Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: M5MTGahFScK+c2ZdCleiew50OlAPde7kL1LaNwXA8ow=
Subject key identifier: 70:4E:B2:6F:A4:9D:41:A3:62:8E:B2:83:1A:34:20:22:02:FE:60:AE
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019CE55B11AEA7A1CB4DC658C95EECB99E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 0A8E
Signing time: Fri 13 Mar 2026 04:01:16 +0000
Manifest this update: Fri 13 Mar 2026 04:01:16 +0000
Manifest next update: Sat 14 Mar 2026 04:01:16 +0000
Files and hashes: 1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: 8GCGB20DDSYev7/R3BjyG2aJPhCb/lJEyhz5L4M6Uc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:11:ae:a7:a1:cb:4d:c6:58:c9:5e:ec:b9:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Mar 13 04:01:16 2026 GMT
Not After : Mar 14 04:01:16 2026 GMT
Subject: CN=704eb26fa49d41a3628eb2831a34202202fe60ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:20:6b:1d:a2:25:eb:f8:62:8b:5a:2a:a7:
50:d2:32:38:b9:76:c2:37:42:c5:95:80:f6:2b:d9:
18:0e:cb:76:f1:e3:2f:d6:c4:b7:c3:41:ea:01:72:
12:3e:c6:85:c4:b5:1c:8b:9b:a9:53:14:8a:ff:8f:
b7:f3:97:c4:32:ca:ab:4b:39:cb:da:34:65:db:4d:
04:db:f3:a9:80:71:f6:f5:f9:1b:4f:93:51:26:a1:
3d:53:00:69:e8:8c:2c:aa:58:c9:4c:f1:e7:04:14:
ab:1c:22:30:ac:c5:5d:be:13:08:37:db:4b:62:d4:
48:68:d4:9d:92:52:a1:e3:6f:bc:17:fe:66:d4:f1:
e3:1c:b0:ad:37:48:40:6a:75:9a:53:bb:7d:f5:ea:
f5:ef:f3:0a:f2:a1:48:9f:82:45:f5:84:ee:91:50:
a9:cc:8f:7d:81:17:ad:b8:ca:6f:25:8b:db:03:2a:
04:c3:ee:af:e4:98:4f:40:17:ba:5a:dd:51:2f:aa:
04:75:ac:3f:f6:f3:15:7b:17:38:96:78:f7:9b:23:
4e:41:56:ee:82:7a:b8:8f:57:8a:25:88:4a:e3:4f:
44:ef:8c:fc:ff:7c:d6:fc:0a:74:c5:80:ed:63:c5:
68:5b:15:f3:c5:ba:cf:ce:bd:f5:78:17:0f:01:2c:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:B2:6F:A4:9D:41:A3:62:8E:B2:83:1A:34:20:22:02:FE:60:AE
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b6:12:83:e3:dd:1f:31:00:d9:e7:cd:36:bb:db:67:25:56:
00:5f:1e:70:88:c6:c8:cd:e2:c9:e3:bd:de:e9:d2:4e:2c:10:
9f:48:e4:eb:f3:8a:55:07:a5:da:3c:05:a2:96:af:1b:c3:a4:
e5:7d:19:8b:6b:d1:d6:09:75:8c:d3:37:b0:00:49:47:73:6a:
a9:01:ce:10:15:45:55:82:d3:44:e6:73:17:39:f8:e5:d2:49:
a3:c6:bb:58:e1:cf:68:a3:06:80:53:12:f7:7e:83:10:7a:83:
81:1d:60:aa:39:ce:16:95:a5:39:03:51:4b:18:2d:4d:eb:79:
3c:09:a0:64:54:46:13:5f:7c:03:72:7b:bb:bc:8e:cc:e1:37:
00:ea:76:4b:dd:a7:49:40:be:81:50:72:50:9a:5f:51:eb:5b:
09:01:ae:9f:0a:14:1d:d8:09:c4:00:4f:18:d2:bd:ee:72:57:
3a:01:1a:82:83:43:a8:1c:d4:9b:7b:76:f3:cb:dc:17:29:42:
73:ec:3f:6e:3d:3b:8c:ce:2b:d0:20:94:af:e1:d8:79:de:3b:
bd:58:6e:ba:b4:6a:e1:08:d3:59:8a:46:f7:e2:2a:54:34:d7:
28:c9:ae:50:f2:2c:7c:91:cd:7f:53:7a:c7:fe:b3:a9:e2:fa:
f7:e6:25:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlWxGup6HLTcZYyV7suZ6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjYwMzEzMDQwMTE2WhcNMjYwMzE0MDQwMTE2WjAzMTEwLwYDVQQD
Eyg3MDRlYjI2ZmE0OWQ0MWEzNjI4ZWIyODMxYTM0MjAyMjAyZmU2MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpkgax2iJev4YotaKqdQ0jI4uXbC
N0LFlYD2K9kYDst28eMv1sS3w0HqAXISPsaFxLUci5upUxSK/4+385fEMsqrSznL
2jRl200E2/OpgHH29fkbT5NRJqE9UwBp6IwsqljJTPHnBBSrHCIwrMVdvhMIN9tL
YtRIaNSdklKh42+8F/5m1PHjHLCtN0hAanWaU7t99er17/MK8qFIn4JF9YTukVCp
zI99gRetuMpvJYvbAyoEw+6v5JhPQBe6Wt1RL6oEdaw/9vMVexc4lnj3myNOQVbu
gnq4j1eKJYhK409E74z8/3zW/Ap0xYDtY8VoWxXzxbrPzr31eBcPASzyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBOsm+knUGjYo6ygxo0ICIC/mCuMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrYSg+Pd
HzEA2efNNrvbZyVWAF8ecIjGyM3iyeO93unSTiwQn0jk6/OKVQel2jwFopavG8Ok
5X0Zi2vR1gl1jNM3sABJR3NqqQHOEBVFVYLTROZzFzn45dJJo8a7WOHPaKMGgFMS
936DEHqDgR1gqjnOFpWlOQNRSxgtTet5PAmgZFRGE198A3J7u7yOzOE3AOp2S92n
SUC+gVByUJpfUetbCQGunwoUHdgJxABPGNK97nJXOgEagoNDqBzUm3t288vcFylC
c+w/bj07jM4r0CCUr+HYed47vVhuurRq4QjTWYpG9+IqVDTXKMmuUPIsfJHNf1N6
x/6zqeL69+YlHw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:45:38 2026 by rpki-client