Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: uFfudEZy9vWvgSRd2MbA8FBO8XVvkQk5Jb5HDPS5qLQ=
Subject key identifier: 6A:82:26:E7:97:62:88:64:4B:CD:5C:04:1D:8C:43:89:B7:C9:CD:E3
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019F190CCC225CC1B456701CDB43F42A54B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 15:01:36 +0000
Manifest this update: Tue 30 Jun 2026 15:01:36 +0000
Manifest next update: Wed 01 Jul 2026 15:01:36 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: xKtTm86fwbvKaHIVNakzsjhWzKgy8R6EbmXSLZ8qPJk=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:cc:22:5c:c1:b4:56:70:1c:db:43:f4:2a:54:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jun 30 15:01:36 2026 GMT
Not After : Jul 1 15:01:36 2026 GMT
Subject: CN=6a8226e7976288644bcd5c041d8c4389b7c9cde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:75:61:cd:74:f2:de:ed:0c:5d:3e:97:cc:
ac:e8:e0:56:1d:c6:f0:4d:32:66:1a:3f:1a:7d:53:
d4:a9:34:bf:87:f6:41:6b:25:88:34:a1:0a:f3:5d:
54:08:6c:02:33:12:b7:08:26:af:ed:8a:7b:83:fc:
58:e8:33:06:7e:cd:a3:30:a3:92:f1:20:e2:e5:81:
0a:64:aa:92:0f:f1:a5:d1:d9:2c:50:3d:b4:fe:f5:
0d:a6:27:37:dd:02:00:10:40:fc:d7:02:ad:61:01:
68:8d:4c:20:92:7b:09:13:c9:e6:9d:7b:a0:2c:35:
c5:a7:f7:3b:4b:c6:39:de:15:5f:a5:24:e1:7b:c4:
06:fe:2b:46:aa:02:b9:26:2b:0e:96:44:3b:49:a5:
64:37:2e:11:82:96:ba:7b:f3:f7:d3:18:71:3e:a1:
06:d9:6d:92:6f:2d:31:c2:c3:63:d4:35:a3:bf:0b:
d8:95:68:ae:7e:59:53:8a:4a:a9:b2:87:2a:d5:4b:
50:98:84:79:d1:3e:4c:d5:67:dd:30:da:af:6b:b6:
cb:56:ab:aa:0e:e2:41:e1:72:a2:da:cb:f2:e8:41:
ad:c7:e9:ea:be:da:2b:69:c2:a7:ef:40:83:61:84:
e9:bb:72:14:e0:bc:d6:06:ba:72:29:80:fc:aa:ed:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:26:E7:97:62:88:64:4B:CD:5C:04:1D:8C:43:89:B7:C9:CD:E3
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:46:56:99:08:63:49:49:44:fc:54:c1:2b:5e:05:b7:8b:4f:
b3:03:75:c5:44:29:88:47:4b:29:e3:e1:73:f6:23:38:73:62:
49:35:01:97:7c:65:87:13:85:1b:67:7a:4f:e0:d4:5c:c5:2d:
eb:1e:e1:65:8e:34:25:f1:84:e8:79:89:c8:de:60:67:8c:c8:
e5:45:b0:85:c4:b2:0b:9d:53:84:f6:29:c7:54:9d:45:5a:60:
ca:17:c7:f9:2e:41:3e:20:84:74:29:3d:b0:44:bd:0c:65:00:
f5:ed:6b:e7:28:f5:11:7e:fe:f6:8e:92:66:fe:44:5b:f8:74:
79:26:a9:b3:81:b1:2a:64:bb:9f:8c:66:37:1f:25:19:b9:67:
28:39:b4:7f:05:84:ea:0b:47:dc:d5:56:b3:8e:a2:52:0d:2e:
e9:c8:8e:fb:f6:d6:c6:e5:da:dc:98:ff:4b:b7:77:56:e0:13:
35:21:7b:0f:62:70:7a:21:4e:cd:da:66:0a:f1:45:6b:68:77:
56:9f:0b:b5:27:85:84:01:3f:f2:83:ae:4d:28:d9:fa:bf:d1:
09:d4:d4:f5:14:c0:8d:24:6d:68:8e:e3:bb:75:fd:fd:75:8b:
6f:56:e0:03:1f:25:f7:da:3a:03:99:6f:bb:a0:3a:75:2a:7e:
73:e3:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:18 2026 by rpki-client