Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: 73/56eubVXLGubJ8Droo6++g6574DUGGI2T60nqL01k=
Subject key identifier: 76:09:D6:C5:67:13:5A:2C:B7:EF:CC:68:83:B8:C5:CE:2E:6F:5F:1B
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019E770B3074919972680E2AAF49DB30EECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 0B5E
Signing time: Sat 30 May 2026 04:01:22 +0000
Manifest this update: Sat 30 May 2026 04:01:22 +0000
Manifest next update: Sun 31 May 2026 04:01:22 +0000
Files and hashes: 1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: VYumsayy+s95o7RqlmCN9vLNEyriWYjqz8aM0macAi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:77:0b:30:74:91:99:72:68:0e:2a:af:49:db:30:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: May 30 04:01:22 2026 GMT
Not After : May 31 04:01:22 2026 GMT
Subject: CN=7609d6c567135a2cb7efcc6883b8c5ce2e6f5f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:4d:a4:3c:26:13:94:46:3d:91:31:d4:c3:
50:ba:40:8a:37:44:69:d9:ae:00:42:a2:a0:52:8c:
8c:28:ae:aa:27:7a:5d:33:c0:2b:6b:07:da:79:8d:
5c:9a:ab:cd:d0:a5:d2:89:29:6b:37:ce:6d:3f:09:
e3:87:9b:4a:99:b7:ee:57:15:9d:26:06:40:ae:22:
a8:bd:dc:93:ce:af:8e:c3:c9:53:74:fd:8c:7e:26:
75:f9:cb:35:14:a0:25:08:1c:d3:b4:47:d8:03:60:
50:8e:c2:36:6a:6e:2c:64:77:90:90:71:3d:0d:c7:
fa:05:fb:5e:a4:a8:87:40:d6:45:72:36:c5:66:01:
84:0e:ba:b8:4c:c4:b1:fb:59:96:2b:f2:e8:d3:54:
0a:29:22:4c:dd:2b:ea:01:ea:93:fd:4b:6c:b1:10:
b4:5b:03:54:5a:40:52:77:af:eb:7b:dc:6d:1c:de:
85:65:2f:b0:af:4a:d9:ad:4e:82:94:18:aa:fd:11:
8b:85:09:e1:9d:04:58:5a:95:6f:a4:dd:86:92:66:
1e:33:ed:92:7f:3b:a8:13:f2:fd:aa:11:61:51:42:
2c:c8:fc:e4:0d:15:0f:22:0a:85:18:40:1d:42:42:
90:17:ad:48:5a:52:ed:bc:a4:c3:9e:61:87:1b:f6:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:D6:C5:67:13:5A:2C:B7:EF:CC:68:83:B8:C5:CE:2E:6F:5F:1B
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:ad:60:11:39:07:bd:1a:5b:3c:37:01:8f:1c:19:c0:35:
c0:9e:34:9d:38:c1:99:f6:cf:95:4a:2c:55:76:a4:c2:84:29:
7d:d8:f0:7a:19:39:53:cf:b2:08:df:c9:81:32:99:d4:9a:9f:
04:18:e0:0d:60:56:a0:48:62:6c:fe:3b:13:5e:13:a9:0c:b4:
c0:8e:d3:0b:22:df:88:90:67:b1:14:c7:0a:70:6e:58:69:0e:
8f:d2:18:fe:33:0d:30:5d:d4:a2:63:71:35:b0:9e:00:91:ca:
1d:b8:14:cc:c5:fa:f0:89:17:5d:12:28:bb:57:08:ef:f8:b5:
1c:ae:1a:f2:be:92:83:bc:33:d4:79:e1:9a:42:84:06:8f:ae:
af:7d:82:e6:62:bb:82:8a:69:4b:c3:94:a8:87:3a:96:94:9d:
e8:77:2b:2f:5d:75:2b:64:82:c7:4f:a1:d4:6e:57:eb:e3:17:
19:bc:2f:44:29:a7:79:a2:81:94:04:fe:3b:bd:dc:19:9b:4f:
07:0a:5c:98:34:ea:55:7a:ba:b6:40:c6:3b:d2:41:a9:4e:c3:
23:8b:86:a5:74:35:a4:06:1a:60:56:73:df:70:07:b1:b8:06:
73:03:08:2d:3c:52:02:fc:c0:6e:69:67:9d:a8:16:a6:e0:64:
07:f1:5a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ53CzB0kZlyaA4qr0nbMO7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjYwNTMwMDQwMTIyWhcNMjYwNTMxMDQwMTIyWjAzMTEwLwYDVQQD
Eyg3NjA5ZDZjNTY3MTM1YTJjYjdlZmNjNjg4M2I4YzVjZTJlNmY1ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKxNpDwmE5RGPZEx1MNQukCKN0Rp
2a4AQqKgUoyMKK6qJ3pdM8ArawfaeY1cmqvN0KXSiSlrN85tPwnjh5tKmbfuVxWd
JgZAriKovdyTzq+Ow8lTdP2MfiZ1+cs1FKAlCBzTtEfYA2BQjsI2am4sZHeQkHE9
Dcf6BftepKiHQNZFcjbFZgGEDrq4TMSx+1mWK/Lo01QKKSJM3SvqAeqT/UtssRC0
WwNUWkBSd6/re9xtHN6FZS+wr0rZrU6ClBiq/RGLhQnhnQRYWpVvpN2GkmYeM+2S
fzuoE/L9qhFhUUIsyPzkDRUPIgqFGEAdQkKQF61IWlLtvKTDnmGHG/ZG1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYJ1sVnE1ost+/MaIO4xc4ub18bMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnutYBE5
B70aWzw3AY8cGcA1wJ40nTjBmfbPlUosVXakwoQpfdjwehk5U8+yCN/JgTKZ1Jqf
BBjgDWBWoEhibP47E14TqQy0wI7TCyLfiJBnsRTHCnBuWGkOj9IY/jMNMF3UomNx
NbCeAJHKHbgUzMX68IkXXRIou1cI7/i1HK4a8r6Sg7wz1HnhmkKEBo+ur32C5mK7
goppS8OUqIc6lpSd6HcrL111K2SCx0+h1G5X6+MXGbwvRCmneaKBlAT+O73cGZtP
BwpcmDTqVXq6tkDGO9JBqU7DI4uGpXQ1pAYaYFZz33AHsbgGcwMILTxSAvzAbmln
nagWpuBkB/FaDg==
-----END CERTIFICATE-----
Generated at Sat May 30 09:53:43 2026 by rpki-client