hLoRI8+OGjI0dg1PGBknl5UeZYL
n0vR6xb9DQJmpoHJ8qd5MX4xlqPEChSbJI2MEZYiepW9Njlo1fS0y3+D9R5+WZJO
V3iG08EL5/h8+FapvYrX1cqvCjE7si+guf1Y7yIbq9sB6aWf1RyxeFshxN6fBuUf
mol842cW9nPFrnBb0o845Us0GmTVZfUPzhI1+v6UYXmhvlszfMkMhTzUgU7A/AOc
ZoVDKBOnwpwEd9I35Z/POoVf7GltTfZzsSsKS/ivDMe15LOI2+NlvB1XX1bx8laA
x7I6KOLjKhraqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:14 2026 by rpki-client