Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: scUBRnE5EOFOhqvVe4m3KfDqcuU249EHPo2Wn3J5mA8=
Subject key identifier: A7:0A:0E:A2:5C:62:A8:75:07:D5:0C:45:7A:7D:86:43:23:2F:9E:01
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019D382E916BD38E72852B411C796787136D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: Pp1nE3CQbkmg9UpZ1toatg6kW9scxqUTVNTm6QtoaXk=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:91:6b:d3:8e:72:85:2b:41:1c:79:67:87:13:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=a70a0ea25c62a87507d50c457a7d8643232f9e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:f0:6a:3e:1c:ca:48:5c:48:d5:7e:78:a8:
3d:ee:5e:02:4c:bc:71:88:33:d2:2f:34:76:25:1d:
ba:24:31:87:e6:37:f9:44:1c:09:be:02:07:27:9f:
82:c7:68:c6:bd:39:8d:92:6e:fb:3e:e1:87:63:87:
9f:0a:7e:c3:00:f0:a5:c2:5a:06:6c:b0:77:f7:39:
82:55:79:7b:40:db:cc:5f:04:b5:6a:d7:45:4b:b4:
a2:2b:aa:58:fa:a0:a5:5d:9a:a7:b1:28:2e:d3:5e:
e5:20:99:e3:df:15:54:19:52:f4:93:96:cc:84:cb:
51:54:c5:ba:fd:7c:e3:c8:47:8b:54:06:44:4d:70:
58:7f:ad:8a:dc:95:ba:69:18:9a:0d:2e:98:22:62:
4b:d7:f5:ee:76:ef:2e:84:d4:7b:65:e4:16:b7:96:
4a:14:a5:d0:b2:d9:da:b6:a0:16:60:c0:47:44:66:
69:9d:0c:09:2d:56:3e:f1:8a:58:e3:30:04:5e:18:
5e:c4:23:81:68:c4:53:2e:74:18:c0:b9:a7:b6:2d:
06:ef:67:5b:c8:c5:c5:8b:b0:22:77:23:0a:9c:8a:
35:c2:93:2a:4f:04:6c:46:b6:28:d2:55:a2:59:c5:
c5:a6:64:af:cf:3c:43:64:a2:3e:87:85:61:1d:f1:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:0E:A2:5C:62:A8:75:07:D5:0C:45:7A:7D:86:43:23:2F:9E:01
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cc:b3:68:ef:3a:d3:32:65:3c:c7:b7:1a:d1:48:01:ed:44:
04:fd:d2:3e:27:d9:70:70:07:7d:0a:db:06:a8:bd:7e:33:59:
ff:80:0a:80:5f:d1:07:9c:46:4e:c8:bf:6a:b0:c1:b4:df:5a:
83:3f:bb:81:af:5e:55:7b:da:c1:24:f2:02:b3:ec:00:54:bb:
88:7d:13:72:8b:23:a8:f8:49:6f:58:1b:5c:58:c6:53:bd:e2:
7d:ad:26:03:aa:50:00:5e:73:3e:cf:b3:92:51:97:30:d2:15:
4f:38:d2:fe:76:86:c3:fb:fe:b5:7d:1c:86:cd:91:73:56:40:
4e:64:d6:18:bf:53:54:a0:b9:7d:11:25:2c:4f:ac:83:26:3c:
ba:20:6f:bc:17:2a:7c:1c:86:b1:db:b7:cf:85:52:b9:a3:20:
e5:d7:08:69:34:f1:a9:43:82:b5:f3:b7:9a:c0:4c:11:80:da:
ad:1b:8c:a0:cf:5a:e9:19:77:ba:81:81:9c:48:d2:ca:d5:c7:
d6:3f:4a:81:69:5d:7a:ca:1b:5f:a6:6d:1f:83:ed:f7:f1:5e:
04:8c:1e:16:e6:af:4a:34:67:9a:b1:4f:8d:1d:e6:07:59:6f:
59:4e:71:f9:0d:bd:2a:52:fb:86:d2:3b:4b:38:d3:5d:2c:5c:
5d:d1:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:37 2026 by rpki-client